neshta | 863e4eb6f70c02b8bc2a40b64422bdea66503e6ebe451f5640764237f4e4817f | Triage

Sharing

General

Target

863e4eb6f70c02b8bc2a40b64422bdea66503e6ebe451f5640764237f4e4817f
Size

4.6MB
MD5

a67bc7a262e48d02a2dc02b0d385c9ae
SHA1

214bdf6cf66a5544d20acad597f048d6b11e08e8
SHA256

863e4eb6f70c02b8bc2a40b64422bdea66503e6ebe451f5640764237f4e4817f
SHA512

b7b9fe2d90ba6a404d76f0dd8c9562ce3fb734bb8085ff68886d63face15f4378a9101d10820fd9e3ce97fda39a8c5e6a5f6f64cd23b47af6f277e58e15cd495
SSDEEP

98304:5sywjzywuCe0zkn2iT+u9lzVm+3U1qYsgyy4:5sfsC34n2iT5HVmHqYsPv

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta Payload 1 IoCs

Processes:

resource yara_rule

sample family_neshta
Neshta family
neshta

Files

863e4eb6f70c02b8bc2a40b64422bdea66503e6ebe451f5640764237f4e4817f
.exe windows x86

Code Sign

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ