home

ikeypang.exe

ikeypang

AD79 Corp

The application ikeypang.exe by AD79 Corp has been detected as a potentially unwanted program by 21 anti-malware scanners.
Publisher:
AD79 Corp  (signed and verified)

Product:
ikeypang

Version:
1.00

MD5:
de49c789f2198dd8a9249fa07fe1f140

SHA-1:
2c16f34ab34171fe39f8db4f269a824f613b9487

SHA-256:
66cf6d6b7cbd34c3db925d79d4563eef848e34e41fe2cc62a30b2644b7c7a338

Scanner detections:
21 / 68

Status:
Potentially unwanted

Analysis date:
4/19/2024 6:17:06 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Graftor.136218
533

Agnitum Outpost
Trojan.DownLoader
7.1.1

AhnLab V3 Security
PUP/Win32.KeyPang
2015.07.20

Avira AntiVirus
TR/Zusy.77905.3
8.3.1.6

Arcabit
Trojan.Adware.Graftor.D2141A
1.0.0.425

avast!
Win32:Malware-gen
2014.9-150821

AVG
Generic_vb
2016.0.3011

Bitdefender
Gen:Variant.Adware.Graftor.136218
1.0.20.1165

Dr.Web
Trojan.DownLoader9.14418
9.0.1.0233

Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.136218
8.15.08.21.06

G Data
Gen:Variant.Adware.Graftor.136218
15.8.25

IKARUS anti.virus
Trojan-Downloader.VB
t3scan.1.9.5.0

Malwarebytes
Adware.Korad
v2015.08.21.06

McAfee
Artemis!DE49C789F219
5600.6667

MicroWorld eScan
Gen:Variant.Adware.Graftor.136218
16.0.0.699

Panda Antivirus
Trj/CI.A
15.08.21.06

Qihoo 360 Security
Win32/Trojan.7ad
1.0.0.1015

Rising Antivirus
PE:Trojan.Win32.Generic.1660C55D!375440733
23.00.65.15819

SUPERAntiSpyware
Trojan.Agent/Gen-Zusy
9678

VIPRE Antivirus
Trojan.Win32.Generic
42144

ViRobot
Adware.KeyPang.59960.C[h]
2014.3.20.0

File size:
58.6 KB (59,960 bytes)

Product version:
1.00

Original file name:
ikeypang.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\downctrldisk\ikeypang.exe

Digital Signature
Signed by:
AD79 Corp

Authority:
Thawte, Inc.

Valid from:
8/22/2013 9:00:00 AM

Valid to:
9/22/2014 8:59:59 AM

Subject:
CN=AD79 Corp, O=AD79 Corp, L=Yeonsu-gu, S=Incheon, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3000AE01184DFF956E01F0B36AF80075

File PE Metadata
Compilation timestamp:
1/24/2014 3:19:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:djP7ePGnhPouxBlQIBAEovPhPZxegPGLjP7lSNHC:dj7e+nhAu6Pngg+Lj7WC

Entry address:
0x1480

Entry point:
68, 30, 3E, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 2D, 8D, 22, 76, A5, CE, 47, 45, A2, 6E, D5, 9A, BD, 6F, 00, 1F, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 69, 6B, 65, 79, 70, 61, 6E, 67, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 01, 0A, BE, 12, B2, 05, EE, 08, 43, A0, A5, 3F, 34, B6, 8E, 24, 01, 42, BF, 9B, ED, 7E, 1A, 3E, 47, AF, FB, A8, 95, 1B, 90, 80, A6, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
5.0726

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
32 KB (32,768 bytes)

Remove ikeypang.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.