Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


08 October 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 15:03:37 17:09:10 2 ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
5ba3f75775
NEW		 e26ec73abb [0] WinXP 3 of 41 05:46:36 05:46:36 1 none:none
 Armadillo| none trace
5ba3f75775
NEW
736b3db4fe
NEW
83192a6119
NEW		 e26ec73abb [0]
none [4]
fdc95e1fab[0]
fdc95e1fab[0]		 WinXP 15 of 41 05:46:36 05:46:36 1 none:none
none:none
none:none
 Armadillo|
Obsidium|
none|none		 none
none
none		 trace
trace
trace
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 02:23:19 20:04:20 8 ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
3dffff72ad
NEW
c03a1c24e8
NEW		 b2ac20b6e7 [0]
af756c363a[0]
af756c363a[0]		 WinXP 39 of 41 08:52:50 08:52:50 1 none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
18eacdb378
NEW		 3d17903825 [0] Win2K-f 28 of 41 07:43:57 07:43:57 1 none:none
 StarForce| none trace
2721d2b151
NEW		 fde14d4abe [0] Win2K-f 37 of 40 23:03:41 23:03:41 1 none:none
 Armadillo| none trace
07fabc79ef
NEW		 none [0] Win2K-f 0 of 32 05:03:17 05:03:17 1 ASM:Graph
 Armadillo| 47% lines=81 trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]
c5b49e7b82[0]		 WinXP 8 of 33 20:04:20 20:04:20 1 ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
0474b4b09f
NEW		 affa94efc0 [0] Win2K-f 34 of 36 22:42:27 22:42:27 1 none:none
 tElock| none trace
e8d4d8cde1
NEW		 none [0] Win2K-f 13 of 31 14:25:44 14:25:44 1 none:none
 ASProtect| 63% lines=585
embedded dns		 trace
38ed850a0e
NEW		 46990f37cd [0] WinXP 34 of 38 16:35:02 16:35:02 1 ASM:Graph
 Armadillo| 0% lines=91 trace
2721d2b151
NEW
b044168966
NEW		 fde14d4abe [0]
b02ac1f831[0]
b02ac1f831[0]		 Win2K-f 38 of 40 23:03:41 23:03:41 1 none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
7d89e4dffc
NEW		 a9315eb14c [0] WinXP 26 of 41 11:11:05 11:11:05 1 none:none
 FASM| none trace
7dd1fe2970
NEW		 none [0] WinXP 30 of 32 22:22:03 22:22:03 1 ASM:Graph
 ASPack| 72% lines=374
embedded dns		 trace
126a1d4446
NEW
3ed16ae12d
NEW		 31867051da [0]
none [0]		 WinXP 3 of 33 04:25:36 04:25:36 1 none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
126a1d4446
NEW		 31867051da [0] WinXP 35 of 36 04:25:36 04:25:36 1 none:none
 tElock| none trace
5ba3f75775
NEW
736b3db4fe
NEW
83192a6119
NEW
a885d0c168
NEW
c7830331fc
NEW		 e26ec73abb [0]
none [4]
fdc95e1fab[0]
a6d2045191[0]
7953649664[0]
7953649664[0]		 WinXP 7 of 41 05:46:36 05:46:36 1 none:none
none:none
none:none
none:none
none:none
 Armadillo|
Obsidium|
none|none
tElock|
tElock|		 none
none
none
none
none		 trace
trace
trace
trace
trace
4640a4ccd3
NEW		 9d9f2a02f5 [0] Win2K-f 40 of 41 07:08:56 07:08:56 1 none:none
 tElock| none trace
741e3b03b3
NEW		 none [0] WinXP 31 of 32 04:36:21 04:36:21 1 none:none
 none|none 32% lines=61 trace
c20138fa2a
NEW		 none [3] Win2K-f 20 of 41 11:26:34 11:26:34 1 none:none
 none|none none trace
831f4ee0a7
NEW		 none [0] WinXP 29 of 29 03:51:44 03:51:44 1 ASM:Graph
 none|none 100% lines=61 trace
47d3548e36
NEW		 ab13346633 [0] WinXP 37 of 41 11:25:38 11:25:38 1 none:none
 Armadillo| none trace
cdbb312d0a
NEW		 8050e5ba3e [0] WinXP 38 of 40 20:40:52 20:40:52 1 none:none
 PolyEnE| none trace
17028f1eda
NEW		 none [3] WinXP 31 of 32 20:15:27 20:15:27 1 none:none
 tElock| none trace
eda3b7766c
NEW		 7556343561 [0] WinXP 40 of 41 11:07:28 11:07:28 1 none:none
 PolyEnE| none trace
7d89e4dffc
NEW
7d99b0e910
NEW		 a9315eb14c [0]
none [0]		 WinXP 26 of 28 11:11:05 11:11:05 1 none:none
none:none
 FASM|
PolyEnE|		 99% none
lines=68		 trace
trace
5ba3f75775
NEW
736b3db4fe
NEW		 e26ec73abb [0]
none [4]		 WinXP 8 of 41 05:46:36 05:46:36 1 none:none
none:none
 Armadillo|
Obsidium|		 none
none		 trace
trace
1a2c0e6130
NEW		 none [0] WinXP 29 of 29 16:43:13 20:07:18 2 none:none
 none|none 33% lines=60 trace
2e45ae247e
NEW		 36aa8cd03d [0] WinXP 0 of 33 06:18:27 06:18:27 1 none:none
 Armadillo| none trace
5ba3f75775
NEW
736b3db4fe
NEW
83192a6119
NEW
a885d0c168
NEW		 e26ec73abb [0]
none [4]
fdc95e1fab[0]
a6d2045191[0]
a6d2045191[0]		 WinXP 39 of 41 05:46:36 05:46:36 1 none:none
none:none
none:none
none:none
 Armadillo|
Obsidium|
none|none
tElock|		 none
none
none
none		 trace
trace
trace
trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 02:23:19 17:37:13 3 ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
4640a4ccd3
NEW
518025c884
NEW		 9d9f2a02f5 [0]
e811756e2b[0]
e811756e2b[0]		 Win2K-f 39 of 41 07:08:56 07:08:56 1 none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
b27d73bfcb
NEW		 473c6454ce [0] WinXP 35 of 36 10:40:04 10:40:04 1 ASM:Graph
 PolyEnE| 100% lines=68 trace
fc21e133bb
NEW		 6731b98370 [0] WinXP 40 of 41 06:49:09 06:49:09 1 none:none
 PolyEnE| none trace
3dffff72ad
NEW		 b2ac20b6e7 [0] WinXP 40 of 41 08:52:50 08:52:50 1 none:none
 tElock| none trace
38ed850a0e
NEW
b9297745a1
NEW		 46990f37cd [0]
4294884d84[0]
4294884d84[0]		 WinXP 35 of 38 16:35:02 16:35:02 1 ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
0474b4b09f
NEW
1c3210698a
NEW		 affa94efc0 [0]
38bbefb8cc[0]
38bbefb8cc[0]		 Win2K-f 29 of 33 22:42:27 22:42:27 1 none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 03:42:30 06:12:07 2 ASM:Graph
 none|none 55% lines=59 trace
ff34a1caa4
NEW		 979a6569d4 [0] Win2K-f 39 of 41 02:47:28 02:47:28 1 none:none
 Armadillo| none trace
aab1b56620
NEW		 3b2e1c5b9d [0] WinXP 40 of 41 09:39:47 09:39:47 1 none:none
 PolyEnE| none trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 14:49:50 14:49:50 1 ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace