Static task
static1
Behavioral task
behavioral1
Sample
ChessBot.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ChessBot.exe
Resource
win10v2004-20240802-en
General
-
Target
ChessBot.exe
-
Size
14.0MB
-
MD5
31ca70bf8040b1056ae4a1b8796c0551
-
SHA1
f0f0e0589b6af538ca24a6e906d8f520399a01ee
-
SHA256
c8e984e70782e511fc6789f1ef5b1bb7dba55a7641b197bd89ba799233e864b5
-
SHA512
3c9942bbf31cb00ecc3aa67415b605be232ea3747520ba11d886e6bb2af0f7804773d257d2f8d72d270695ebc87df5adc7709c7ed8cb71f0ca1b1d98a7c62682
-
SSDEEP
393216:cm34ZHJBS18HZfVcTlzQUS/1MRL7d3xd:BiHJBS1EIzQ3tMf3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ChessBot.exe
Files
-
ChessBot.exe.exe windows:5 windows x86 arch:x86
8e728e80c35163896f16fbb33fdf5a76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersion
TlsSetValue
GetVersionExA
GetVersion
Sleep
MulDiv
MulDiv
GetCPInfoExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetKeyboardType
CreateWindowExW
advapi32
RegQueryValueExA
RegSetValueExA
RegNotifyChangeKeyValue
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
CreateStreamOnHGlobal
olepro32
OleLoadPicture
comctl32
ImageList_SetIconSize
imm32
ImmGetCompositionStringW
winspool.drv
OpenPrinterA
shell32
ShellExecuteA
SHGetSpecialFolderLocation
comdlg32
ChooseColorA
gdiplus
GdipGetImagePixelFormat
winmm
mciSendCommandA
crtdll
isalnum
Sections
CODE Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1.6MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.upx0 Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.upx1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx2 Size: 13.9MB - Virtual size: 13.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 81KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ