neshta | bb7fbf7dfd559af71db3c355d97214d26d2098f69ae959303184c534dd059c44 | Triage

Sharing

General

Target

bb7fbf7dfd559af71db3c355d97214d26d2098f69ae959303184c534dd059c44
Size

110KB
MD5

c9d0eece004f12a6a018b45cb1f3a436
SHA1

ae37507040318d5e686ed3684caf26aa1d7c554d
SHA256

bb7fbf7dfd559af71db3c355d97214d26d2098f69ae959303184c534dd059c44
SHA512

f1765d0f16bf34cf118c7a85af8dd80ec6a80044e5ad85ce422dd241488fa74b3cedb98cdc7a529b099b3c6cc91c08d31e2312205c67ea2c55dde91e80926f54
SSDEEP

1536:JxqjQ+P04wsmJChWqujtMS5+dadiYJzj37mVZMK+vj8yt2fFQaQ7egIwu:sr85CUntp+daT13i45Qyt2aL7egIwu

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta Payload 1 IoCs

Processes:

resource yara_rule

sample family_neshta
Neshta family
neshta

Files

bb7fbf7dfd559af71db3c355d97214d26d2098f69ae959303184c534dd059c44
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ