Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


11 October 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
ff820e32d9
NEW		 none [none] WinXP 40 of 42 17:27:50 17:27:50 1 none:none
 none|none none none
c89b154681
NEW
d2b40c91a1
NEW		 58d02dbffa [0]
fbaa414397[0]
fbaa414397[0]		 WinXP 37 of 41 09:53:12 09:53:12 1 ASM:Graph
ASM:Graph
 StarForce|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
b91423b944
NEW		 none [none] Win2K-f 39 of 40 16:34:11 16:34:11 1 none:none
 none|none none none
6eda5f32a0
NEW		 none [none] WinXP 42 of 43 06:14:28 06:14:28 1 none:none
 none|none none none
6438959caa
NEW		 none [none] Win2K-f 40 of 42 20:44:56 20:44:56 1 none:none
 none|none none none
379a6daa0d
NEW		 1d04d6dc84 [0] Win2K-f 39 of 40 15:24:17 15:24:17 1 ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 00:20:15 22:41:59 8 ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
87c037c9e8
NEW		 none [none] WinXP 42 of 43 14:23:52 14:23:52 1 none:none
 none|none none none
36bb7118f0
NEW
8b4a36f5a7
NEW		 none [none]
none [none]		 WinXP 19 of 42 11:41:47 11:41:47 1 none:none
none:none
 none|none
none|none		 none
none		 none
none
36bb7118f0
NEW
8b4a36f5a7
NEW
9b5bd50972
NEW
b4afa1df1d
NEW
ba4a3d55fa
NEW
bea8cb1865
NEW
fac78fde16
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
154de51a66[0]
882896ab05[0]
882896ab05[0]		 WinXP 35 of 36 11:41:47 11:41:47 1 none:none
none:none
none:none
none:none
none:none
ASM:Graph
ASM:Graph
 none|none
none|none
none|none
none|none
none|none
Armadillo|
tElock|		 96% none
none
none
none
none
lines=91
lines=126
embedded dns		 none
none
none
none
none
trace
trace
377ae8c2fd
NEW		 none [none] Win2K-f 40 of 42 10:40:36 10:40:36 1 none:none
 none|none none none
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 00:20:15 22:41:59 16 ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
4710cf2ef7
NEW		 none [none] Win2K-f 42 of 43 20:01:30 20:01:30 1 none:none
 none|none none none
36bb7118f0
NEW
8b4a36f5a7
NEW
9b5bd50972
NEW
b4afa1df1d
NEW
ba4a3d55fa
NEW		 none [none]
none [none]
none [none]
none [none]
none [none]		 WinXP 19 of 42 11:41:47 11:41:47 1 none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
71e6f60517
NEW
ab4e3226c4
NEW		 1ef1781501 [0]
c2d0313e73[0]
c2d0313e73[0]		 WinXP
Win2K-f		 40 of 41 07:53:56 23:44:32 4 ASM:Graph
none:none
 Armadillo|
tElock|		 lines=91
none		 trace
trace
450ad1b683
NEW		 1e4ad6cdb1 [0] Win2K-f 39 of 41 16:47:16 16:47:16 1 ASM:Graph
 ASPack| 43% lines=3065
embedded dns		 trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]
c5b49e7b82[0]		 WinXP 8 of 33 11:36:24 11:36:24 1 ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
cc88f4f016
NEW		 3d17903825 [0] Win2K-f 31 of 41 02:01:49 02:01:49 1 ASM:Graph
 StarForce| 97% lines=3262
embedded dns		 trace
d6f9562c64
NEW		 none [none] WinXP 38 of 41 17:10:20 17:10:20 1 none:none
 none|none none none
d9d182d390
NEW		 none [none] WinXP 42 of 43 08:58:24 08:58:24 1 none:none
 none|none none none
377ae8c2fd
NEW
7cfdf42414
NEW		 none [none]
none [none]		 Win2K-f 40 of 42 10:40:36 10:40:36 1 none:none
none:none
 none|none
none|none		 none
none		 none
none
294a490491
NEW		 none [none] Win2K-f 36 of 41 17:06:51 17:06:51 1 none:none
 none|none none none
1b3d8e9fe7
NEW		 1d04d6dc84 [0] Win2K-f
WinXP		 39 of 41 14:28:03 15:31:57 2 ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 21:47:03 21:47:03 1 ASM:Graph
 PolyEnE| 99% lines=73 trace
8887d42f5c
NEW		 afaf06d6cd [0] Win2K-f 38 of 41 14:33:06 14:33:06 1 ASM:Graph
 pex| 81% lines=42 trace
6a6aaa5b73
NEW		 63889c9976 [0] Win2K-f 39 of 40 20:56:08 20:56:08 1 ASM:Graph
 tElock| 100% lines=42 trace
6bd35b2624
NEW		 none [none] WinXP 41 of 43 18:56:57 18:56:57 1 none:none
 none|none none none
4dd4197eb4
NEW		 1d04d6dc84 [0] Win2K-f 37 of 40 20:27:06 20:27:06 1 ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
741e3b03b3
NEW		 none [0] WinXP 31 of 32 09:10:57 16:00:11 2 none:none
 none|none 32% lines=61 trace
50cdd5c6cf
NEW		 1d04d6dc84 [0] WinXP 37 of 40 15:02:25 15:02:25 1 ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
36bb7118f0
NEW
8b4a36f5a7
NEW
9b5bd50972
NEW
b4afa1df1d
NEW
ba4a3d55fa
NEW
bea8cb1865
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
154de51a66[0]
154de51a66[0]		 WinXP 32 of 36 11:41:47 11:41:47 1 none:none
none:none
none:none
none:none
none:none
ASM:Graph
 none|none
none|none
none|none
none|none
none|none
Armadillo|		 0% none
none
none
none
none
lines=91		 none
none
none
none
none
trace
327cc7cb3d
NEW		 none [none] Win2K-f 40 of 43 16:04:14 16:04:14 1 none:none
 none|none none none
36bb7118f0
NEW
8b4a36f5a7
NEW
9b5bd50972
NEW
b4afa1df1d
NEW		 none [none]
none [none]
none [none]
none [none]		 WinXP 41 of 43 11:41:47 11:41:47 1 none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
7ea0317789
NEW		 18ff3687ad [0] WinXP 38 of 40 15:07:06 15:07:06 1 ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
71e6f60517
NEW		 1ef1781501 [0] WinXP
Win2K-f		 40 of 41 07:53:56 23:44:32 4 ASM:Graph
 Armadillo| 0% lines=91 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 33 01:12:37 20:52:57 7 ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
36bb7118f0
NEW		 none [none] WinXP 25 of 41 11:41:47 11:41:47 1 none:none
 none|none none none
c89b154681
NEW		 58d02dbffa [0] WinXP 40 of 41 09:53:12 09:53:12 1 ASM:Graph
 StarForce| 96% lines=64
embedded dns		 trace
e3faefa56a
NEW		 1d04d6dc84 [0] WinXP 40 of 41 14:34:15 14:34:15 1 ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
38ed850a0e
NEW
b9297745a1
NEW		 46990f37cd [0]
4294884d84[0]
4294884d84[0]		 Win2K-f 35 of 38 03:47:29 03:47:29 1 ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
687eb47a37
NEW		 none [none] Win2K-f 41 of 42 14:29:59 14:29:59 1 none:none
 none|none none none
8081b6b58c
NEW		 none [none] WinXP 40 of 42 01:48:25 01:48:25 1 none:none
 none|none none none
b35d8ec50e
NEW		 none [none] WinXP 35 of 36 15:28:09 15:28:09 1 none:none
 none|none none none
ecfbf321d3
NEW		 none [none] WinXP
Win2K-f		 38 of 41 03:55:25 13:35:09 3 none:none
 none|none none none
c13a6c3da5
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 16:34:16 16:34:16 1 ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
db12dac6c7
NEW		 afaf06d6cd [0] WinXP 41 of 41 15:32:18 15:32:18 1 ASM:Graph
 pex| 81% lines=42 trace
a1fac31325
NEW		 0fd057b5e2 [0] Win2K-f 39 of 42 01:59:02 01:59:02 1 none:none
 Armadillo| none trace
067917e07b
NEW
d764c1dcb2
NEW		 dae35b319c [0]
3d2bc60c5d[0]
3d2bc60c5d[0]		 Win2K-f 38 of 40 14:15:40 14:15:40 1 ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
c23a910a12
NEW		 none [none] WinXP 41 of 43 14:23:25 14:23:25 1 none:none
 none|none none none
9363d60262
NEW		 1d04d6dc84 [0] Win2K-f 36 of 40 16:09:29 16:09:29 1 ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
a1fac31325
NEW
c018e17b5b
NEW		 0fd057b5e2 [0]
8caee80d88[0]
8caee80d88[0]		 Win2K-f 39 of 42 01:59:02 01:59:02 1 none:none
none:none
 Armadillo|
StarForce|		 none
none		 trace
trace
2cf0ba5461
NEW		 57a212e259 [0] WinXP 40 of 41 17:20:34 17:20:34 1 ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
986b59708d
NEW		 none [0] WinXP 29 of 29 04:05:42 11:34:26 5 none:none
 PolyEnE| 100% lines=57 trace
c03793a035
NEW		 1d04d6dc84 [0] Win2K-f 41 of 41 15:22:42 18:36:39 2 ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
53aa804019
NEW
95ddd4a823
NEW		 29c6cdbf45 [0]
9e78315a6d[0]
9e78315a6d[0]		 WinXP
Win2K-f		 39 of 41 07:17:51 18:24:03 2 ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
c4f4cf6afa
NEW		 none [none] WinXP 40 of 41 14:33:13 14:33:13 1 none:none
 none|none none none
d6df3972a0
NEW		 none [0] WinXP 29 of 29 20:42:18 20:42:18 1 none:none
 PolyEnE| 100% lines=65 trace
14593e79ce
NEW		 none [none] WinXP 39 of 43 22:29:06 22:29:06 1 none:none
 none|none none none
c45a01fbcc
NEW		 afaf06d6cd [0] WinXP 39 of 41 15:18:39 15:18:39 1 ASM:Graph
 pex| 81% lines=42 trace
6a6aaa5b73
NEW
8bde6dd126
NEW		 63889c9976 [0]
885c68f500[0]
885c68f500[0]		 Win2K-f 40 of 41 20:56:08 20:56:08 1 ASM:Graph
ASM:Graph
 tElock|
tElock|		 96% lines=42
lines=64
embedded dns		 trace
trace
38ed850a0e
NEW		 46990f37cd [0] Win2K-f 34 of 38 03:47:29 03:47:29 1 ASM:Graph
 Armadillo| 0% lines=91 trace
fb486908b0
NEW		 none [none] WinXP 41 of 43 03:52:33 03:52:33 1 none:none
 none|none none none
067917e07b
NEW		 dae35b319c [0] Win2K-f 36 of 41 14:15:40 14:15:40 1 ASM:Graph
 Armadillo| 0% lines=91 trace
397a46e596
NEW		 none [none] Win2K-f 37 of 42 02:36:45 02:36:45 1 none:none
 none|none none none
e708f05387
NEW		 none [none] WinXP 42 of 43 06:49:00 06:49:00 1 none:none
 none|none none none
29abb49a9a
NEW		 bed847a713 [0] WinXP 36 of 38 13:20:40 13:20:40 1 ASM:Graph
 PolyEnE| 100% lines=68 trace
8de4900c75
NEW		 none [none] WinXP 38 of 42 20:54:14 20:54:14 1 none:none
 none|none none none
36bb7118f0
NEW
8b4a36f5a7
NEW
9b5bd50972
NEW		 none [none]
none [none]
none [none]		 WinXP 34 of 39 11:41:47 11:41:47 1 none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
f996bf0275
NEW		 1e4ad6cdb1 [0] Win2K-f 38 of 41 14:58:20 14:58:20 1 ASM:Graph
 ASPack| 43% lines=3065
embedded dns		 trace
7d99b0e910
NEW		 none [0] WinXP 26 of 28 02:49:32 22:24:48 8 none:none
 PolyEnE| 99% lines=68 trace
92e29a98bd
NEW		 57d7791117 [0] WinXP 35 of 38 04:57:42 04:57:42 1 ASM:Graph
 none|none 98% lines=546 trace
f5286bdcaf
NEW		 none [none] Win2K-f 41 of 42 21:49:15 21:49:15 1 none:none
 none|none none none
ef2396e602
NEW		 none [none] WinXP 41 of 43 01:59:06 01:59:06 1 none:none
 none|none none none
53aa804019
NEW		 29c6cdbf45 [0] WinXP
Win2K-f		 39 of 41 07:17:51 18:24:03 2 ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
2131a2c834
NEW		 none [none] WinXP 39 of 42 16:26:20 16:26:20 1 none:none
 none|none none none
9810215e67
NEW		 18ff3687ad [0] Win2K-f 37 of 40 14:42:24 14:42:24 1 ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
9e9bfc1cb5
NEW		 none [none] WinXP 41 of 43 12:30:52 12:30:52 1 none:none
 none|none none none