neshta | 104808bf12de8ff6b8f3887cbde6a57afc9e9739e8d97670ff9f8d862344e5c7 | Triage

Sharing

General

Target

104808bf12de8ff6b8f3887cbde6a57afc9e9739e8d97670ff9f8d862344e5c7
Size

979KB
MD5

1665331c7e89616087c22eeab7d80ca2
SHA1

aecc7aab08d57dda967e652a8fba0aac401236f3
SHA256

104808bf12de8ff6b8f3887cbde6a57afc9e9739e8d97670ff9f8d862344e5c7
SHA512

533461858d7f4e903dee37c6916c20b83218fab4d115a7da78c47123c0b6780b8f3b6fb7fef795eebd8f5ace92e9c0de9ae24c9ad593c3aaf9ff75ed2258fffe
SSDEEP

24576:RduFt5EbKq2+xXcW5V6Ao5k0+9KAM5zHgc58RNgeHo:RMwJxXcW5s3knKAMD5eXo

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta payload 1 IoCs

Processes:

resource yara_rule

sample family_neshta
Neshta family
neshta

Files

104808bf12de8ff6b8f3887cbde6a57afc9e9739e8d97670ff9f8d862344e5c7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ