home

truykich.exe

Truy Kich

This is a self-extracting archive and installer. The file has been seen being downloaded from mobile.vtc.vn.
Product:
Truy Kich

Description:
Truy Kich Setup

MD5:
d0739989a0df812de6af1c70e2c01a3e

SHA-1:
0b896c6ea2ab037430337d9a2779a7ca016faf97

SHA-256:
2b598b70fefa53e95267a206e3b2ff21a4ac889789683341453a5a4934ac9352

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:53:58 PM UTC  (today)

File size:
17.8 MB (18,696,647 bytes)

Product version:
1.0

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\truykich.exe

File PE Metadata
Compilation timestamp:
7/9/2014 2:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:ycH+Wr0rM4I5+QYQtiOzXdv148U0Nnjy6g6WyEBX2:y6VQ1I3liSVxjyeEh2

Entry address:
0x113BC

Entry point:
69, E9, E9, FF, 39, F4, BD, A3, BB, 4B, 28, 22, D2, 87, F5, EB, 09, C7, C0, 64, 5F, 41, 8D, 0F, AF, DB, 8D, 15, 2A, 92, 4F, C9, F3, 81, DA, 44, A8, AE, 7A, C6, C7, 94, 0F, AF, EE, 14, 9A, EB, 07, 48, 69, CE, FF, DD, A3, C3, 0F, BF, CA, BE, 49, 3D, 00, 00, F2, 81, F6, 8F, A2, 00, 00, 84, C9, 0A, C3, 4B, 4B, 8D, 0D, FD, 7A, D7, F3, 8B, D6, 74, 06, F2, 0C, B8, 0F, AF, DE, 81, F2, 2C, 08, 00, 00, 88, E7, 8D, 2D, EF, 4E, 17, 3C, 2B, FA, 8B, D8, 85, DF, 50, 68, 47, 05, 90, 00, BE, AB, E8, E8, 06, 88, F8, 0F, BF...
 
[+]

Entropy:
7.9986  (probably packed)

Code size:
63.5 KB (65,024 bytes)

The file truykich.exe has been seen being distributed by the following URL.

http://mobile.vtc.vn/uploads/.../truykich.exe

Scan truykich.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.