Static

static

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Chesta 3.4.3.2.zip

  • Size

    2.1MB

  • MD5

    ce18114a5ceb91930b52838ec9a47e7d

  • SHA1

    28011644dedf2a8bdb84f3a3b820b3326e135fd9

  • SHA256

    c3124f491c28e991124e928d727f2623d4c0f37cfeff8b78539c12d969fc06ac

  • SHA512

    a2412ed315dbe90f3df6c02ac1c5e8c633a3d6c309749b9aa29241022208cb4c44caeae76e2d60b695721c710befa6068ec11d3766943929d04988b0455f21e6

  • SSDEEP

    49152:QA+OscxgqxOlHPPqdmgEkCFZDgT5mxVM8C0UgjMilqqC+90iy:Q/Oscxgqx8HPPqdmgBaZET5mHM8C0UgQ

Score
8/10
macromacro_on_action

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

    macromacro_on_action
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Chesta 3.4.3.2.zip
    .zip
  • Chesta3.exe
    .exe windows:4 windows x64 arch:x64

    460f303f67fbcab436eae0837d9f95e4


    Headers

    Imports

    Sections

  • Data File Creation Wizard 3.xls
    .xls windows office2003
  • Sample data/Ag - Cl - H2O System (298.15K).csv
  • Sample data/Cl2-Fe-O2-S2 system (1200K).csv
  • Sample data/Cu-S2-O2 (1500K).csv
  • Software License Agreement.pdf
    .pdf
  • locale/Chesta3.ja_JP.mo
  • locale/Chesta3.ja_JP.po
  • locale/Chesta3.pot
  • settings.ini