SkypeSetupFull[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SkypeSetupFull.exe
Size

56.1MB
MD5

b3b5593098a9b93511651fb52b8faae8
SHA1

fc933bd35bc61c2dc38daa7607a0869aa3a17cbd
SHA256

1e4ca5d441a00ac691c58e0aa5890c3feb395d2dc53dbae82faec7c9df4e52fc
SHA512

d1c22f0f6eba5952b82f1f5e7bce6dd0f7e577e1a6f56fdebd4b27e9470fcf08db42859c5516e168ddc8ccb5f5b10163ff330e0d63125b515f8e2726e7008737
SSDEEP

786432:hCgcgU5c2AqPl61RsCEQe3w0MLf8p94EJalgYJ+gWim3sgfBFvNuP7I10mjcEexd:hySol6eA07pfc+g43FFM010mjcE82UD

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

SkypeSetupFull.exe
.exe windows x86

Code Sign

33:00:00:00:c1:b6:fd:cd:a1:35:97:4e:25:00:00:00:00:00:c1
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/07/2017, 20:34

Not After

25/07/2018, 20:34

Subject

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:b2:d2:5e:1d:77:1f:7c:dd:62:ae:30:f7:21:48:c0:7e:1f:db:8f:1d:c9:c0:e8:10:c8:db:f2:10:ab:0a:7a
Signer

Actual PE Digest

51:b2:d2:5e:1d:77:1f:7c:dd:62:ae:30:f7:21:48:c0:7e:1f:db:8f:1d:c9:c0:e8:10:c8:db:f2:10:ab:0a:7a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 13:55
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 55.8MB - Virtual size: 55.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 293KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:00:c1:b6:fd:cd:a1:35:97:4e:25:00:00:00:00:00:c1Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

51:b2:d2:5e:1d:77:1f:7c:dd:62:ae:30:f7:21:48:c0:7e:1f:db:8f:1d:c9:c0:e8:10:c8:db:f2:10:ab:0a:7aSigner

Signature Validations

Verification

15/12/2022, 13:55 Valid: false

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 4.5MB

UPX1 Size: 55.8MB - Virtual size: 55.8MB

.rsrc Size: 293KB - Virtual size: 296KB

33:00:00:00:c1:b6:fd:cd:a1:35:97:4e:25:00:00:00:00:00:c1
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

51:b2:d2:5e:1d:77:1f:7c:dd:62:ae:30:f7:21:48:c0:7e:1f:db:8f:1d:c9:c0:e8:10:c8:db:f2:10:ab:0a:7a
Signer

15/12/2022, 13:55
Valid: false

UPX0
Size: - Virtual size: 4.5MB

UPX1
Size: 55.8MB - Virtual size: 55.8MB

.rsrc
Size: 293KB - Virtual size: 296KB