421aad7304f78192ecea26a231a8fafc_JaffaCakes118
- SHA256 8de3d77e83980d334f3d30bf7c1607965117bca41a9776126473ffde7cfa91a1
Overview
overview
7Static
static
7AMPLv2013....PL.exe
windows7-x64
1AMPLv2013....PL.exe
windows10-2004-x64
1AMPLv2013....eq.vbs
windows7-x64
1AMPLv2013....eq.vbs
windows10-2004-x64
1AMPLv2013....ta.vbs
windows7-x64
1AMPLv2013....ta.vbs
windows10-2004-x64
1AMPLv2013....05.vbs
windows7-x64
1AMPLv2013....05.vbs
windows10-2004-x64
1AMPLv2013....11.vbs
windows7-x64
1AMPLv2013....11.vbs
windows10-2004-x64
1AMPLv2013....114.js
windows7-x64
3AMPLv2013....114.js
windows10-2004-x64
3AMPLv2013....s54.js
windows7-x64
3AMPLv2013....s54.js
windows10-2004-x64
3AMPLv2013....er.vbs
windows7-x64
1AMPLv2013....er.vbs
windows10-2004-x64
1AMPLv2013....nbr.js
windows7-x64
3AMPLv2013....nbr.js
windows10-2004-x64
3AMPLv2013....83.vbs
windows7-x64
1AMPLv2013....83.vbs
windows10-2004-x64
1AMPLv2013....el.vbs
windows7-x64
1AMPLv2013....el.vbs
windows10-2004-x64
1AMPLv2013....re.vbs
windows7-x64
1AMPLv2013....re.vbs
windows10-2004-x64
1AMPLv2013....ut.vbs
windows7-x64
1AMPLv2013....ut.vbs
windows10-2004-x64
1AMPLv2013....bj.vbs
windows7-x64
1AMPLv2013....bj.vbs
windows10-2004-x64
1AMPLv2013....tu.vbs
windows7-x64
1AMPLv2013....tu.vbs
windows10-2004-x64
1AMPLv2013....u1.vbs
windows7-x64
1AMPLv2013....u1.vbs
windows10-2004-x64
1Behavioral task
behavioral1
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/AMPL.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/AMPL.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/chemeq.vbs
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/chemeq.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/gridneta.vbs
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/gridneta.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs105.vbs
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs105.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs111.vbs
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs111.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs114.js
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs114.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs54.js
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs54.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/ljcluster.vbs
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/ljcluster.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/rosenbr.js
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/rosenbr.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/s383.vbs
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/s383.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/shekel.vbs
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/shekel.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/steenbre.vbs
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/steenbre.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/cut.vbs
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/cut.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietobj.vbs
Resource
win7-20240419-en
Behavioral task
behavioral28
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietobj.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietu.vbs
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietu.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietu1.vbs
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietu1.vbs
Resource
win10v2004-20240426-en
Detects file using ACProtect software.
| resource | yara_rule |
|---|---|
| static1/unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/cplex112.dll | acprotect |
| static1/unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/gurobi30.dll | acprotect |
| resource | yara_rule |
|---|---|
| static1/unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/gurobi30.dll | upx |
| static1/unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/ipopt.exe | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/AMPL.exe |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/ampltabl.dll |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/cplex.exe |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/cplex112.dll |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/donlp2.exe |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/gurobi.exe |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/gurobi30.dll |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/ipopt.exe |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/loqo.exe |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/lpsolve.exe |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/minos.exe |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/snopt.exe |
| unpack001/AMPLv2013.11.08.Cracked-EAT/AMPLcml/sw.exe |
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=12, version=7291,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=47, id=14, version=7299,
count=175, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=126, id=1, productName=Unmarked objects,
count=7, id=19, version=8034,
count=78, id=10, version=8447,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=18, id=14, version=7299,
count=64, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=71, id=1, productName=Unmarked objects,
count=6, id=19, version=8034,
count=25, id=2, version=7303,
count=2, id=10, version=8447,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=19, version=8034,
count=5, id=12, version=7291,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=46, id=14, version=7299,
count=155, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=184, id=1, productName=Unmarked objects,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=44, id=10, version=8447,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=150, version=20413,
count=3, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=26, id=149, productName=VS2008 build 21022, version=21022,
count=187, id=131, productName=VS2008 build 21022, version=21022,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=133, id=1, productName=Unmarked objects,
count=318, productName=Unmarked objects (old),
count=61, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Unsigned PE
Checks for missing Authenticode signature.
count=88, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=5, id=12, version=7291,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=47, id=14, version=7299,
count=163, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=69, id=10, version=8447,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=12, version=7291,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=46, id=14, version=7299,
count=156, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=118, id=1, productName=Unmarked objects,
count=2, id=19, version=8034,
count=40, id=10, version=8447,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=150, version=20413,
count=39, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=24, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=154, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=135, id=1, productName=Unmarked objects,
count=88, id=125, productName=VS2005 build 50727, version=50727,
count=4, id=42, version=9030,
count=361, productName=Unmarked objects (old),
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=126, id=1, productName=Unmarked objects,
count=8, id=150, version=20413,
count=34, id=149, productName=VS2008 build 21022, version=21022,
count=3, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=223, productName=Unmarked objects (old),
count=307, id=131, productName=VS2008 build 21022, version=21022,
count=164, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=19, version=8034,
count=95, id=1, productName=Unmarked objects,
count=3, id=12, version=7291,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=47, id=14, version=7299,
count=233, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=19, version=8034,
count=86, id=1, productName=Unmarked objects,
count=3, id=12, version=7291,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=34, id=14, version=7299,
count=164, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=36, id=10, version=8447,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=90, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=5, id=12, version=7291,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=47, id=14, version=7299,
count=164, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=90, id=10, version=8447,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=90, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=5, id=12, version=7291,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=47, id=14, version=7299,
count=164, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=106, id=10, version=8447,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=88, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=20, id=14, version=7299,
count=131, id=1, productName=Unmarked objects,
count=7, id=19, version=8034,
count=1, id=10, version=8447,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,