a4ea8ca6a9b5a8ee68eef77c0424ca9e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a4ea8ca6a9b5a8ee68eef77c0424ca9e_JaffaCakes118
Size

184KB
MD5

a4ea8ca6a9b5a8ee68eef77c0424ca9e
SHA1

47d1098109639559f01e3e87df1eef5f482285c1
SHA256

a4c2c7e534af3c22c6c06091c15455304a96f4e70838ee2807388a894488d200
SHA512

dc4e34838b60ed62295217a35b809bf364f2e6d55bb138df47fe3e8affb22422dd7a1f9b5ec62f9a9337a89a0af75270611a53053cbbdff9da8e3b253684fffe
SSDEEP

3072:LzgzToEN4ocjC1HzLcXT9xR9mKH9Ttw35ODyLLfOhh:4z7zLcX5U6Tt85ODkLi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4ea8ca6a9b5a8ee68eef77c0424ca9e_JaffaCakes118

Files

a4ea8ca6a9b5a8ee68eef77c0424ca9e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ec869ad55ff83d0586cc4bfcc72ff89c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

commveh32

?getsizebuf@Buf@@QAEJXZ
?get@Buf@@QAEIPADII@Z
?get@Buf@@QAEIPAEI@Z
?clear@Buf@@QAEID@Z
?set@Buf@@QAEIPADII@Z
?set@Buf@@QAEIEI@Z
??1Buf@@QAE@XZ
??0Buf@@QAE@XZ
??1Stock@@QAE@XZ
??0Stock@@QAE@XZ
?com@Buf@@QAEIQADPAV1@@Z
?OpenDefaultMessagerie@Buf@@QAEIXZ
?destroyServiceUnit@Buf@@QAEIXZ
?createServiceUnit@Buf@@QAEIPBDPAD_N@Z
?destroyService@Buf@@QAEIXZ
?createService@Buf@@QAEIPBD@Z
?setstatus@Buf@@QAEXW4T_CM_SectionError@@DPAD@Z
?ExecuteFnc@Buf@@QAEIPBDAAVStock@@@Z
?getstatuscom@Buf@@QAEIXZ
?getstatus@Buf@@QAEIXZ
?set@Buf@@QAEIPADH@Z
?SetContexteTEP@Stock@@QAEIPAD0@Z
?identifyEcuVersion@Buf@@QAEIJ@Z
?getRequestsAndParametersIdent@Buf@@QAEIXZ
?GetDescList@Buf@@QAEIPBD@Z
?get@Buf@@QAEIPAV1@IIH@Z
?concat@Buf@@QAEIPAV1@@Z
?move@Buf@@QAEIPAV1@II@Z
?set@Buf@@QAEIFI@Z
?DejaDedans@Buf@@QAEHPADIIIE@Z
?getMessagerieServiceUnitsName@Buf@@QAEIAAJPBD_N@Z
?AFputstatus@Buf@@QAEXDPAD@Z
?getServiceUnitParamInfo@Buf@@QAEIPBD0W4T_PARAM_TYPE@@0AAUT_PARAM_INFO@@_N@Z
?get@Buf@@QAEIPAFI@Z
?Temporisation@@YAXK@Z
?getServiceUnitParamValue@Buf@@QAEIW4T_PARAM_TYPE@@PBD_N@Z
?getServiceUnitECUAnswer@Buf@@QAEIXZ
?getServiceUnitALLParamsValue@Buf@@QAEIW4T_PARAM_TYPE@@G@Z
?setServiceUnitParamValue@Buf@@QAEIW4T_PARAM_TYPE@@PBDF1@Z
?getServiceUnitParamStates@Buf@@QAEIPBD0W4T_PARAM_TYPE@@PADAAF_N@Z
?getServiceUnitALLParamsInfo@Buf@@QAEIPBD0AAKW4T_PARAM_TYPE@@PAUT_PARAM_INFO@@_N@Z
?getServiceUnitNbParams@Buf@@QAEIPBD0W4T_PARAM_TYPE@@AAJ_N@Z
?set@Buf@@QAEIJI@Z
?move@Buf@@QAEIPAV1@@Z
?GetECUFaultFrame@Buf@@QAEIXZ
?GetECUFaultType@Buf@@QAEIXZ
?get@Buf@@QAEIPAJI@Z
?mGetEcuName@C_CTX_FunContext@@QBEPBDXZ
?mGetVehNom@C_CTX_FunContext@@QAEQBDXZ
?get@Buf@@QAEIPADI@Z
?ReadVoltage@Buf@@QAEIW4ADC_CHANNEL@@@Z
?get@Buf@@QAEIPAMI@Z
?getMessagerieServicesName@Buf@@QAEIAAJ@Z
?SetTableLIDPleine@TableLID@@QAEXH@Z
?GetTableLIDPleine@TableLID@@QBEHXZ
?AffichTableLID@TableLID@@QBEXXZ
?GetListFamLID@TableLID@@QBEHPAE@Z
?GetECUName@TableLID@@QBEXPAD@Z
?RemplirTableLID@TableLID@@QAE?AW4STATUS_LID@@XZ
?GetECUFrame@TableLID@@QAEXPAVBuf@@@Z
?mGetTableLID@C_CTX_FunContext@@QBEPAVTableLID@@XZ

dll_pgp

?output@GestDebug@@QBAXHPBDZZ
?Instance@GestDebug@@SAPAV1@XZ
?ExecuteComInitFin@@YA_NPADW4T_SERVICEUNIT_TYPE@@AAVStock@@@Z
?SetMnemo@GestComBuf@@SA_NAAVBuf@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1H@Z
?getRawMnemo@GestComBuf@@QAEHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?execute@GestComBuf@@QAE_NPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1GestComBuf@@UAE@XZ
??0GestComBuf@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetChaineBuf@@YAHAAVBuf@@HAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?BufToString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVBuf@@@Z
??1Cmd_Mess@@UAE@XZ
??0Cmd_Mess@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4T_PARAM_TYPE@@W4TypeFonction@@PAVStock@@@Z
?getValues@ConfPgp@@QBEPBQBEPBE@Z
?Instance@ConfPgp@@SAPAV1@XZ
?RecupValParam@@YA_NAAVStock@@W4T_PARAM_TYPE@@PAVCmd_Mess@@@Z
??1DlgListeDouble@@UAE@XZ
??0DlgListeDouble@@QAE@XZ
??1ItemDouble@@UAE@XZ
?Valeur@ItemDouble@@QBEPBDXZ
??0ItemDouble@@QAE@PBD00_N@Z
?GetMnemoRT@GestComBuf@@SAHAAVBuf@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z
?toString@GestComBuf@@SAXPBEHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?toBinary@GestComBuf@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPAEAAH@Z
?getFloatMnemo@GestComBuf@@QAEHAAMABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getLongMnemo@GestComBuf@@QAEHAAJABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Reponse@GestComBuf@@QAEAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?Gestion_Dico@@YAXJABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAD@Z
?execute@GestComBuf@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4eTypeCalculCRC@@PAV23@@Z
?SearchSUnit@@YA_NW4T_PARAM_TYPE@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1AAV23@@Z
?IdBack@DlgCom@@2IB
?selectItem@DlgListe@@QAEPAVItem@@H@Z
?resetKeys@DlgCom@@QAEX_N@Z
?Close@DlgCom@@QAEXXZ
?Gestion_Dico_Concat@@YAXJABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAD@Z
?AnswerECUCom@@YA_NAAVStock@@@Z
?waitForUser@DlgCom@@QAEIIW4TypeTempo@@H_N@Z
?showButtons@DlgCom@@QAEXI@Z
?setTitle@DlgCom@@QAEXPBD@Z
?setContent@DlgSimple@@QAEXPBD0@Z
?Infinite@DlgCom@@2IB
?IdValid@DlgCom@@2IB
??1DlgSimple@@UAE@XZ
??0DlgSimple@@QAE@_N0H@Z
?addItem@DlgListeDouble@@QAEXABVItemDouble@@@Z
?SetPrivateInfo@GestAppContext@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetParamValue@GestAppContext@@QAEFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0_N@Z
?FormatExitBuffer@GestAppContext@@QAEAAVBuf@@AAVStock@@@Z
??1GestAppContext@@UAE@XZ
??0GestAppContext@@QAE@PAVStock@@@Z
?Split@GestComBuf@@SAHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@D@Z
?GetDiffMs@Chrono@@QAENXZ
??0Chrono@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Start@Chrono@@QAEXXZ
?SetMnemoRT@GestComBuf@@SA_NAAVBuf@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z
?AfficheDlg_Mess@Dlg_Mess@@QAEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00_N11J1@Z
?CloseDlg_Mess@Dlg_Mess@@QAEXXZ
??1Dlg_Mess@@UAE@XZ
??0Dlg_Mess@@QAE@_N@Z
?SetPrivateInfo@GestAppContext@@QAEXW4eExitStatus@@PAEHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetParamValue@GestAppContext@@QAEFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@@Z
?EraseParam@GestAppContext@@QAEFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?AddFreezeFrame@XmlFile@@QAE_NPBD00000@Z
?AddDtc@XmlFile@@QAE_NPBD@Z
?Create@XmlFile@@QAEPADXZ
??1XmlFile@@UAE@XZ
??0XmlFile@@QAE@XZ
?convValeurBrute@FormLin@@UAE_NNPAE@Z
?convValeurCalculee@FormLin@@UAENPAE@Z
?AsciiToUChar@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAE@Z
??1FormLin@@UAE@XZ
??0FormLin@@QAE@NNPBDI@Z
?StrBruteToValConv@@YAJPAD0H@Z
?ExecuteCom@@YA_NPADPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getTypedService@CCCP@@SA?AV?$vector@US_FrameIdentifier@@V?$allocator@US_FrameIdentifier@@@std@@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?getECUFrame@CCCP@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1CCCP@@UAE@XZ
??0CCCP@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAVStock@@W4T_PARAM_TYPE@@0@Z
?GetCalculator@GestAppContext@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetDescriptor@GestAppContext@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetEngine@GestAppContext@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetVehicule@GestAppContext@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetCalcArea@GestAppContext@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?hideButtons@DlgCom@@QAEXI@Z
?RunTelecoding@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@00PAVStock@@@Z
?Free@PopUpProgress@@SAXXZ
?Instance@PopUpProgress@@SAPAV1@XZ
?changeServicesAndServicesUnitsNames@TlcdDLPR@@QAEXAAVBuf@@@Z
?TelecodageRun@TlcdDLPR@@QAEXAAVStock@@W4eTypeAlgoConfPoss@@@Z
??1TlcdDLPR@@UAE@XZ
??0TlcdDLPR@@QAE@AAVBuf@@PAVStock@@@Z
?processECUAnswer@C_ActuatorTest@@QAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?launchATRequest@C_ActuatorTest@@QAE_NXZ
?overloadParameters@C_ActuatorTest@@QAE_NXZ
?activateServiceAndServiceUnit@C_ActuatorTest@@QAE_NXZ
?parseXMLBuf@C_ActuatorTest@@QAE_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1C_ActuatorTest@@UAE@XZ
??0C_ActuatorTest@@QAE@PAVStock@@@Z
?getType@JobException@@QAE?AW4ExceptionType@@XZ
?manage@C_DataWriteManager@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@@Z
??1C_DataWriteManager@@UAE@XZ
??0C_DataWriteManager@@QAE@PAVStock@@@Z
?ExecuteTrame@@YA_NPADW4T_SERVICEUNIT_TYPE@@PAVCmd_Mess@@HAAVStock@@W4eTypeCalculCRC@@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AddProcessingKey@XmlFile@@QAE_NPBD@Z
?AddFrameKey@XmlFile@@QAE_NPBD@Z
?AddProperty@XmlFile@@QAE_NPBD00000@Z
?getPosTabParam@Cmd_Mess@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AddDtcInter@XmlFile@@QAE_NPBD@Z
?get_TabParam@Cmd_Mess@@QAEPAPAVPar_Mess@@XZ
?get_lLength@ParValMS@@QAE?BJXZ
?get_iDataTypeId@ParValMS@@QAE?BHXZ
?AddParameter@GestAppContext@@QAEFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0_N@Z
?DisplaySimpleList@Dlg_Mess@@QAEHHIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@1_NJW4TypeTempo@@H22@Z
?AfficheDlg_Mess@Dlg_Mess@@QAEHHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00JW4TypeTempo@@H_N2@Z
?IdHelp@DlgCom@@2IB
?Get_SelectedItem@Dlg_Mess@@QAEHXZ
?Manage_Dictionary_Concatenation@@YAXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@JV12@@Z
?Manage_Dictionary_Concatenation@@YAXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@Z
?Manage_Dictionary@@YAXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@JV12@@Z
?Manage_Dictionary_Substitution@@YAXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@Z
?Update@GestAppContext@@QAEXXZ
?StringToUpperCase@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@Z
??0Cmd_Mess@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetMnemonicValue@@YAHPBDPADAAVStock@@@Z
?MC_Concat@@YAXPADJPBD@Z
?SetMnemonicValue@@YAHPBDPADAAVStock@@@Z
?ModifTypeFtoC@@YA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVStock@@@Z
?IdAllButtons@DlgCom@@2IB
?Gestion_Dico@@YAXJABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PADPBD@Z
?Gestion_Dico_Concat@@YAXJABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PADPBD@Z
?wait@DlgCom@@QAEXIW4TypeTempo@@@Z
?IdCancel@DlgCom@@2IB
?ValHEXAToValDEC@@YAJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV12@@Z
??0Cmd_Mess@@QAE@AAVStock@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z
?AnswerECUParametre@@YA_NAAVStock@@W4T_PARAM_TYPE@@@Z

kernel32

FreeLibrary
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
GetLastError
GetProcAddress
GetTickCount
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange

msvcp80

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?uncaught_exception@std@@YA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setprecision@std@@YA?AU?$_Smanip@H@1@H@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr80

atoi
_itoa
_localtime64
_time64
strncmp
strtol
__RTDynamicCast
atof
strncat
ceil
_splitpath
_makepath
toupper
strncpy
?terminate@@YAXXZ
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_ltoa
atol
??_V@YAXPAX@Z
_invalid_parameter_noinfo
??2@YAPAXI@Z
sscanf
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
sprintf
__CxxFrameHandler3
memset
memcpy
_CxxThrowException
_CIfmod
floor

Exports

Exports

ADD_DCM35_HY2863
ALPHA_TO_HEXA2087
ALPHA_TO_HEXA_APPAIRAGE2621
APPGEN61
APPGEN_ECURESET64
APPGEN_RAW152
APPGEN_ROUTINE62
ASCII_TO_HEXA2622
ASS_DCM35_HY2862
CALCUL_TAILLE2811
CALC_ADDITIF_MCP2674
CALC_INJ2495
CALC_VOL2496
CODAGE_INJ2101
COUPER_CONTACT_202690
COUPER_CONTACT_602691
DATAWRITE143
DETECTION_COUPURE2743
DETECTION_REMISE2744
DMTC_DECOMPTEUR_1002764
DMTC_DECOMPTEUR_1202693
DMTC_DECOMPTEUR_1802746
DMTC_DECOMPTEUR_502692
DMTC_ECURST2696
DMTC_STATUS_492694
DMTC_STATUS_512695
DVERDCM2675
ECRITURE_COMPT2812
ECU_DESCRIPTOR125
ECU_DESCRIPTOR_RC1077
EFFDEF_ZAPV126
FIFTYZAP1076
FINDIAG52
FINDMEMZONE77
GET_SEED132
HEXA_TO_ALPHA2028
HISTORICZONE58
INITDIAG51
LECTDEF158
LECTDEFECU26
LECTUREZI53
LECT_TEMP_EAU2810
READZONEHISTO1106
REGEN_FORCEE_FAP2809
SEND_KEY133
SPEC_TLCDDLPR_MULTILID1280
SPEC_TLCD_DLPR1357
SPEC_TRAME_MESS2676
STOPSTARTCOM_V3412331
TA_GEN142
TELECODAGE_GEN127
TLCD_DLPR128
TLCD_REFEOBD160
TLCD_TEST_ANSWER_REQDWN1388
TRAMEGEN56
VARCONTEXTE71
WALT1188

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec869ad55ff83d0586cc4bfcc72ff89c

Headers

File Characteristics

Imports

commveh32

dll_pgp

kernel32

msvcp80

msvcr80

Exports

Exports

Sections

.text Size: 120KB - Virtual size: 116KB

.rdata Size: 36KB - Virtual size: 33KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 12KB

.text
Size: 120KB - Virtual size: 116KB

.rdata
Size: 36KB - Virtual size: 33KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 12KB