neshta | 5a2d0c33bdafc20f734d1b3d688a05b5438b38721fccf3a646aa7507a339df60 | Triage

Sharing

General

Target

5a2d0c33bdafc20f734d1b3d688a05b5438b38721fccf3a646aa7507a339df60
Size

377KB
MD5

4a3cc36c565e28b08dbc4af0168db380
SHA1

b2fbe5788dc634333a067aff67f08e58e5612edd
SHA256

5a2d0c33bdafc20f734d1b3d688a05b5438b38721fccf3a646aa7507a339df60
SHA512

32244fe582585d965ffdb0029f818d012658c3e076056ed1fdd8b857163efe4efc26ebc39b7f0b0217ab7f7b4a388014c1f2e48583db2e407c199e42d92b91ff
SSDEEP

6144:R9fREcMZ5vVCiiKrao9afJu3YYtWGaVoRiS6hxH5AgPaxgt4e:duvVCiisao9Ii3aViKHye+e

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta payload 1 IoCs

Processes:

resource yara_rule

sample family_neshta
Neshta family
neshta

Files

5a2d0c33bdafc20f734d1b3d688a05b5438b38721fccf3a646aa7507a339df60
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.PCe.
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.PCe.
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PCe.
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PCe.
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PCe.
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PCe.
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PCe.
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PCe.
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PCe.
Size: 1KB - Virtual size: 766B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE