Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

I need help of MCU #1

Closed
HanalogInstruments opened this issue Feb 4, 2023 · 5 comments
Closed

I need help of MCU #1

HanalogInstruments opened this issue Feb 4, 2023 · 5 comments

Comments

@HanalogInstruments
Copy link

Hi,

How can i automate add the MCU for jpeg full image have wrong alligment?

Best regards,

@albmac
Copy link
Owner

albmac commented Feb 5, 2023

Unfortunately it is all done by eye right now, as explained in my tutorial.
I suppose one could take the thumbnail image, if uncorrupted, and use it as a reference for alignment.
But even in this case it would be a very difficult task, as MCU's can be color shifted in addition to position shifted.

@HanalogInstruments
Copy link
Author

Hi,

These file encrypted 153605 bytes from ransomware so when i cut from offset 153605 of encrypted and paste it to the last FFDA+12 Bytes the alligment not correct so i have plan to made a automate process to correct the MCU and color of batch JPEG

image

Sample:

https://drive.google.com/drive/folders/1e_C2lzBIEFfbZkR4vvr9_Nkdul1P0C-E?usp=sharing

when patch the corrupt jpeg to reference file we have 3 issue:

  • wrong alligment like the image.jpg
  • the bottom have non data because the first data encrypted so image become gray so how we remove it by mcu
  • the color maybe wrong

If i remove byte from SOS of image the color when wrong and image fix alligment bit remove MCU is better

@albmac
Copy link
Owner

albmac commented Feb 6, 2023

You should not cut data arbitrarily; it's better to decompile the image and remove MCU's from the text file.
Still I don't know how all this could be automated; the eye and brain tell you where to cut.

@HanalogInstruments
Copy link
Author

HanalogInstruments commented Feb 7, 2023 via email

@albmac
Copy link
Owner

albmac commented Feb 7, 2023

As written in my tutorial, first decompile your image:
>jpeg-decomp -decode -fin image.jpg -fout image.txt
then load the image in JPEGsnoop and locate the MCU that you want to remove.
Go to the text file and remove or comment it.
Create a new image from the modified text file:
>jpeg-compiler -encode -fin image.txt -fout image.1.jpg

@albmac albmac closed this as completed Mar 11, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants