[Punkbastard]

Hello guys,

Hereby I release my Downloader.
It's a simple Builder & Stub program.

It has the next features:

[*] Silently downloads and executes a file from a given direct link
[*] Options to drop downloaded file in Temp and AppData folder
[*] Hide the downloaded file (Sets file attributes to hidden)
[*] Set downloaded file as System file (Sets file attributes to system)
[*] Execution Delay (Executes X seconds after download)
[*] Anti-Sandboxie (immediately terminates program and does not download & execute file.
[*] Execution message (Shows a messagebox before or after download & execute)

The output it not FUD, with a HQ icon and legit assembly it's around 5/59 (AVG, Avira and some shitty AV's)

The meaning of releasing this is to give new coders a basic idea of a Builder & Stub program, passing strings to the stub and handle them inside the stub.

I made some comments in the code for you to understand it.

I also highly recommend you to read this tutorial.

Screenshot (Click to View)



v1.0: Here's the source download: Dropbox-Link

v2.0: Here's the source download: Coming soon.
Changelog (Click to View)

- Removed redundant code
- Stub and builder now compile with Option Strict On
- Added multithreading, stub stays responsive when in execution delay
- Added download with WebClient instead of My.Computer.Network

In order to open this .ZIP file you'll need to decrypt the following:

HAZZ-15 -> ZARA-128(HF!) -> ATOM-128 -> ROT13 -> Plain

Code

+KzojgiG+Kq=jgiG+KzSjgiG+KQLjgiG+Kq=jgiG+KyIjgiG+KzojgiG+Ke=jgiG+Ky=jgiG+KyIjgiG+KzojgiG+KeojgiG+KyGjgiG+KQxjgiG+Ky=jgiG+KeGjgiG+KqdjgiG+KQdjgiG+KebjgiG+KeSjgiG+KzYjgiG+KeSjgiG+KyYjgiG+KvxjgiG+KzYjgiG+KQYjgiG+KyojgiG+KiLjgiG+KzIjgiG+Ki=jgiG+KyojgiG+Kyb

Credits to Aeonhack for his NetSeal-Theme

[Fʀᴀɴᴋɪᴇ]

Should be interesting. Thank you for sharing this with the community.

[titanbullet]

I keep getting errors in decoding on hazz15,too bad,i really wanted to try it. Thanks for sharing anyway.

[Punkbastard]

I keep getting errors in decoding on hazz15,too bad,i really wanted to try it. Thanks for sharing anyway.

That's right, just ignore the errors and it will just succeed.
Don't know why I gives errors but just continue and you'll get the pass :-)

[Nikey646]

For anyone who is interested: The password is !YouGotThePassword!

P.S: OP, test your password's Encoding's to make sure they work correctly. Oh, and you post the Decryption order, not the Encryption order last time i checked.

Edit: Looking at the source, it's sub-par at best. You use the EOF compilation method if i'm correct? Why not use Codedom, and generate a .resx file with the supplied data, then provide it to the source. Much cleaner, no writing to the end of Stubs, and no additional .exe files with the builder.

Looking at the stub....It's a form with a transparency key? You would of been better off creating a Console Application, and setting it to a Windows Application project type, you won't have an entire WinForms application running then. If this was coded in C# you could also intercept the Program class and rather than starting the application, run your code there.

Downloading the file via My.Computer.Network? At least use a WebClient....

redundant code -- your write basically the same code TWICE once for Temp Folder and once for Appdata, rather than using Path.Combine to set a Base Directory, then Path.Combine to set the Directory + Filename, meaning you would only need to write the code once, and you wouldn't need to call Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) or Path.GetTempPath() multiple times.

more redundant code -- you use If and ElseIf to set the MessageBox Icon (Not even providing a No Icon option!), rather than using Enum.TryParse() to get the value from the string, and pass that along into the MessageBox.Show()

Your stub code doesn't compile with Option Strict On, but unlike most releases here, the errors is just a minimal 2. One about conversion of a Int64 to an Int32, and the other about using an Int64 as a Boolean....wai.

but worst of all, your "delay" is a Thread.Sleep on the UI Thread...If the delay is large enough, i'm fairly sure it'll appear as "Not Responding" in Task Manager throwing HUGE warning flags to any user who looks at Task Manager...

Overall: It could be worse. It could make use of some modern techniques (Codedom), since you are not concerned with the stub being FUD, you should also look into Multi-Threading or Async/Await + Task.Delay(), and reduce your redundant code

[Malware]

For anyone who is interested: The password is !YouGotThePassword!

P.S: OP, test your password's Encoding's to make sure they work correctly. Oh, and you post the Decryption order, not the Encryption order last time i checked.

Edit: Looking at the source, it's sub-par at best. You use the EOF compilation method if i'm correct? Why not use Codedom, and generate a .resx file with the supplied data, then provide it to the source. Much cleaner, no writing to the end of Stubs, and no additional .exe files with the builder.

Looking at the stub....It's a form with a transparency key? You would of been better off creating a Console Application, and setting it to a Windows Application project type, you won't have an entire WinForms application running then. If this was coded in C# you could also intercept the Program class and rather than starting the application, run your code there.

Downloading the file via My.Computer.Network? At least use a WebClient....

redundant code -- your write basically the same code TWICE once for Temp Folder and once for Appdata, rather than using Path.Combine to set a Base Directory, then Path.Combine to set the Directory + Filename, meaning you would only need to write the code once, and you wouldn't need to call Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) or Path.GetTempPath() multiple times.

more redundant code -- you use If and ElseIf to set the MessageBox Icon (Not even providing a No Icon option!), rather than using Enum.TryParse() to get the value from the string, and pass that along into the MessageBox.Show()

Your stub code doesn't compile with Option Strict On, but unlike most releases here, the errors is just a minimal 2. One about conversion of a Int64 to an Int32, and the other about using an Int64 as a Boolean....wai.

but worst of all, your "delay" is a Thread.Sleep on the UI Thread...If the delay is large enough, i'm fairly sure it'll appear as "Not Responding" in Task Manager throwing HUGE warning flags to any user who looks at Task Manager...

Overall: It could be worse. It could make use of some modern techniques (Codedom), since you are not concerned with the stub being FUD, you should also look into Multi-Threading or Async/Await + Task.Delay(), and reduce your redundant code

This, and instead of dropping the bytes, run the bytes straight in memory

[Punkbastard]

For anyone who is interested: The password is !YouGotThePassword!

P.S: OP, test your password's Encoding's to make sure they work correctly. Oh, and you post the Decryption order, not the Encryption order last time i checked.

Edit: Looking at the source, it's sub-par at best. You use the EOF compilation method if i'm correct? Why not use Codedom, and generate a .resx file with the supplied data, then provide it to the source. Much cleaner, no writing to the end of Stubs, and no additional .exe files with the builder.

Looking at the stub....It's a form with a transparency key? You would of been better off creating a Console Application, and setting it to a Windows Application project type, you won't have an entire WinForms application running then. If this was coded in C# you could also intercept the Program class and rather than starting the application, run your code there.

Downloading the file via My.Computer.Network? At least use a WebClient....

redundant code -- your write basically the same code TWICE once for Temp Folder and once for Appdata, rather than using Path.Combine to set a Base Directory, then Path.Combine to set the Directory + Filename, meaning you would only need to write the code once, and you wouldn't need to call Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) or Path.GetTempPath() multiple times.

more redundant code -- you use If and ElseIf to set the MessageBox Icon (Not even providing a No Icon option!), rather than using Enum.TryParse() to get the value from the string, and pass that along into the MessageBox.Show()

Your stub code doesn't compile with Option Strict On, but unlike most releases here, the errors is just a minimal 2. One about conversion of a Int64 to an Int32, and the other about using an Int64 as a Boolean....wai.

but worst of all, your "delay" is a Thread.Sleep on the UI Thread...If the delay is large enough, i'm fairly sure it'll appear as "Not Responding" in Task Manager throwing HUGE warning flags to any user who looks at Task Manager...

Overall: It could be worse. It could make use of some modern techniques (Codedom), since you are not concerned with the stub being FUD, you should also look into Multi-Threading or Async/Await + Task.Delay(), and reduce your redundant code

Thanks for your reply, you took really the time to write this, I appreciate that.

I'll definitely look in everything you mentioned and improve the code. Especially the Thread.Sleep() lol, I haven't really tested this.

A question, why do you prefer WebClient over My.Computer.Network?

Another question, is Task.Delay() supported in .NET 2.0?

Also about the password, crypo is just throwing a random decryption error, ignore the error and it'll just be fine.

[Nikey646]

Thanks for your reply, you took really the time to write this, I appreciate that.

I'll definitely look in everything you mentioned and improve the code. Especially the Thread.Sleep() lol, I haven't really tested this.

A question, why do you prefer WebClient over My.Computer.Network?

Another question, is Task.Delay() supported in .NET 2.0?

Also about the password, crypo is just throwing a random decryption error, ignore the error and it'll just be fine.

WebClient directly wraps the HttpWebRequests, and is universal accross all .Net languages. My.Computer.* are VB.Net only related, and while i never checked presumably they are not standard .Net functions.

Task.* is a .Net 3.0 (Maybe 4.0, not sure....), Async/Await is a .Net 4.5. If you are not willing to drop the 2.0 depenency for something higher, then you'll need to use multi-threading.

[SIM-2071734]

Dat password...! best password ever 11/10 IGN.

[Raymond]

If someone was download again please. Link died.

[©Ratatouille™]

Link dead you can update please bro

[nathan72389]

Link dead you can update please bro

if only there was a way to talk to the OP directly. but wait!
there is, its called a PM.