neshta | fc7fb52ba67fc1c520490690e9bfc3693d55c978d2c7a92ff637f442c4eb4159 | Triage

Sharing

General

Target

fc7fb52ba67fc1c520490690e9bfc3693d55c978d2c7a92ff637f442c4eb4159
Size

401KB
MD5

92d68f32bdd1e389f680a5667d48f230
SHA1

efb2b65a1cdb1740e705bedbbdf9cdfec83699d9
SHA256

fc7fb52ba67fc1c520490690e9bfc3693d55c978d2c7a92ff637f442c4eb4159
SHA512

4d99ce02ec562be68daf6a34e0463de87665715502224d31913628e00d6689337cec5cb7e3717e265999001c0ecb8479903abbe06c77248d0fe16eec8628d4e1
SSDEEP

6144:k9KYNdhc0KxLIjRYwDql3nQUyOz9vQFqYQ2E8uqTC/zK5Ej7q63R:lYZcVxLI9YwAvOqYQ2Erb/zK5Ey63R

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta payload 1 IoCs

resource	yara_rule
sample	family_neshta

Neshta family
neshta

Files

fc7fb52ba67fc1c520490690e9bfc3693d55c978d2c7a92ff637f442c4eb4159
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ