neshta | 8915e33d36e946cd28076b9208ae5f1e7e577fe2091cbef51e5ad32a3cf4ca8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8915e33d36e946cd28076b9208ae5f1e7e577fe2091cbef51e5ad32a3cf4ca8b
Size

1.3MB
MD5

bcb9d15102f03a7e1011995e3fd5cbc0
SHA1

9c301799964f01d198b4ad37b91795c65bb4b26c
SHA256

8915e33d36e946cd28076b9208ae5f1e7e577fe2091cbef51e5ad32a3cf4ca8b
SHA512

81aee5e212afd7a03e459513aedfee5c9000ecd0129c7fb7486a334801336f11de54d74c31835ef6f32ffa160f0e0dee9081f2db3450fb1d55b3fcf8c770e08b
SSDEEP

24576:UU0vziOwvlyi8DO0V1yKzOoAKql4rJ6koKP+bG5aaG:UTziOwvlyi8DO0VkKzOoTN6koKPcGg

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta payload 1 IoCs

resource	yara_rule
sample	family_neshta

Neshta family
neshta

Files

8915e33d36e946cd28076b9208ae5f1e7e577fe2091cbef51e5ad32a3cf4ca8b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ