Overview
overview
3Static
static
3Eagle_LegaliZer.elf
ubuntu-24.04-amd64
Eagle_LegaliZer.exe
windows7-x64
3Eagle_LegaliZer.exe
windows10-2004-x64
3Install.bat
windows7-x64
1Install.bat
windows10-2004-x64
1Linux/Eagl...er.elf
ubuntu-24.04-amd64
Remove.bat
windows7-x64
1Remove.bat
windows10-2004-x64
1src/Eagle_...er.exe
windows7-x64
3src/Eagle_...er.exe
windows10-2004-x64
3src/Eagle_...r.html
windows7-x64
3src/Eagle_...r.html
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Eagle_LegaliZer.elf
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral2
Sample
Eagle_LegaliZer.exe
Resource
win7-20240708-en
Behavioral task
behavioral3
Sample
Eagle_LegaliZer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
Install.bat
Resource
win7-20240729-en
Behavioral task
behavioral5
Sample
Install.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
Linux/Eagle_LegaliZer.elf
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral7
Sample
Remove.bat
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Remove.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
src/Eagle_LegaliZer.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
src/Eagle_LegaliZer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
src/Eagle_LegaliZer.html
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
src/Eagle_LegaliZer.html
Resource
win10v2004-20240802-en
General
-
Target
aee530a97a1dd4d5fc12a93f4f07351c_JaffaCakes118
-
Size
90KB
-
MD5
aee530a97a1dd4d5fc12a93f4f07351c
-
SHA1
d7643b96413648e7b0077e3cac1895818d0e4808
-
SHA256
1755c598cf8b0113210a8e6dc004e6c0078edb2c5a4af0fbb6bfbba6b2d23baa
-
SHA512
e6345dcbf029d5ec7078c2fd56422e83ae275fc23c130d70ef306e30c21ad9c77109a7ee1c838101882c8729584bdef63a5cdc71e8742fa5383fd4ff3459eb92
-
SSDEEP
1536:+ya+rTLR8AyFJqnya+rT3Yndugg4/2mjPf15qJD0r0rZya+rTl+FJq/dugg4/vAX:+yaaRdaiyanQgg4umjn1s40tyaMezggl
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Eagle_LegaliZer.exe unpack001/src/Eagle_LegaliZer.exe
Files
-
aee530a97a1dd4d5fc12a93f4f07351c_JaffaCakes118.zip
-
Eagle_LegaliZer.elf.elf linux x86
-
Eagle_LegaliZer.exe.exe windows:4 windows x86 arch:x86
2a8ac1811a9744e6e573eb2d0582f5be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
lstrlenA
GetWindowsDirectoryA
lstrcpyA
GetStringTypeW
CreateFileA
CreateFileMappingA
CloseHandle
lstrcatA
MapViewOfFile
FlushFileBuffers
GetCommandLineA
UnmapViewOfFile
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
user32
wsprintfA
MessageBoxA
advapi32
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Install.bat
-
Instructions.txt
-
Linux/Eagle_LegaliZer.c
-
Linux/Eagle_LegaliZer.elf.elf linux x86
-
Linux/Test.sch
-
Remove.bat
-
Test.brd
-
Test.sch
-
src/Eagle_LegaliZer.c
-
src/Eagle_LegaliZer.dsp
-
src/Eagle_LegaliZer.dsw
-
src/Eagle_LegaliZer.exe.exe windows:4 windows x86 arch:x86
2a8ac1811a9744e6e573eb2d0582f5be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
lstrlenA
GetWindowsDirectoryA
lstrcpyA
GetStringTypeW
CreateFileA
CreateFileMappingA
CloseHandle
lstrcatA
MapViewOfFile
FlushFileBuffers
GetCommandLineA
UnmapViewOfFile
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
user32
wsprintfA
MessageBoxA
advapi32
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
src/Eagle_LegaliZer.ncb
-
src/Eagle_LegaliZer.opt
-
src/Eagle_LegaliZer.plg.html
-
src/Icon.ico
-
src/Test.sch
-
src/resource.h
-
src/resources.aps
-
src/resources.rc