neshta | b5caff40d30518b8911036055fcd488be21db6ad295cc80af1f1ace7d4b656ea | Triage

Sharing

General

Target

b5caff40d30518b8911036055fcd488be21db6ad295cc80af1f1ace7d4b656ea
Size

1.0MB
MD5

80729bc58475f974ff2a083d95157a00
SHA1

e4a977c52e58bc8820b8aaf09fbedbf61b10433c
SHA256

b5caff40d30518b8911036055fcd488be21db6ad295cc80af1f1ace7d4b656ea
SHA512

d586f3ca0b190b3490ff20781357ae4f4a8e198b7903e00c4ee8541171a78e94e07b71dc62f9c31ce137103911641fc161db50943766bc0d2e70dd03d26d95fb
SSDEEP

12288:PyxVgzDtyETG+/vqZjfoS+rUcpP3lynD2MbB2JQAdwl0tbyUu6T2L:PyjuDtrTG+/EiP3laDxUdlu82L

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta payload 1 IoCs

resource	yara_rule
sample	family_neshta

Neshta family
neshta

Files

b5caff40d30518b8911036055fcd488be21db6ad295cc80af1f1ace7d4b656ea
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ