<�3�A�+]�X�]�!�yiv�2� �UӐ� �qIݹ�J��K[�0������Q�3����zl_�K��'K�Y'�ۄK��S��L�}X%�݃������\�P̽pk)r��dW)[�d.�Xvj����So�v��f �G��=��������J��h�p�-:�h�b[��t�dm���ZM|<���x���Y��JɓsF��m�C҈���I��O�}�nJ��;L��� S��<FL����3�����S��$tm���i���}yS��)�������GwA���35��[b�#*Tc�L�rv�@�pX�f�n2 �k�حc�I��-�[��&���#�%�$[�0�(�_!�g�Jc^�B��$'�'�j�� ��ZXrc�o��:���ꇨ���ڟq�WRF=��0�}87��YqmSi+�>����$o5�:��?]���&��3�4��Y?(��Ck��b�_��m8Q�'������ ��h#(�25`:b��Ⲹ�j8�}C9�����s} �GI`��G���a�y�@e��qg�A��RXq�g?��nCq���)ԥ�S$4"j}?�Y��Ʀ�@Y�)�X�:�6��~��[W|�,W4��L�~o���R����>o������km�~�_�ǥ#2P�tSt�ڂ�F�c���C�UpCI��o� 1���Cs����n��eBP����>"����:�=��8q�n���!���Q��r.��eN�ǭX.��v{͌��7\d�b�x��'�nVW��G��8��m�,k�ɂXa��AN������{��1����X7��'.�����r(�Tf��n�du#��s�v��rA�)�a_̽��x�k��TR�A��+���^��i�Q;��I}�7��^�f9L��g$&�OZ�D�Qu��[�w@�1�7{5?���կh�����何;LiR��������]N��? z �Q�����ː����l~C����ښ|<��#r��3��w�����厬��?ݱ�Ѩ��<���c��U�BK>%�gtHO-+Y��X�m;� :����V����k�{d����h�<����^�y�W3Vd7LpRRILEv� ���I��Ό �1�d�@F��$�w��� |+p�L�{WZX��Z���^��c��n�w����k����6"���_TQ쮍b�ET���b2����>���e/���n�˯�`(0�������.}Tn����{\4Xa�6$��R��{�_�$�#-�w�j��Jo�S."k�0��w���d����X&LBf��s���Uq���E��̯Goڤ@���T���4�iyE��F��N����<��и� �+}�uH�Q�� 4�"M�U��%�1�L�uwL�znM��rw��ͭ�A������Py�M�!��G�X��7X�O����4�Z�DbMdd�����B��� �/�Il$rj���9i�"�e���*�<]t�S�v��t�.��k%Z�)�b����W�<%')��O�mz��ݔ�� �x��Nѣ)>�S�ĽC����l����2�n�8B�f�ùv��1��ֆ���Sxȉ�¡<c�QWXh��`'8�f�dxZ;�ŚC�EU���&��d"��ij@YT��R���s��������C���#.FU�E��(���E�͒~���H`3���@u�Nk�sG4�a�MWcy eh4Ý���'O=%�h�Y���M�F������[|� C����%���"^��Η4{1��vR�������Da39�~���s�����Z��?���� 3`g�-r\�%kQ�̏������.g���lm�⺏b��%@ظ$Wg�N�]QoōxJ���O�Vd�;���S��.{�r�Q[V���H�>�su��N��ݗ�ͧm�&=��x~����`_���83����={%��,B+@�������e�x�}ry(�aQ�@�t��08Dd�S�U��!�ԡ;S|6�K�F����4n��@b�6��U���m�Tv�w����[d�ʁ�tWL|U�"��p`V��}Px���$(� �� ���_Bc�s��3��tU��9L��"ͬ�&I�8 I4☱t�?�Y�$0�����VI�{��1W��p��/@�����g���P���nWYr��(θ�3R���u����uI��NZt�[e!qtܡ���V�H#C. 1������.�9�Pv��Kbdyʺ�O�rnR����"���;Ԧ*?PC��W��.%X��3B���v��d4��fe��>��2��7@�� �� �F� \����GYI�7���x+����74�����C?�Kb ��۾մ1��/wf0q��'����&?ý���m���������1i�Vt�J�gW;�oƩ���=����/�m�0�ŀq�&_�s ��*��ן+uV)��9�����W��v;��[F��ێ���Q����<.��i��9*R*��Y�]&=U**��f�� �-I�Τ�����4%��5d⸏�a\6��H��9[h�vG�n(>�Fk�%ˑ-�<e#���z����fdr��?V��i�e�2ٓo�5�%�,�t".E�=�Z2����۰��h�!(7�|���H��W������_������d��ч�M�O?]?���dTT�������DM��E�BƯ���g4���'�`����yƚ��*Pov�SCEA�<҆m��s*fJI ʇ;|t��)&�g8Fr /z�h��.B�UNX"p)��]������p����\�p,��y��m�Ec1�I(�+�s���P��-|���눯�ͥ�zi�*&�Jx:o �f����� ޚ,��E�b��ً��MY������n �*o>ʈP�A..0L��$Gt�m�l?'2g�р���l+��5c���Ɲ�w������>������[�����L��n+ �ς��ZUD�§E��z�j��_wUY���R(�MgR��@ ���.$=�$#���E������s�V��";�i~���]���)+0@`u؍Y��L#���( ����CS�����u�� �ݘ0U���`�E99���Y�<��N�5.��wT?ܬ h�mw�����n���4�
Static task
static1
General
-
Target
ChessBot_demo.zip
-
Size
8.4MB
-
MD5
fa4f5008ae6ec4e4631e0afc29f33203
-
SHA1
1de925d87dae33d2583735fd448198989e53c3be
-
SHA256
631f1a573164db8cf2770ed33420ec1bccc337032c9d641d1f15dd2532222f8d
-
SHA512
e1668e51803b6384c4f1b23eb4cc51ae924c39157346effabd9782c04437c5bc3aca922806bdab094489cad2c4de90cebdf9353b297174fef7636f418fe20cbb
-
SSDEEP
196608:189uPxQN18r7aUBLv9Hq9LNbiH3hKV1pEFm0QPhmbp1isBNTd:188PxQN1235v5qZtiHxKDiotkp/H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ChessBotX Trial/ChessBot.exe
Files
-
ChessBot_demo.zip.zip
-
ChessBotX Trial/Books/Basic.book
-
ChessBotX Trial/Books/GM.book
-
ChessBotX Trial/ChessBot.exe.exe windows:5 windows x86 arch:x86
cf448e8ba0142ee7173af04b5c3d0ae9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersion
TlsSetValue
GetVersionExA
GetVersion
Sleep
MulDiv
MulDiv
GetCPInfoExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetKeyboardType
CreateWindowExW
CharUpperBuffW
advapi32
RegQueryValueExA
RegSetValueExA
RegNotifyChangeKeyValue
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
CreateStreamOnHGlobal
olepro32
OleLoadPicture
comctl32
ImageList_SetIconSize
imm32
ImmGetCompositionStringW
winspool.drv
OpenPrinterA
shell32
ShellExecuteA
SHGetSpecialFolderLocation
comdlg32
ChooseColorA
gdiplus
GdipGetImagePixelFormat
winmm
mciSendCommandA
Exports
Exports
Sections
CODE Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1.6MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.upx0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.upx1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx2 Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 81KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ChessBotX Trial/Config/Delays for bullet 1+0.cfg
-
ChessBotX Trial/Config/Instant (without delay).cfg
-
ChessBotX Trial/Config/system.cfg
-
ChessBotX Trial/EngineList.ini
-
ChessBotX Trial/Engines Settings/stockfish.cfg
-
ChessBotX Trial/Engines Settings/stockfish_10_x32.cfg
-
ChessBotX Trial/Settings.ini
-
ChessBotX Trial/System/SystemDelays.cfg
-
ChessBotX Trial/System/defaults.cfg
-
ChessBotX Trial/System/sys.dcfg
-
ChessBotX Trial/voiceover/a1.mp3
-
ChessBotX Trial/voiceover/a2.mp3
-
ChessBotX Trial/voiceover/a3.mp3
-
ChessBotX Trial/voiceover/a4.mp3
-
ChessBotX Trial/voiceover/a5.mp3
-
ChessBotX Trial/voiceover/a6.mp3
-
ChessBotX Trial/voiceover/a7.mp3
-
ChessBotX Trial/voiceover/a8.mp3
-
ChessBotX Trial/voiceover/b1.mp3
-
ChessBotX Trial/voiceover/b2.mp3
-
ChessBotX Trial/voiceover/b3.mp3
-
ChessBotX Trial/voiceover/b4.mp3
-
ChessBotX Trial/voiceover/b5.mp3
-
ChessBotX Trial/voiceover/b6.mp3
-
ChessBotX Trial/voiceover/b7.mp3
-
ChessBotX Trial/voiceover/b8.mp3
-
ChessBotX Trial/voiceover/bishop.mp3
-
ChessBotX Trial/voiceover/c1.mp3
-
ChessBotX Trial/voiceover/c2.mp3
-
ChessBotX Trial/voiceover/c3.mp3
-
ChessBotX Trial/voiceover/c4.mp3
-
ChessBotX Trial/voiceover/c5.mp3
-
ChessBotX Trial/voiceover/c6.mp3
-
ChessBotX Trial/voiceover/c7.mp3
-
ChessBotX Trial/voiceover/c8.mp3
-
ChessBotX Trial/voiceover/d1.mp3
-
ChessBotX Trial/voiceover/d2.mp3
-
ChessBotX Trial/voiceover/d3.mp3
-
ChessBotX Trial/voiceover/d4.mp3
-
ChessBotX Trial/voiceover/d5.mp3
-
ChessBotX Trial/voiceover/d6.mp3
-
ChessBotX Trial/voiceover/d7.mp3
-
ChessBotX Trial/voiceover/d8.mp3
-
ChessBotX Trial/voiceover/e1.mp3
-
ChessBotX Trial/voiceover/e2.mp3
-
ChessBotX Trial/voiceover/e3.mp3
-
ChessBotX Trial/voiceover/e4.mp3
-
ChessBotX Trial/voiceover/e5.mp3
-
ChessBotX Trial/voiceover/e6.mp3
-
ChessBotX Trial/voiceover/e7.mp3
-
ChessBotX Trial/voiceover/e8.mp3
-
ChessBotX Trial/voiceover/f1.mp3
-
ChessBotX Trial/voiceover/f2.mp3
-
ChessBotX Trial/voiceover/f3.mp3
-
ChessBotX Trial/voiceover/f4.mp3
-
ChessBotX Trial/voiceover/f5.mp3
-
ChessBotX Trial/voiceover/f6.mp3
-
ChessBotX Trial/voiceover/f7.mp3
-
ChessBotX Trial/voiceover/f8.mp3
-
ChessBotX Trial/voiceover/g1.mp3
-
ChessBotX Trial/voiceover/g2.mp3
-
ChessBotX Trial/voiceover/g3.mp3
-
ChessBotX Trial/voiceover/g4.mp3
-
ChessBotX Trial/voiceover/g5.mp3
-
ChessBotX Trial/voiceover/g6.mp3
-
ChessBotX Trial/voiceover/g7.mp3
-
ChessBotX Trial/voiceover/g8.mp3
-
ChessBotX Trial/voiceover/h1.mp3
-
ChessBotX Trial/voiceover/h2.mp3
-
ChessBotX Trial/voiceover/h3.mp3
-
ChessBotX Trial/voiceover/h4.mp3
-
ChessBotX Trial/voiceover/h5.mp3
-
ChessBotX Trial/voiceover/h6.mp3
-
ChessBotX Trial/voiceover/h7.mp3
-
ChessBotX Trial/voiceover/h8.mp3
-
ChessBotX Trial/voiceover/king.mp3
-
ChessBotX Trial/voiceover/knight.mp3
-
ChessBotX Trial/voiceover/pawn.mp3
-
ChessBotX Trial/voiceover/queen.mp3
-
ChessBotX Trial/voiceover/rook.mp3