Static task
static1
Behavioral task
behavioral1
Sample
SlowChess-2.9/help.html
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SlowChess-2.9/help.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
SlowChess-2.9/slow64-avx2.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
SlowChess-2.9/slow64-avx2.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
SlowChess-2.9/slow64-sse.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
SlowChess-2.9/slow64-sse.exe
Resource
win10v2004-20230915-en
General
-
Target
SlowChess-2.9.zip
-
Size
4.3MB
-
MD5
28267e3dc32b5acb130db945d2f68184
-
SHA1
53eeaae794491460b73597c8ee6b4e8f1a58d24d
-
SHA256
c9330ffb281bcc0e2499f840b150ae98921c343cb4fe8ce0687952cc1bb37345
-
SHA512
29cc9704adcb591ff4b47d5b6162250151c88fb372e1110703c4048fb99e80f8ae1b5ca02af4101aa7b463c581d877cb24d5014ab509bf6f0024bca8892781a6
-
SSDEEP
98304:PtrdXryLNAlWzR1trS30ko+YJw/6G/RQ35audWrV579hYN6s3uskdZo/8:lhXryL6lQRPSa5zGpQrd4YL+sk4E
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/SlowChess-2.9/slow64-avx2.exe unpack001/SlowChess-2.9/slow64-sse.exe
Files
-
SlowChess-2.9.zip.zip
-
SlowChess-2.9/EndgameBitbases.sbb
-
SlowChess-2.9/NeuralNets.snn
-
SlowChess-2.9/TestBook.scb
-
SlowChess-2.9/help.html.html
-
SlowChess-2.9/slow64-avx2.exe.exe windows:6 windows x64
168452d7b9a67e092ffe89b44147b653
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msimg32
GradientFill
kernel32
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
CreateProcessW
GetExitCodeProcess
DeleteFileW
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
HeapAlloc
HeapFree
GetCommandLineW
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
TerminateProcess
GetCurrentProcess
InitializeSListHead
GetCurrentProcessId
IsProcessorFeaturePresent
GetStartupInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
GetCurrentDirectoryA
GetModuleFileNameA
GlobalUnlock
GlobalLock
GlobalAlloc
DeleteFileA
SetCurrentDirectoryA
MapViewOfFile
GetFileSize
CreateFileMappingA
CloseHandle
CreateFileA
GetLastError
UnmapViewOfFile
ReleaseMutex
CreateMutexA
WaitForSingleObject
GetFileSizeEx
WriteConsoleW
HeapSize
SetEndOfFile
FormatMessageA
WideCharToMultiByte
GetCurrentThreadId
WaitForSingleObjectEx
Sleep
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
LocalFree
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
RtlUnwind
SetFilePointerEx
AreFileApisANSI
CopyFileW
GetFileInformationByHandleEx
MultiByteToWideChar
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
user32
LoadCursorA
RegisterClassA
TranslateMessage
LoadIconA
LoadImageA
GetDC
DrawTextA
FrameRect
ReleaseDC
GetKeyState
GetWindowRect
GetMenu
DestroyWindow
SetWindowPos
CheckRadioButton
GetMenuItemCount
PostMessageA
FillRect
EndDialog
MessageBeep
CreatePopupMenu
DialogBoxParamA
GetSubMenu
ShowWindow
OpenClipboard
GetDlgItemTextA
SetTimer
CloseClipboard
EmptyClipboard
DispatchMessageA
GetSysColor
MoveWindow
IsDlgButtonChecked
DefWindowProcA
CreateWindowExA
SetFocus
GetUpdateRect
GetClipboardData
SendDlgItemMessageA
SetDlgItemTextA
SendMessageA
SetClipboardData
CreateDialogParamA
GetDlgItemInt
MapDialogRect
AppendMenuA
CheckMenuItem
GetClientRect
GetDlgItem
IsClipboardFormatAvailable
GetWindowLongPtrA
CheckDlgButton
PostQuitMessage
DrawEdge
SetDlgItemInt
InvalidateRect
BeginPaint
EndPaint
ModifyMenuA
GetMessageA
MessageBoxA
gdi32
GetStockObject
SetBrushOrgEx
BitBlt
CreateCompatibleDC
StretchBlt
DeleteDC
SetBkMode
LineTo
ExtCreatePen
MoveToEx
SetStretchBltMode
SetMapMode
GetMapMode
GetObjectA
DPtoLP
ExtTextOutA
CreateFontA
SelectObject
SetTextColor
SetBkColor
DeleteObject
CreateSolidBrush
comdlg32
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
Sections
.text Size: 634KB - Virtual size: 633KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SlowChess-2.9/slow64-sse.exe.exe windows:6 windows x64
168452d7b9a67e092ffe89b44147b653
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msimg32
GradientFill
kernel32
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
CreateProcessW
GetExitCodeProcess
DeleteFileW
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
HeapAlloc
HeapFree
GetCommandLineW
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
TerminateProcess
GetCurrentProcess
InitializeSListHead
GetCurrentProcessId
IsProcessorFeaturePresent
GetStartupInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
GetCurrentDirectoryA
GetModuleFileNameA
GlobalUnlock
GlobalLock
GlobalAlloc
DeleteFileA
SetCurrentDirectoryA
MapViewOfFile
GetFileSize
CreateFileMappingA
CloseHandle
CreateFileA
GetLastError
UnmapViewOfFile
ReleaseMutex
CreateMutexA
WaitForSingleObject
GetFileSizeEx
WriteConsoleW
HeapSize
SetEndOfFile
FormatMessageA
WideCharToMultiByte
GetCurrentThreadId
WaitForSingleObjectEx
Sleep
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
LocalFree
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
RtlUnwind
SetFilePointerEx
AreFileApisANSI
CopyFileW
GetFileInformationByHandleEx
MultiByteToWideChar
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
user32
LoadCursorA
RegisterClassA
TranslateMessage
LoadIconA
LoadImageA
GetDC
DrawTextA
FrameRect
ReleaseDC
GetKeyState
GetWindowRect
GetMenu
DestroyWindow
SetWindowPos
CheckRadioButton
GetMenuItemCount
PostMessageA
FillRect
EndDialog
MessageBeep
CreatePopupMenu
DialogBoxParamA
GetSubMenu
ShowWindow
OpenClipboard
GetDlgItemTextA
SetTimer
CloseClipboard
EmptyClipboard
DispatchMessageA
GetSysColor
MoveWindow
IsDlgButtonChecked
DefWindowProcA
CreateWindowExA
SetFocus
GetUpdateRect
GetClipboardData
SendDlgItemMessageA
SetDlgItemTextA
SendMessageA
SetClipboardData
CreateDialogParamA
GetDlgItemInt
MapDialogRect
AppendMenuA
CheckMenuItem
GetClientRect
GetDlgItem
IsClipboardFormatAvailable
GetWindowLongPtrA
CheckDlgButton
PostQuitMessage
DrawEdge
SetDlgItemInt
InvalidateRect
BeginPaint
EndPaint
ModifyMenuA
GetMessageA
MessageBoxA
gdi32
GetStockObject
SetBrushOrgEx
BitBlt
CreateCompatibleDC
StretchBlt
DeleteDC
SetBkMode
LineTo
ExtCreatePen
MoveToEx
SetStretchBltMode
SetMapMode
GetMapMode
GetObjectA
DPtoLP
ExtTextOutA
CreateFontA
SelectObject
SetTextColor
SetBkColor
DeleteObject
CreateSolidBrush
comdlg32
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
Sections
.text Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ