U'��_2�)�A�Mӂeh�w�wKC I�9�B~����9)���@Oj@��i8x<���̚\{u�f��k��_P��D�Uq�T/S�FA�u+\u�y�ެ��$(ȵ8�Ċ����bo ��t�7i�W�<W��|`�cH�j�rK���Y7T Qh����7S!4���AO�`�E1�LDTN�vV��) ���~)!{�e1`��y1���v@��2�8���Y���JP̀��w����?y1` ��s�����}�s�8�e��� :����w�6��G�$[�(�� ����<�Q�I�7���Tl�c������$�$V�$OT���Lcj��Ox���vbB �x+���"�]瘒��ֶ����j5YJP��~$��~�!���M"�Z�;1�Q-�6�'z��5��N�����n�Q��'+#1�|Z�����E�J��U�o�V���{YּX-?vb���|� B��M�Z�� ��#@F�0h��u�/6�~�n_�.'a�4�������E�03H��H \�H��! "�[g$�2U�#h�W�UG�h����R�r�듍��D�.])�{�_�=w �n�^�E朗7�jr��=�8�����Tv"�� J9q��U9FE��6�9���>� �EJ�������hd����v��[z�k�}������R���V��FK3������|#��Y�7 �@=É���u�۩�`�ad�'hn�i|���$�rAñ�`p��Rx�����L̼1��0��E�JĦ���(n�9�*#BFP���C'�LX@#�`��W�i�y��Hd�A�;���U�Ok[w�2�Ehq:�x��<�l�L�I�� 2��-9N��u�O���S�uM~Ę́�FHZQGd[S�"�c�nWa7 O��?=���*[d�����1a�R�@D@U���.r!4��Na��㻕*n��niJ�{ǒ�Q�#�j��\evy�'墡�2�U�,Wc��S����m�Z�KB�w8{�q�e9��Ƶ���j�GǽG6%Fl��-ucSu+�����viP╚�ι�ޏ�U ڠP���B85髁��9��:��@L���j������֭�۷�I�2I�B�G�X�����ָ�xd��\���� =�G�x���y����G�#9����(������(y�j;�;o�S�����c~_��G.����Wo�����z�͝���V���>d@e�(L���O�\Ք�wt��M�4�Vh��;���"8��hq��~�'��}����Ӏ<'#s���9�i���uk,����N�.d�����3d�:��ZU(�|� ��T�����w�Ƴ魴h{��$%zA����o/�*�.�tH<Q�n�6�S�V�V��Hʇ���n}�LE�ڟ;N߀�o�~�ԝ1��s�4�!��u�g���I[\���Rhb��f��vg�oHF8.�����՚B�b�k�;���;:�qQ������g�@��y������w������������p��\@g�!�Ɓ@��\�쥊z����9BEɢr�s;b�E���z�v�[��1���iB)��Ǘ��j(C���~--u�������W-��9u2P=�Qqt]:��]6U����d�i�T4C��Tw${B�28腙� �fk��Ć��[t��T,.������NM�1����k�N>���}�I U�̃�9�'-mK�a䟪�Kep"�Xl�b��/9X}��o=4}�9?x��R���X%zeZ��B9��v���v�r��5ĜnkՈ���.�V1�(&j~� ��g6�� I$V#GT����K![��n�h��l[�6��� >kT�V �b��_�a�W�i�^±Q,&%���������z�+:M����)*���Կ���oDC���4l��%�&��z{OL1�x�`��mL�u���'���n:�H��F7��Jʭi�m��Q����0�7��K�c���i���iʬ�s">��R�\����o�5�� �LK����~Z�5�\K@�|�*�P�*d���lCuյ!L �E�]�$}.]]�M;�挲\��� ���81��+L�JЌ.>��|�����ȣ" ���{�[x^��|�P3'���Z�-�<��Q/�E a���-�Ȍr;�D���o����Ҽ6�S`%�v��l�?h���|\�9�?=t���[o?`���r�8��2�g'�M�6���Uz�Dn�yO��U鐇�]� O�~�P�S�~����7���X����}_�E��Zo+�сsX�i���3��S��(GC��ӡ� ֶ�{x��w����ݚ�(��22m�DQ��Y���n�y�(�2�s'��e���C������@@1�)L�%d��Um�{;���+�y<�jvd-�R��ڼȀ)Z,�2T�b���7K������@��gD���,f�A�}Zj�C'�����;bs�F�@Gg���&n��tA�Gp��"zjŊϥ�|<���O����{��#ѓq�|nqLw���*e�и�&h�^�]�W�U�Ξ7�_����fw�${x�����p�8�g��d�bq� �6;���*0���zY>w]���݅�Ӡ��ӎh}M����q����m���ݞ}��5�=��1h�����Ţ�ɤ)�/�i/ũB�/�s:ɐ2,+�T��Y�b��J�c�Q ��k˾!�C�ޔք{��� )u�M���]�2��v�}���4���Ѥ����^H�=O�ɔ���%�O����\� ���:vN��F��uȠ�����?��2mL�*>�6xǤ�`Qk*�"�-+͵aj���c��P�2nF ��^i�i�蘬 tx�������(���~�a�M�V���r���[I����:�w0 4M��s::ڎ|�H�9������[#g��N��6}��̡�}�t�N9>ǥl@!�E�"�0%m�a�ujy*�U���߷I������ ��{ �R��]"lQtm}��R ٲ��e��Ȫ��/����q��$B�OT��i<)��5r��m0-���{FH�^~CV;$�a�y@yt�kv�|�Z�5��<�'���P�������A�3��:��)�
Static task
static1
Behavioral task
behavioral1
Sample
ChessBotX Trial/ChessBot.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ChessBotX Trial/ChessBot.exe
Resource
win10v2004-20230220-en
General
-
Target
ChessBot_demo.zip
-
Size
8.4MB
-
MD5
dd7aaf2450235def535c954c3b2f8750
-
SHA1
29e5f9f4f1050dd990fa36997e0d77c7a65e38f0
-
SHA256
3f8e4e60f02c5fdb72e11646dbf84b843f9436087b47373b3ffb25e859d4b154
-
SHA512
ef6127050f25ea93661b5d9059df5ceefc6bcc8b59fa062428234ed922e023b35574adb2d24db6c2904d788c2ba526b6ef4aee8338f86d0ba0292444a44439de
-
SSDEEP
196608:P8nq32iIUa7ctwQT76CiaxyJzuHjPFu27FNg83C26NTQ:P8O2iDaAtBn6C+zuHjkJ8382
Malware Config
Signatures
Files
-
ChessBot_demo.zip.zip
-
ChessBotX Trial/Books/Basic.book
-
ChessBotX Trial/Books/GM.book
-
ChessBotX Trial/ChessBot.exe.exe windows x86
cf448e8ba0142ee7173af04b5c3d0ae9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersion
TlsSetValue
GetVersionExA
GetVersion
Sleep
MulDiv
MulDiv
GetCPInfoExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetKeyboardType
CreateWindowExW
CharUpperBuffW
advapi32
RegQueryValueExA
RegSetValueExA
RegNotifyChangeKeyValue
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
CreateStreamOnHGlobal
olepro32
OleLoadPicture
comctl32
ImageList_SetIconSize
imm32
ImmGetCompositionStringW
winspool.drv
OpenPrinterA
shell32
ShellExecuteA
SHGetSpecialFolderLocation
comdlg32
ChooseColorA
gdiplus
GdipGetImagePixelFormat
winmm
mciSendCommandA
Exports
Exports
Sections
CODE Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1.6MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.upx0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.upx1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx2 Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 81KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ChessBotX Trial/Config/Delays for bullet 1+0.cfg
-
ChessBotX Trial/Config/Instant (without delay).cfg
-
ChessBotX Trial/Config/system.cfg
-
ChessBotX Trial/EngineList.ini
-
ChessBotX Trial/Engines Settings/stockfish.cfg
-
ChessBotX Trial/Engines Settings/stockfish_10_x32.cfg
-
ChessBotX Trial/Settings.ini
-
ChessBotX Trial/System/SystemDelays.cfg
-
ChessBotX Trial/System/defaults.cfg
-
ChessBotX Trial/System/sys.dcfg
-
ChessBotX Trial/voiceover/a1.mp3
-
ChessBotX Trial/voiceover/a2.mp3
-
ChessBotX Trial/voiceover/a3.mp3
-
ChessBotX Trial/voiceover/a4.mp3
-
ChessBotX Trial/voiceover/a5.mp3
-
ChessBotX Trial/voiceover/a6.mp3
-
ChessBotX Trial/voiceover/a7.mp3
-
ChessBotX Trial/voiceover/a8.mp3
-
ChessBotX Trial/voiceover/b1.mp3
-
ChessBotX Trial/voiceover/b2.mp3
-
ChessBotX Trial/voiceover/b3.mp3
-
ChessBotX Trial/voiceover/b4.mp3
-
ChessBotX Trial/voiceover/b5.mp3
-
ChessBotX Trial/voiceover/b6.mp3
-
ChessBotX Trial/voiceover/b7.mp3
-
ChessBotX Trial/voiceover/b8.mp3
-
ChessBotX Trial/voiceover/bishop.mp3
-
ChessBotX Trial/voiceover/c1.mp3
-
ChessBotX Trial/voiceover/c2.mp3
-
ChessBotX Trial/voiceover/c3.mp3
-
ChessBotX Trial/voiceover/c4.mp3
-
ChessBotX Trial/voiceover/c5.mp3
-
ChessBotX Trial/voiceover/c6.mp3
-
ChessBotX Trial/voiceover/c7.mp3
-
ChessBotX Trial/voiceover/c8.mp3
-
ChessBotX Trial/voiceover/d1.mp3
-
ChessBotX Trial/voiceover/d2.mp3
-
ChessBotX Trial/voiceover/d3.mp3
-
ChessBotX Trial/voiceover/d4.mp3
-
ChessBotX Trial/voiceover/d5.mp3
-
ChessBotX Trial/voiceover/d6.mp3
-
ChessBotX Trial/voiceover/d7.mp3
-
ChessBotX Trial/voiceover/d8.mp3
-
ChessBotX Trial/voiceover/e1.mp3
-
ChessBotX Trial/voiceover/e2.mp3
-
ChessBotX Trial/voiceover/e3.mp3
-
ChessBotX Trial/voiceover/e4.mp3
-
ChessBotX Trial/voiceover/e5.mp3
-
ChessBotX Trial/voiceover/e6.mp3
-
ChessBotX Trial/voiceover/e7.mp3
-
ChessBotX Trial/voiceover/e8.mp3
-
ChessBotX Trial/voiceover/f1.mp3
-
ChessBotX Trial/voiceover/f2.mp3
-
ChessBotX Trial/voiceover/f3.mp3
-
ChessBotX Trial/voiceover/f4.mp3
-
ChessBotX Trial/voiceover/f5.mp3
-
ChessBotX Trial/voiceover/f6.mp3
-
ChessBotX Trial/voiceover/f7.mp3
-
ChessBotX Trial/voiceover/f8.mp3
-
ChessBotX Trial/voiceover/g1.mp3
-
ChessBotX Trial/voiceover/g2.mp3
-
ChessBotX Trial/voiceover/g3.mp3
-
ChessBotX Trial/voiceover/g4.mp3
-
ChessBotX Trial/voiceover/g5.mp3
-
ChessBotX Trial/voiceover/g6.mp3
-
ChessBotX Trial/voiceover/g7.mp3
-
ChessBotX Trial/voiceover/g8.mp3
-
ChessBotX Trial/voiceover/h1.mp3
-
ChessBotX Trial/voiceover/h2.mp3
-
ChessBotX Trial/voiceover/h3.mp3
-
ChessBotX Trial/voiceover/h4.mp3
-
ChessBotX Trial/voiceover/h5.mp3
-
ChessBotX Trial/voiceover/h6.mp3
-
ChessBotX Trial/voiceover/h7.mp3
-
ChessBotX Trial/voiceover/h8.mp3
-
ChessBotX Trial/voiceover/king.mp3
-
ChessBotX Trial/voiceover/knight.mp3
-
ChessBotX Trial/voiceover/pawn.mp3
-
ChessBotX Trial/voiceover/queen.mp3
-
ChessBotX Trial/voiceover/rook.mp3