neshta | 4f96d95ddf3617f807cc89d76a4b3a0833745cee5ee57191a773baa64e2266be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f96d95ddf3617f807cc89d76a4b3a0833745cee5ee57191a773baa64e2266be
Size

914KB
MD5

a37f5aa29ffae10cdc94c50c8382f4e0
SHA1

5340496c8f97de4ad065180f954c9a19ce8380b2
SHA256

4f96d95ddf3617f807cc89d76a4b3a0833745cee5ee57191a773baa64e2266be
SHA512

9567a956304e18b8c863a92e5aab5889a99d1464adeef14907d4b5ae6860d625c53a98902d958eb58055c10a64dcc38440b5ae30aa2091879a2a2bc713d1f0d4
SSDEEP

24576:5rGljJKAjGNFA0d8DYU2iGaOiCfGwyiLQx:5mNsRhytx

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta payload 1 IoCs

resource	yara_rule
sample	family_neshta

Neshta family
neshta

Files

4f96d95ddf3617f807cc89d76a4b3a0833745cee5ee57191a773baa64e2266be
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ