neshta | 26db5574863bf41d62f83b82bf6e8a875e291a44c7ca8a8e001704b0adb505f8 | Triage

Sharing

General

Target

26db5574863bf41d62f83b82bf6e8a875e291a44c7ca8a8e001704b0adb505f8
Size

256KB
MD5

a5be3dec76f0d6a6c94dae71f9280754
SHA1

0f69eba986bc00a49823a07343b845c1331afeab
SHA256

26db5574863bf41d62f83b82bf6e8a875e291a44c7ca8a8e001704b0adb505f8
SHA512

b556e74f685f072d18567939bd89c4021fa1cc48e8ae7dca267d2b9ad9fcd15069f5da89a4684e922855599a3f79d4250b5334a45e6e6905aa9372b935587e5f
SSDEEP

3072:eHgT5/jFtnHoutGr85CxWXSewt1rY11jVgyt:eHgTJFtnHoSG9xRfr+e

Score

10^/10

neshta

Malware Config

Signatures

Detect Neshta payload 1 IoCs

resource	yara_rule
sample	family_neshta

Neshta family
neshta

Files

26db5574863bf41d62f83b82bf6e8a875e291a44c7ca8a8e001704b0adb505f8
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ