60dd6c05cae609d9bc47defe5082ce10_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

60dd6c05cae609d9bc47defe5082ce10_JaffaCakes118
Size

88KB
MD5

60dd6c05cae609d9bc47defe5082ce10
SHA1

b0a8106101ac4caf798cd9ee23a62869f3cfbc7c
SHA256

4acf528b85618c6fb705255a0d955f5caf9c1e5824ec2b5dd999055e948bdc52
SHA512

6652b4e51c3882c18e30eea793b7a714d45cef9b59ca9007c452228e9dd4c66b65cf46939ab544d410f56e55ab6d20c0d64d536d51f04a701ac25c79b6b5d1e2
SSDEEP

1536:wzzHr0hWRxsYAJBuuZcUUJq0LEX/18HUTlSDTryvZF7ARfKfvKDXS8yODrZTk:CjrBLJq0wTTlSDurODrZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60dd6c05cae609d9bc47defe5082ce10_JaffaCakes118

Files

60dd6c05cae609d9bc47defe5082ce10_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b9ccb7f891aa358be84feeda4a94d77f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

commveh32

?setstatus@Buf@@QAEXW4T_CM_SectionError@@DPAD@Z
?get@Buf@@QAEIPADII@Z
?clear@Buf@@QAEID@Z
?set@Buf@@QAEIJI@Z
??1Stock@@QAE@XZ
??0Stock@@QAE@XZ
?com@Buf@@QAEIQADPAV1@@Z
?getsizebuf@Buf@@QAEJXZ
?get@Buf@@QAEIPAEI@Z
?set@Buf@@QAEIPADII@Z
?set@Buf@@QAEIEI@Z
??1Buf@@QAE@XZ
??0Buf@@QAE@XZ
?getServiceUnitParamValue@Buf@@QAEIW4T_PARAM_TYPE@@PBD_N@Z
?getServiceUnitParamStates@Buf@@QAEIPBD0W4T_PARAM_TYPE@@PADAAF_N@Z
?getServiceUnitALLParamsInfo@Buf@@QAEIPBD0AAKW4T_PARAM_TYPE@@PAUT_PARAM_INFO@@_N@Z
?getServiceUnitNbParams@Buf@@QAEIPBD0W4T_PARAM_TYPE@@AAJ_N@Z
?GetECUFaultFrame@Buf@@QAEIXZ
?GetECUFaultType@Buf@@QAEIXZ
?set@Buf@@QAEIPADH@Z
?DejaDedans@Buf@@QAEHPADIIIE@Z
?getServiceUnitALLParamsValue@Buf@@QAEIW4T_PARAM_TYPE@@G@Z
?OpenDefaultMessagerie@Buf@@QAEIXZ
?destroyServiceUnit@Buf@@QAEIXZ
?createServiceUnit@Buf@@QAEIPBDPAD_N@Z
?destroyService@Buf@@QAEIXZ
?createService@Buf@@QAEIPBD@Z
?ExecuteFnc@Buf@@QAEIPBDAAVStock@@@Z
?getstatuscom@Buf@@QAEIXZ
?getstatus@Buf@@QAEIXZ
?SetContexteTEP@Stock@@QAEIPAD0@Z
?identifyEcuVersion@Buf@@QAEIJ@Z
?getRequestsAndParametersIdent@Buf@@QAEIXZ
?GetDescList@Buf@@QAEIPBD@Z
?get@Buf@@QAEIPAV1@IIH@Z
?concat@Buf@@QAEIPAV1@@Z
?move@Buf@@QAEIPAV1@II@Z
?set@Buf@@QAEIFI@Z
?getMessagerieServiceUnitsName@Buf@@QAEIAAJPBD_N@Z
?AFputstatus@Buf@@QAEXDPAD@Z
?move@Buf@@QAEIPAV1@@Z
?getServiceUnitECUAnswer@Buf@@QAEIXZ
?setServiceUnitParamValue@Buf@@QAEIW4T_PARAM_TYPE@@PBDF1@Z
?Temporisation@@YAXK@Z
?mGetTableLID@C_CTX_FunContext@@QBEPAVTableLID@@XZ
?SetTableLIDPleine@TableLID@@QAEXH@Z
?GetTableLIDPleine@TableLID@@QBEHXZ
?AffichTableLID@TableLID@@QBEXXZ
?GetListFamLID@TableLID@@QBEHPAE@Z
?GetECUName@TableLID@@QBEXPAD@Z
?RemplirTableLID@TableLID@@QAE?AW4STATUS_LID@@XZ
?GetECUFrame@TableLID@@QAEXPAVBuf@@@Z

dll_pgp

?ExecuteTrame@@YA_NPADW4T_SERVICEUNIT_TYPE@@PAVCmd_Mess@@HAAVStock@@W4eTypeCalculCRC@@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AddProcessingKey@XmlFile@@QAE_NPBD@Z
?AddFrameKey@XmlFile@@QAE_NPBD@Z
?AddProperty@XmlFile@@QAE_NPBD00000@Z
?AddDtcInter@XmlFile@@QAE_NPBD@Z
?GetChaineBuf@@YAHAAVBuf@@HAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AddDtc@XmlFile@@QAE_NPBD@Z
?StrBruteToValConv@@YAJPAD0H@Z
?Create@XmlFile@@QAEPADXZ
??1XmlFile@@UAE@XZ
??0XmlFile@@QAE@XZ
?get_lLength@ParValMS@@QAE?BJXZ
?getPosTabParam@Cmd_Mess@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?get_iDataTypeId@ParValMS@@QAE?BHXZ
?get_TabParam@Cmd_Mess@@QAEPAPAVPar_Mess@@XZ
??1Cmd_Mess@@UAE@XZ
??0Cmd_Mess@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4T_PARAM_TYPE@@W4TypeFonction@@PAVStock@@@Z
?output@GestDebug@@QBAXHPBDZZ
?Instance@GestDebug@@SAPAV1@XZ
?ExecuteComInitFin@@YA_NPADW4T_SERVICEUNIT_TYPE@@AAVStock@@@Z
?BufToString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVBuf@@@Z
?SetMnemo@GestComBuf@@SA_NAAVBuf@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1H@Z
?getRawMnemo@GestComBuf@@QAEHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?execute@GestComBuf@@QAE_NPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1GestComBuf@@UAE@XZ
??0GestComBuf@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?getValues@ConfPgp@@QBEPBQBEPBE@Z
?Instance@ConfPgp@@SAPAV1@XZ
?RecupValParam@@YA_NAAVStock@@W4T_PARAM_TYPE@@PAVCmd_Mess@@@Z
?SetPrivateInfo@GestAppContext@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetParamValue@GestAppContext@@QAEFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0_N@Z
?FormatExitBuffer@GestAppContext@@QAEAAVBuf@@AAVStock@@@Z
??1GestAppContext@@UAE@XZ
??0GestAppContext@@QAE@PAVStock@@@Z
?Split@GestComBuf@@SAHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@D@Z
?GetMnemoRT@GestComBuf@@SAHAAVBuf@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z
?execute@GestComBuf@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4eTypeCalculCRC@@PAV23@@Z
?getTypedService@CCCP@@SA?AV?$vector@US_FrameIdentifier@@V?$allocator@US_FrameIdentifier@@@std@@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?getECUFrame@CCCP@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1CCCP@@UAE@XZ
??0CCCP@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAVStock@@W4T_PARAM_TYPE@@0@Z
?GetCalculator@GestAppContext@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetDescriptor@GestAppContext@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetEngine@GestAppContext@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetVehicule@GestAppContext@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetCalcArea@GestAppContext@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?TelecodageRun@TlcdDLPR@@QAEXAAVStock@@W4eTypeAlgoConfPoss@@@Z
??1TlcdDLPR@@UAE@XZ
??0TlcdDLPR@@QAE@AAVBuf@@PAVStock@@@Z
?Free@PopUpProgress@@SAXXZ
?Instance@PopUpProgress@@SAPAV1@XZ
?changeServicesAndServicesUnitsNames@TlcdDLPR@@QAEXAAVBuf@@@Z
?GetParamValue@GestAppContext@@QAEFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@@Z
?processECUAnswer@C_ActuatorTest@@QAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?launchATRequest@C_ActuatorTest@@QAE_NXZ
?overloadParameters@C_ActuatorTest@@QAE_NXZ
?activateServiceAndServiceUnit@C_ActuatorTest@@QAE_NXZ
?parseXMLBuf@C_ActuatorTest@@QAE_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1C_ActuatorTest@@UAE@XZ
??0C_ActuatorTest@@QAE@PAVStock@@@Z
?getType@JobException@@QAE?AW4ExceptionType@@XZ
?manage@C_DataWriteManager@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@@Z
??1C_DataWriteManager@@UAE@XZ
??0C_DataWriteManager@@QAE@PAVStock@@@Z
?convValeurBrute@FormLin@@UAE_NNPAE@Z
?convValeurCalculee@FormLin@@UAENPAE@Z
??0FormLin@@QAE@NNPBDI@Z
?ExecuteCom@@YA_NPADPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AddFreezeFrame@XmlFile@@QAE_NPBD00000@Z
?AsciiToUChar@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAE@Z
??1FormLin@@UAE@XZ
?toString@GestComBuf@@SAXPBEHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?toBinary@GestComBuf@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPAEAAH@Z
?AddParameter@GestAppContext@@QAEFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0_N@Z
?SetMnemonicValue@@YAHPBDPADAAVStock@@@Z
?AsciiToUChar@@YAXPADPAE@Z
?GetMnemonicValue@@YAHPBDPADAAVStock@@@Z

msvcp80

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?setprecision@std@@YA?AU?$_Smanip@H@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

msvcr80

free
malloc
_ltoa
atol
strtol
strncpy
?terminate@@YAXXZ
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_invalid_parameter_noinfo
??_V@YAXPAX@Z
??3@YAXPAX@Z
sscanf
??2@YAPAXI@Z
strncat
atoi
strncmp
sprintf
_wassert
__CxxFrameHandler3
memset
memcpy
_CxxThrowException

kernel32

Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange

Exports

Exports

APPGEN61
APPGEN_RAW152
DATAWRITE143
ECU_DESCRIPTOR125
ECU_DESCRIPTOR_RC1077
EFFDEF22
FINDIAG52
FINDMEMZONE77
GET_SEED132
INITDIAG51
LECTDEF32
LECTDEFECU23
LECTUREZI53
SEND_KEY133
SPEC_TLCDDLPR_MULTILID1280
SPEC_TRAME_MESS2528
TAM_MCC_GEN140
TA_GEN142
TLCD_DLPR128
TRAMEGEN56
VARCONTEXTE145

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9ccb7f891aa358be84feeda4a94d77f

Headers

File Characteristics

Imports

commveh32

dll_pgp

msvcp80

msvcr80

kernel32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB