home

keymaker.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www92.zippyshare.com and multiple other hosts.
MD5:
bf681d1cfd4b7620485221056d69f968

SHA-1:
524f25fea01e93b0db6b2305a999b6c24fc3266f

SHA-256:
17e54477f81ca65806c643bf78185e5cfc7fb7eb60edc3f2bdc82d4fc1cd7b5a

Scanner detections:
7 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/24/2024 9:41:45 AM UTC  (today)

Scan engine
Detection
Engine version

McAfee
Artemis!0A92BD7622D9
5600.7082

Norman
Suspicious_Gen4.EXNCZ
11.20140904

Quick Heal
Win32.PWS.Zbot.4
7.14.12.00

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
23.00.65.14902

SUPERAntiSpyware
Trojan.Agent/Gen-Zbot
10509

Trend Micro House Call
TROJ_GEN.F47V0831
7.2.183

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra
24420

File size:
48.5 KB (49,664 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
3/30/2014 2:44:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
768:nfOZAFYyCxgLa1sknsEjhwAQMYISSMtWnQ7Us7:nmZAFYILaeqRmDMOSo7UE

Entry address:
0x21A1

Entry point:
E8, 12, 03, 00, 00, 6A, 00, E8, C9, 02, 00, 00, A3, 10, 63, 40, 00, 68, 48, 50, 40, 00, 6A, 00, 6A, 00, E8, 9E, 02, 00, 00, E8, AB, 02, 00, 00, 3D, B7, 00, 00, 00, 74, 16, 6A, 00, 68, E3, 1F, 40, 00, 6A, 00, 6A, 64, FF, 35, 10, 63, 40, 00, E8, E2, 02, 00, 00, 50, E8, 7C, 02, 00, 00, 55, 8B, EC, 83, C4, F4, 68, 5C, 52, 40, 00, FF, 75, 0C, 6A, 00, E8, 97, 02, 00, 00, 89, 45, FC, 50, 6A, 00, E8, 92, 02, 00, 00, 50, E8, 92, 02, 00, 00, 89, 45, F4, FF, 75, FC, 6A, 00, E8, 91, 02, 00, 00, 89, 45, F8, 83, 7D, F8...
 
[+]

Code size:
5.5 KB (5,632 bytes)

The file keymaker.exe has been seen being distributed by the following 50 URLs.

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

http://www92.zippyshare.com/d/HKYCxhmG/.../keymaker.exe

Latest 30 of 177 download URLs

Scan keymaker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.