home

Skype.exe

The executable Skype.exe has been detected as malware by 6 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from storage13-free.uloz.to.
Version:
0.0.0.0

MD5:
357c07e480da8d03b88bba095465168e

SHA-1:
1a0bd92e171d0abe3ecf5e89711b83725056d42c

SHA-256:
e2c673b53f4171cc7ea810bb96114b35ef73cc650e924d556a909bc46191a217

Scanner detections:
6 / 68

Status:
Malware

Analysis date:
12/25/2024 12:12:13 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
BackDoor.Bladabindi.1311
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Strictor.57860
11.5.0.6191

ESET NOD32
MSIL/Injector.AWA trojan
8.0.319.0

Kaspersky
HEUR:Trojan.MSIL.Tpyn
15.0.0.562

Norman
Gen:Variant.Barys.53271
28.05.2016 15:32:18

VIPRE Antivirus
Threat.4800998
29708

File size:
616.5 KB (631,296 bytes)

Product version:
0.0.0.0

Original file name:
Skype.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\skype.exe

File PE Metadata
Compilation timestamp:
3/26/2015 11:16:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:K4nwbpTTO3upBeIb/scYzkSHjz/Jimr8RAoIRmvaw6Xha/24lq/o3tAFDXhaV2AD:ybA2AcxQ/J/RmiwyGlqziF

Entry address:
0x680EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
408.5 KB (418,304 bytes)

The file Skype.exe has been seen being distributed by the following URL.

http://storage13-free.uloz.to/Ps;Hs;fid=71151855;cid=293238149;rid=507591612;up=0;uip=176.102.129.105;tm=1455810861;ut=f;aff=uloz.to;did=uloz-to;He;ch=cb2bdeeca8585770538cdde29ab93d17;Pe/.../skype-exe?bD&c=293238149&De&redirs=2

Remove Skype.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.