neshta | 26b6a82a8aa0b4f58f3935bc1e67d086b67a1f077c7c10ecbf9378050510e5a5 | Triage

Sharing

General

Target

26b6a82a8aa0b4f58f3935bc1e67d086b67a1f077c7c10ecbf9378050510e5a5
Size

1.0MB
MD5

e8b4cd3bc07f724c6664b3ae6a4ae2f7
SHA1

a413fcae44b0496c74f8e0cd34fb8e9546062b19
SHA256

26b6a82a8aa0b4f58f3935bc1e67d086b67a1f077c7c10ecbf9378050510e5a5
SHA512

e2c4623d4272415033a4748a2a914bd26ef5089551bde644ba51793a7490a602f39bd5da482c0f26e147705bd73111003d753e01bacc107dbea028fa7382124f
SSDEEP

12288:9VGzAcf9hjAJ059a0t5nb1A48RAIxdD8DLDrznG35qehjMTOzhdug/16vYcB4fYM:Tc1hgOnba7g4fYfQkLk3uGczO

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta Payload 1 IoCs

Processes:

resource yara_rule

sample family_neshta
Neshta family
neshta

Files

26b6a82a8aa0b4f58f3935bc1e67d086b67a1f077c7c10ecbf9378050510e5a5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ