neshta | 2cc7bbaf7a1081b3b8ef1f2f6b840b0cc391095ab4dd1b99e7659dd2f96b6979 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cc7bbaf7a1081b3b8ef1f2f6b840b0cc391095ab4dd1b99e7659dd2f96b6979
Size

92KB
MD5

7b62e980d18297a7619178131edf74b0
SHA1

6d036b2749a0ec50418cd998b9223adfc355512a
SHA256

2cc7bbaf7a1081b3b8ef1f2f6b840b0cc391095ab4dd1b99e7659dd2f96b6979
SHA512

c5c3d92dd3b4efa027dd80213e0b379ce76460764cd57e654000ff812fb8384ed2ae434dc2029a9ebd6f6e09be7fe519751a13d822664f1815a52b87261af542
SSDEEP

1536:JxqjQ+P04wsmJCb3OOx8wBbGAC66Ro/4iq3j74:sr85Cj78P6pAiC4

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta payload 1 IoCs

resource	yara_rule
sample	family_neshta

Neshta family
neshta

Files

2cc7bbaf7a1081b3b8ef1f2f6b840b0cc391095ab4dd1b99e7659dd2f96b6979
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ