home

la_caida_de_jerico.exe

GkSetup Self extractor

Gero Kuehn

This is a setup and installation application. The file has been seen being downloaded from www.tugoogle.com and multiple other hosts.
Publisher:
Gero Kuehn

Product:
GkSetup Self extractor

Version:
1.93.0

MD5:
1d05426c58f8b638039fc7297bd171fa

SHA-1:
a2b8dd26ae17658ffab0c7666969de496464ea9e

SHA-256:
b120c58edbb9a9ce32a65873f994d44726f1611833a9f74b19333a7530fd3d47

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 1:58:09 PM UTC  (today)

File size:
882.8 KB (903,994 bytes)

Product version:
1.93.0

Copyright:
Copyright © Gero Kuehn 1997,1998

Original file name:
WINSFX.EXE

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\downloads\la_caida_de_jerico.exe

File PE Metadata
Compilation timestamp:
3/8/2000 5:41:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:jhTTk4PX3If5AHx4sduRdkJr46s2YvFnV:NTA0YWHxb0lnV

Entry address:
0x1D0E

Entry point:
56, 68, 04, 01, 00, 00, 33, F6, 68, 40, 35, 40, 00, 56, FF, 15, 30, 20, 40, 00, 56, FF, 15, 70, 20, 40, 00, A3, 50, 36, 40, 00, E8, 6A, FE, FF, FF, 85, C0, 74, 4A, A1, 54, 36, 40, 00, 39, B0, B4, 02, 00, 00, 75, 2C, 39, B0, B0, 02, 00, 00, 56, 68, 01, 12, 40, 00, 56, 74, 07, 68, 14, 35, 40, 00, EB, 05, 68, 04, 35, 40, 00, FF, 35, 50, 36, 40, 00, FF, 15, D4, 20, 40, 00, 83, F8, 01, 74, 11, E8, 0F, F9, FF, FF, FF, 35, 48, 36, 40, 00, FF, 15, 54, 20, 40, 00, 56, FF, 15, 6C, 20, 40, 00, 5E, 55, 8B, EC, 81, EC...
 
[+]

Code size:
4 KB (4,096 bytes)

The file la_caida_de_jerico.exe has been seen being distributed by the following 4 URLs.

https://www.tugoogle.com/.../LA_caida_de_Jerico.exe

http://www.tugoogle.com/.../LA_caida_de_Jerico.exe

http://www.tugoogle.com/.../LA_caida_de_Jerico.exe

http://www.tugoogle.com/.../LA_caida_de_Jerico.exe

Scan la_caida_de_jerico.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.