neshta | bea8864a511aea3e95512b7f87c8e181cbb99c7eb6318aaa5969cd80d7192de8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bea8864a511aea3e95512b7f87c8e181cbb99c7eb6318aaa5969cd80d7192de8
Size

173KB
MD5

0e2a831bf3b54fb18b0fdb27583116f1
SHA1

24800df771456b3dd7cf67993a75f10e3442bfe3
SHA256

bea8864a511aea3e95512b7f87c8e181cbb99c7eb6318aaa5969cd80d7192de8
SHA512

ea72d52a6ef2159f3b3d724d33edc3b40b1866fdc3c065043354e3e6477a0ec042f8bf33dfa82c06164c9fd2a2d71f909df8bb804e0a02814dc9b2251d44238d
SSDEEP

3072:6r85CLer1ldB5mBGuBRdYrLzYlVphB5dT2aQFLzYlVphB5dT2aQY:i9LOMrTdYrLcLp35dT2pLcLp35dT2U

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta payload 1 IoCs

resource	yara_rule
sample	family_neshta

Neshta family
neshta

Files

bea8864a511aea3e95512b7f87c8e181cbb99c7eb6318aaa5969cd80d7192de8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 44KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ