scoringbot[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

scoringbot.exe
Size

10.9MB
MD5

2454ad7143b5520abca281973d90c1db
SHA1

b6e16f8544aeb0bb8465cd4267272e28023f02c0
SHA256

e83496a78e492012444b66cde7079c34b4095c9816c99d9c4a76a6a5fa700c40
SHA512

dc02fb81d5d839abd559e856942fbea9f2a90ce89d71d01a796c7b14e16aa54a99113a2d2af2df285b53edcfcc6e006c7b332293e343c30a5c5925cf7042c041
SSDEEP

196608:JqZKDJLV26rmr6gbnnxqPEC8GIUzN5P7j5V3yscq7xFdYZ8sv9gRowWaH61lhFf5:cMDHmrnYPECdv7D3ncq7CaM+u6HqTIHe

Score

1^/10

Malware Config

Signatures

Files

scoringbot.exe
.exe windows:6 windows x64 arch:x64

Code Sign

65:18:cb:cd:00:dc:c6:e9:8b:ad:5a:95:74:e5:73:ba:f8:1e:bd:23
Certificate

Issuer

CN=Green Team Code Signing,OU=Development,O=Green Team,L=Tallinn,ST=ee,C=EE

Not Before

28/01/2024, 09:00

Not After

27/01/2025, 09:00

Subject

CN=Green Team Code Signing,OU=Development,O=Green Team,L=Tallinn,ST=ee,C=EE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f6:80:46:e9:3b:2d:6b:c7:04:43:a3:cb:78:b8:83:d4:9b:07:d6:fe:34:cd:b5:d0:28:7f:bd:a0:2b:38:ab:10
Signer

Actual PE Digest

f6:80:46:e9:3b:2d:6b:c7:04:43:a3:cb:78:b8:83:d4:9b:07:d6:fe:34:cd:b5:d0:28:7f:bd:a0:2b:38:ab:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

rise
Size: - Virtual size: 25.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rode
Size: 10.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tone
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE