66d6bab5c56a9cf6167077a97334a3c8_JaffaCakes118
- SHA256 255f5a92f6d426254f7fdf56f9940855914b50516e94b1e6cab2af9a5a7d625e
Behavioral task
behavioral1
Sample
كركل كروم.exe
Resource
win7-20240508-en
| resource | yara_rule |
|---|---|
| static1/unpack001/كركل كروم.exe | family_neshta |
| resource | yara_rule |
|---|---|
| static1/unpack001/كركل كروم.exe | family_xtremerat |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/كركل كروم.exe |
Detect Neshta payload
Detect XtremeRAT payload
Unsigned PE
Checks for missing Authenticode signature.