Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
8_Ball_Pool_Cheto.exe
Resource
win10v2004-20240802-en
Target
8_Ball_Pool_Cheto.exe
Size
2.5MB
MD5
c108b4a98eba30d7954dcaffc6df6132
SHA1
739be6a082ce03e359b4c285ef29295482ad5ecb
SHA256
6c51ad6467567cbb0b602d3ebfd5cd253645529227f7b35af088f595d041d47d
SHA512
0cb2a24a6f36f420785e897d6c13f4fc12dd405d2a03731cde318dd0292b0affd880e2e947f3651db00ea3bb2b4e3588d2207d18e25cecf6fee08a06816cc4f6
SSDEEP
49152:SBpWRSI21suafQcD9Pzdr2iI8f9Mc1zIJxG6Wvk6fhG2EGbZksAHEgHfu:SBpMuaRtVMgIe6Wvk6OoAkA
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
�J�{����ڊ��L#�KG�vT5�������{s?Q&-m�_��� @����]-�i]��T��S��D�6�k�<{�%U$����^`Q��[2W�0��'�^�$�T8ϣ�r��,��C����y$P<���f���ETݹ���.G9��wD���/�Φ�5��5-q|��v���B�l�|Y��+��W�7?Q���0w�4Uh䡨�n���Vr��D����({~��%螶��- �6ɔ����y_�d~fh7�nn�� �hQ/ad]��CwxC18�H*�A*8�cc6V��O5���m����ǖ���>���`�|v��^*�Ԃ�k0i�\�/���A[ ���T����.<ޤmj.�9Ao��)+u�"��X��qp�m�4SKӞ�.qw8����;>x��.�t�J�,h��{��4>W��99B�����D;w��J>+��֨��)O'e�g��,���>j�a}DX�Q|�6@31y�hp�A��������aa�%Vľ�V��>M��ѐ�>wu�����'�V�5���,��շ�W�Eg/:ck���5��C�_�� �J��h*��q��m��]�o��DM�XQFi���7*B���\#X7�߇M��~���@#�b�>rI��m��p����kr�Zm/S!xz�F^j�>���v�;>@�Zd�@�ls,�e�TZ�^���x[R.4�P�^����G������uv��˽�'�v��yȤ�]o������$�w�o��"�>��a���t���_0i�(����v��a1�+�#���h��i/K�L��g�-b���aY�S�ՑW[t] ?��x��'�?s��z"��ғ��e�>}��4z��{k�h�������ol��G��^j��C�1��J�imħj` *!�@)�cz\�Z�ErE$�N��93z��yrz�ұIJ/����T�r�}eF�����v�.�����&5q�� �!�%�!��u���D�r��y�ǜ��d�dZ/�'�Z��'�9�`����i=G%���{�W��'w%\_�mp.��ťod�����Z����#��R/��|���*�)�<)���/"���� �sE+��n%Ψ��D���≻��PJ��F��|�X�"5��Efr���������߰p�~�?h.��[���$gl���B�ٍX��q�]Y�W�2H�y˹�E��p��]�\��n��@Ӂ����w��n�T\��Z���Qv�y�W0>+�s����D����gS�l~�����_Pz��]\o���%�RʹE���9<ލO$U����^P�7�;�Om�y��9��&� V��ZBg�]E��)8<����6v<���q�����vT�;.�^�ђ�����$�� �6+0 �� !;E��uOFʡ�X-"4���~��H�A�A��`�Y.�8ŭ��A�G�$��:��N�ϖ���U�&��PAy5Q0�*��c��F�Y�/�]8&��Lܫ�\l��H.�{�= �$m%�"�0|IH�Z?m�ʋ�������W5ETF,~���q�i��� �2��}��u���}�I������s��A-�S�F8]����h٢��[������ڑ��[J�{طX�Y�[�����V7���J=��ߴiZڒ'�N�t҈�NX�)Yj_��k��a^ c+�o4�C�@t2���*��>\��G��(>�WbOrv���缸'��Q`i����_dh��p;���x��w����iЋ|��d�m������Ȥ̊"�ʁ2!�4�B,���^u�1���S&v(�M� e���R��P� �"2��hy�<��:Уx� �ȡ0���>��4EY;%ȃС����,1�P l~`)�(���B�~3�ն��P� P ��4�����nkf�)������5Y�N���y���ߧ��ˤ e���C��5^`�X�H<�S��ʻ���Q9/��A�S�0L�.��C"�͕Ťs<<��[@�d��FD@�̨��[U���?�b2�ge5��P؉�k, ���L�sh�����o"��M-ģ��fw&�Ck0M[暡'sF�w��0~sБ{p�Vvw��z{��IX����e�恢w%�+�q����s���s��iY0x�v����ߊu��'[Ǵ<LZ+� ;G�S��,륝-p �4~ۨ�7��``�f=<'-�*M�����!��&�@!5�|4q�� �5�AX����m���rqU h�t���U�O�6s�\ʹ(2�3�ۿ �ʛН'Y[�%�+_+2YΉ�lN��Q�ND{�i�+` ̒\>������[��?_�)_9y���^Ϫ��w6�*�ŭB�#��"j��>Rt�Q�(LT'�06�"x���#��po��N607Z.�x��4�k�����߆��G���8Fe布2~1T�� |ȱu}�p��t��y˥ͣ9�8J���_oX5//�6�.2���~Ԋ�:��4Gqq-���>P^��'xEc�ц�A:�#��m�7R�}F���I�2�$*Фy��g�c�2d͏:ǁ �ɤ���B�v�"�m��r���m�L����o�څ ���M +��pAM�$Υ"u�O��O�S�9�t�0Q�����?fx��3$� |}��OgT MBKN��zhS�pϕ>� �F��L���QJ�e��@ƃ攥�(�:��?�K`��Ļ��xq�o^��<� �]e�OŽ�z�3��K�z��ص��:ag�Bl�9���Z�~�F�I� #_b9�x8��P�I3����]��� Ŧ>���;�.J�� m��t�-'����<�1����^�Bi�X����ekve�4y��cP�s����#JM��0٭�y�Z{�v0w J[�F�YB���Va��ܷ~TtL�k%����s[AϨ㗾�S��*���]����M���̲OM�p�Kd�!�U���XZ�$��4��m�ZmoC1��=I���\���Xe�x��#�ڒ�d��m�r��+E��(��)Vmc�B�k1̼.�Oȩ8��c���w37}dd=�į�B����=6�ի����)ʹ��$�k@�� �E�����+� �ȤD�C��nÝ��Oͷ�A��{4�`A��� �� �uA�wm6c4�x� kO��
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE