neshta | 2b4a0de9272101006d37ce62bd5ea71ae33f97f14e545a51cb767306356c06d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b4a0de9272101006d37ce62bd5ea71ae33f97f14e545a51cb767306356c06d0
Size

791KB
MD5

91fb5b610f64dca314b5f3f88024e6e0
SHA1

641092d281051a383724e144f538ee8683a4561f
SHA256

2b4a0de9272101006d37ce62bd5ea71ae33f97f14e545a51cb767306356c06d0
SHA512

e86e45031af94b992fff9677bf4f24332935ddd7f77722863cb795a6b2f968490f7cb507057798dc3aaa0479cb2d456a7f526074b0fb7cc830e803b903ac4bd6
SSDEEP

6144:TEBFP+f7t+IiEZgi38cs5wUeMqcTnnHj8jib6Pq6ls+zNm4XDHM30C9qBJSqkp7K:iP+f7t+IiOiuNjqI7K08/+

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta payload 1 IoCs

resource	yara_rule
sample	family_neshta

Neshta family
neshta

Files

2b4a0de9272101006d37ce62bd5ea71ae33f97f14e545a51cb767306356c06d0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE