Overview
overview
4Static
static
3j1699-3-ve...es.doc
windows7-x64
4j1699-3-ve...es.doc
windows10-2004-x64
1j1699-3-ve...us.xls
windows7-x64
1j1699-3-ve...us.xls
windows10-2004-x64
1j1699-3-ve...at.doc
windows7-x64
4j1699-3-ve...at.doc
windows10-2004-x64
1j1699-3-ve...02.exe
windows7-x64
1j1699-3-ve...02.exe
windows10-2004-x64
1j1699-3-ve...st.vbs
windows7-x64
1j1699-3-ve...st.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
j1699-3-ver-17.04.02/J1699 User Notes.doc
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
j1699-3-ver-17.04.02/J1699 User Notes.doc
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
j1699-3-ver-17.04.02/J1699-3 Work Status.xls
Resource
win7-20231025-en
Behavioral task
behavioral4
Sample
j1699-3-ver-17.04.02/J1699-3 Work Status.xls
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
j1699-3-ver-17.04.02/LogFileFormat.doc
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
j1699-3-ver-17.04.02/LogFileFormat.doc
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
j1699-3-ver-17.04.02/Release/j1699-ver-17.04.02.exe
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
j1699-3-ver-17.04.02/Release/j1699-ver-17.04.02.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral9
Sample
j1699-3-ver-17.04.02/SidRequest.vbs
Resource
win7-20231020-en
Behavioral task
behavioral10
Sample
j1699-3-ver-17.04.02/SidRequest.vbs
Resource
win10v2004-20231023-en
General
-
Target
7a67c0c7c633caa72928f5fcf4d1b607a0f687cba4b3123087e374e4d5ec7891
-
Size
1.6MB
-
MD5
7d9b25fff71c22ea934ed5b66e039660
-
SHA1
2084533258088d70d3c69bc31ec8f3eb87f4d7d6
-
SHA256
7a67c0c7c633caa72928f5fcf4d1b607a0f687cba4b3123087e374e4d5ec7891
-
SHA512
6d80080d84f57a0ce9d019a337c9d2b9eaaba08b866a18e562e160288672c9fc4cfb6c6b9261c5aea019745b67640e2a1e741b1771112f66458ee557fbc6c9ba
-
SSDEEP
49152:HciAMexKVmECWIAMC3194HdI8N2hf57N5l97oN:8iAMeUQWIAb3190G6IBZZ76
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/j1699-3-ver-17.04.02/Release/j1699-ver-17.04.02.exe
Files
-
7a67c0c7c633caa72928f5fcf4d1b607a0f687cba4b3123087e374e4d5ec7891.zip
-
j1699-3-ver-17.04.02/ChangeLog
-
j1699-3-ver-17.04.02/CheckIDSupport.c
-
j1699-3-ver-17.04.02/CheckMILLight.c
-
j1699-3-ver-17.04.02/ClearCodes.c
-
j1699-3-ver-17.04.02/ConnectProtocol.c
-
j1699-3-ver-17.04.02/DetermineProtocol.c
-
j1699-3-ver-17.04.02/DisconnectProtocol.c
-
j1699-3-ver-17.04.02/FindJ2534Interface.c
-
j1699-3-ver-17.04.02/InitProtocolList.c
-
j1699-3-ver-17.04.02/J1699 User Notes.doc.doc windows office2003
-
j1699-3-ver-17.04.02/J1699-3 Work Status.xls.xls windows office2003
-
j1699-3-ver-17.04.02/LogFileFormat.doc.doc windows office2003
-
j1699-3-ver-17.04.02/LogMsg.c
-
j1699-3-ver-17.04.02/LogPrint.c
-
j1699-3-ver-17.04.02/README.txt
-
j1699-3-ver-17.04.02/ReadIni.c
-
j1699-3-ver-17.04.02/Release/j164B7C.tmp
-
j1699-3-ver-17.04.02/Release/j1699-ver-17.04.02.exe.exe windows:6 windows x86
c9a353ab9cbd6af08caf2f90ef96c521
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
VerifyVersionInfoA
SetConsoleCtrlHandler
GetStdHandle
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
GetTempFileNameA
SetConsoleCursorPosition
SetConsoleTextAttribute
DeleteFileA
FreeLibrary
MoveFileA
WriteConsoleW
VerSetConditionMask
LoadLibraryA
GetProcAddress
GetConsoleScreenBufferInfo
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
GetConsoleCP
WriteFile
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetCurrentThread
CloseHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
SetFilePointerEx
GetTimeZoneInformation
WideCharToMultiByte
CreateFileW
SetConsoleMode
GetNumberOfConsoleInputEvents
ReadConsoleInputW
PeekConsoleInputA
ReadConsoleW
GetFileSizeEx
HeapReAlloc
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
HeapSize
SetEndOfFile
DecodePointer
advapi32
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 588KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
j1699-3-ver-17.04.02/Release/j16AD52.tmp
-
j1699-3-ver-17.04.02/Release/j16DA14.tmp
-
j1699-3-ver-17.04.02/Release/j16F057.tmp
-
j1699-3-ver-17.04.02/ScreenOutput.c
-
j1699-3-ver-17.04.02/ScreenOutput.h
-
j1699-3-ver-17.04.02/SidRequest.c.vbs
-
j1699-3-ver-17.04.02/SidResetResponseData.c
-
j1699-3-ver-17.04.02/SidSaveResponseData.c
-
j1699-3-ver-17.04.02/StopTest.c
-
j1699-3-ver-17.04.02/TestToVerifyInUseCounters.c
-
j1699-3-ver-17.04.02/TestToVerifyPerformanceCounters.c
-
j1699-3-ver-17.04.02/TestToVerifyPermanentCodes.c
-
j1699-3-ver-17.04.02/TestWithConfirmedDtc.c
-
j1699-3-ver-17.04.02/TestWithFaultRepaired.c
-
j1699-3-ver-17.04.02/TestWithNoDtc.c
-
j1699-3-ver-17.04.02/TestWithNoFaultAfter3DriveCycles.c
-
j1699-3-ver-17.04.02/TestWithPendingDtc.c
-
j1699-3-ver-17.04.02/VehicleReport.c
-
j1699-3-ver-17.04.02/VerifyControlSupportAndData.c
-
j1699-3-ver-17.04.02/VerifyDTCPendingData.c
-
j1699-3-ver-17.04.02/VerifyDTCStoredData.c
-
j1699-3-ver-17.04.02/VerifyDiagnosticBurstSupport.c
-
j1699-3-ver-17.04.02/VerifyDiagnosticSupportAndData.c
-
j1699-3-ver-17.04.02/VerifyFreezeFrameSupportAndData.c
-
j1699-3-ver-17.04.02/VerifyLinkActive.c
-
j1699-3-ver-17.04.02/VerifyMILData.c
-
j1699-3-ver-17.04.02/VerifyMonitorTestSupportAndResults.c
-
j1699-3-ver-17.04.02/VerifyO2TestResults.c
-
j1699-3-ver-17.04.02/VerifyPermanentCodeSupport.c
-
j1699-3-ver-17.04.02/VerifyReservedServices.c
-
j1699-3-ver-17.04.02/VerifyReverseOrderSupport.c
-
j1699-3-ver-17.04.02/VerifyVehicleInformationSupportAndData.c
-
j1699-3-ver-17.04.02/VerifyVehicleState.c
-
j1699-3-ver-17.04.02/j1699.c
-
j1699-3-ver-17.04.02/j1699.h
-
j1699-3-ver-17.04.02/j1699.sln
-
j1699-3-ver-17.04.02/j1699.vcxproj.xml
-
j1699-3-ver-17.04.02/j2534.h