Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


23 June 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
e759d2b517
NEW		 none[4] WinXP 29 of 32 18:23:31 18:23:31 1 none none:none
 PolyEnE| none trace
e480c6484a
NEW		 none[4] Win2K-f 0 of 0 15:28:26 15:28:26 1 none none:none
 FSG| none trace
53bfe15e91
[Firefox:140 hits: 06-17 to 06-22]
73f1082158
[Firefox:50 hits: 06-18 to 06-22]		 none[4]
73f1082158[1]		 Win2K-f 0 of 32 15:50:57 20:43:09 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
53bfe15e91
[Firefox:140 hits: 06-17 to 06-22]		 none[4] Win2K-f
WinXP		 33 of 33 10:13:47 21:17:18 10 none none:none
 tElock| none trace
05c5bca473
NEW		 none[4] Win2K-f 0 of 0 21:43:50 21:43:50 1 none none:none
 StarForce| none trace
3dd83c631f
NEW		 none[4] WinXP 0 of 0 18:46:11 18:46:11 1 none none:none
 tElock| none trace
7d9b611c43
NEW		 none[4] Win2K-f 0 of 0 05:18:44 17:58:08 3 none none:none
 tElock| none trace
7d9b611c43
NEW
8d60c59e25
NEW		 none[4]
none [4]		 Win2K-f 0 of 0 17:58:08 17:58:08 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
trace
23c32fbd78
[Firefox: 3 hits: 05-03 to 06-05]		 none[4] Win2K-f 16 of 31 19:20:17 19:20:17 1 none none:none
 PeCompact| none trace
53bfe15e91
[Firefox:140 hits: 06-17 to 06-22]
b7082104e4
[Firefox: 7 hits: 06-18 to 06-20]		 none[4]
none [4]		 WinXP 8 of 33 16:26:45 16:26:45 1 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
2110c8100f
NEW		 none[4] WinXP 29 of 32 11:07:43 11:07:43 1 none none:none
 PolyEnE| none trace
4c3df24b32
[Firefox:19 hits: 06-17 to 06-22]
8390780c27
[Firefox: 3 hits: 06-18 to 06-21]		 4c3df24b32 [1]
none [4]		 Win2K-f 30 of 32 02:16:43 02:16:43 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
99b828dad0
NEW		 none[4] WinXP 0 of 0 19:42:41 19:42:41 1 none none:none
 PolyEnE| none trace
ec5495e4fe
NEW		 none[4] WinXP 17 of 32 15:54:10 15:54:10 1 none none:none
 PolyEnE| none trace
3ce8dd4359
[Firefox: 5 hits: 07-10 to 02-19]		 cb80a979e8 [0] WinXP 20 of 29 15:19:23 15:19:23 1 none ASM:Graph
 ASPack| 0% lines=2 trace
c929e6508d
NEW
ee1d9a67bb
NEW		 c929e6508d [1]
none [4]		 Win2K-f 0 of 0 12:58:53 12:58:53 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
7d9b611c43
NEW
bb40cbf335
NEW		 none[4]
none [4]		 Win2K-f 0 of 0 05:43:00 05:43:00 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
trace
bca9e0fb5f
[Firefox: 3 hits: 06-18 to 06-22]
e53a9ea82e
[Firefox: 3 hits: 06-18 to 06-22]		 none[4]
e53a9ea82e[1]		 Win2K-f 23 of 33 22:46:31 22:46:31 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
bca9e0fb5f
[Firefox: 3 hits: 06-18 to 06-22]		 none[4] Win2K-f 31 of 32 22:46:31 22:46:31 1 none none:none
 PolyEnE| none trace
4e0a21df9c
NEW		 none[4] Win2K-f 0 of 0 10:59:06 10:59:06 1 none none:none
 FSG| none trace
c929e6508d
NEW		 c929e6508d [1] Win2K-f 0 of 0 12:58:53 12:58:53 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
a12cab51ef
[Firefox:1064 hits: 05-01 to 06-21]		 40f7f463c4 [0] WinXP 29 of 29 12:24:00 12:24:00 1 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
53bfe15e91
[Firefox:140 hits: 06-17 to 06-22]
a08f3b74a4
[Firefox:46 hits: 06-18 to 06-22]
e07c29c4ae
[Firefox:24 hits: 06-19 to 06-22]		 none[4]
a08f3b74a4[1]
e07c29c4ae[1]		 WinXP 0 of 33 11:31:43 11:31:43 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
4f8d6c0a4d
NEW
929a9a1ac4
NEW		 none[4]
none [4]		 WinXP 0 of 0 11:45:38 11:45:38 1 none none:none
none:none
 none|none
none|none		 none
none		 trace
trace
4dcf7f18ac
NEW		 none[4] Win2K-f 29 of 32 22:56:42 22:56:42 1 none none:none
 tElock| none trace
7452c8448d
NEW		 none[4] WinXP 30 of 32 18:42:06 18:42:06 1 none none:none
 PolyEnE| none trace
fe22b8315f
[Firefox: 2 hits: 06-19 to 06-21]		 none[4] Win2K-f 32 of 33 21:23:28 21:23:28 1 none none:none
 StarForce| none trace
03f912899b
[Firefox:18 hits: 12-14 to 06-21]		 83893bd25d [0] WinXP 32 of 32 14:37:47 14:37:47 1 none ASM:Graph
 none|none 100% lines=65 trace
7fdfe363d5
[Firefox:2691 hits: 12-31 to 06-22]		 10862ea8b8 [0] WinXP
Win2K-f		 25 of 28 14:55:54 20:13:46 6 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
4c3df24b32
[Firefox:19 hits: 06-17 to 06-22]		 4c3df24b32 [1] Win2K-f 0 of 33 02:16:43 20:07:55 2 none ASM:Graph
 Armadillo| 47% lines=81 trace
7f60162c2c
[Firefox:1344 hits: 12-31 to 06-22]		 1aad8e4632 [0] WinXP 25 of 25 01:51:05 03:22:39 2 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
7d9b611c43
NEW
8d60c59e25
NEW
954a98c971
NEW		 none[4]
none [4]
none [4]		 Win2K-f 31 of 33 17:58:08 17:58:08 1 none none:none
none:none
none:none
 tElock|
none|none
FSG|		 none
none
none		 trace
trace
trace
741e3b03b3
[Firefox:55 hits: 09-28 to 06-22]		 e0197e8a64 [0] WinXP 31 of 32 05:01:29 19:26:01 4 none ASM:Graph
 none|none 100% lines=62 trace
7df41a77e6
NEW		 none[4] Win2K-f 30 of 33 06:36:13 06:36:13 1 none none:none
 PolyEnE| none trace
2a8d1f17ac
NEW		 none[4] Win2K-f 0 of 0 05:18:44 05:18:44 1 none none:none
 none|none none trace
3dd83c631f
NEW
dda4f0bd66
NEW		 none[4]
dda4f0bd66[1]		 WinXP 0 of 0 18:46:11 18:46:11 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
7452c8448d
NEW
fd9b49840f
NEW		 none[4]
fd9b49840f[1]		 WinXP 0 of 0 18:42:06 18:42:06 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
2a8d1f17ac
NEW
745ae23613
NEW		 none[4]
none [4]		 Win2K-f 0 of 0 05:18:44 05:18:44 1 none none:none
none:none
 none|none
PeCompact|		 none
none		 trace
trace
4dcf7f18ac
NEW
9bf5558de5
NEW		 none[4]
9bf5558de5[1]		 Win2K-f 27 of 32 22:56:42 22:56:42 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
f9bf3a1e43
NEW		 f9bf3a1e43 [1] Win2K-f 0 of 0 17:04:15 17:04:15 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
1898e66cd2
[Firefox: 3 hits: 05-20 to 06-22]		 none[4] WinXP 31 of 32 03:55:31 03:55:31 1 none none:none
 PolyEnE| none trace
dc20b6fe59
NEW		 dc20b6fe59 [1] Win2K-f 0 of 0 14:55:16 14:55:16 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
dc20b6fe59
NEW
f97070ef2b
NEW		 dc20b6fe59 [1]
none [4]		 Win2K-f 0 of 0 14:55:16 14:55:16 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=81
none		 trace
trace
7d99b0e910
[Firefox:3079 hits: 12-31 to 06-22]		 7a70e1b592 [0] WinXP 26 of 28 04:15:51 17:09:09 3 none ASM:Graph
 PolyEnE| 99% lines=68 trace
17028f1eda
[Firefox:12 hits: 09-29 to 06-22]		 none[3] WinXP 31 of 32 07:09:48 07:09:48 1 none none:none
 tElock| none trace
53bfe15e91
[Firefox:140 hits: 06-17 to 06-22]
a08f3b74a4
[Firefox:46 hits: 06-18 to 06-22]
b5919931fe
[Firefox:20 hits: 06-20 to 06-22]		 none[4]
a08f3b74a4[1]
b5919931fe[1]		 Win2K-f 0 of 32 10:13:47 10:13:47 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
2110c8100f
NEW
e818015a89
NEW		 none[4]
e818015a89[1]		 WinXP 0 of 0 11:07:43 11:07:43 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
a3708f06d0
NEW		 a3708f06d0 [1] Win2K-f 0 of 0 04:42:56 04:42:56 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
a47929d343
NEW		 none[4] WinXP 0 of 0 04:39:48 04:39:48 1 none none:none
 PolyEnE| none trace
1a2c0e6130
[Firefox:433 hits: 12-31 to 06-21]		 048df78048 [0] WinXP 29 of 29 19:10:42 21:28:48 3 none ASM:Graph
 none|none 100% lines=61 trace
7d9b611c43
NEW
8d60c59e25
NEW
954a98c971
NEW
c5622bb285
NEW		 none[4]
none [4]
none [4]
none [4]		 Win2K-f 0 of 0 05:18:44 17:58:08 3 none none:none
none:none
none:none
none:none
 tElock|
none|none
FSG|
none|none		 none
none
none
none		 trace
trace
trace
trace
a08f3b74a4
[Firefox:46 hits: 06-18 to 06-22]		 a08f3b74a4 [1] Win2K-f
WinXP		 0 of 33 10:13:47 22:22:12 7 none ASM:Graph
 Armadillo| 47% lines=81 trace
133401d618
[Firefox: 2 hits: 06-18 to 06-21]
7819d05bbf
NEW		 none[4]
7819d05bbf[1]		 WinXP 29 of 33 08:38:44 08:38:44 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
ab5e47bf8d
[Firefox:51 hits: 05-10 to 06-22]		 none[3] WinXP 29 of 29 08:03:47 08:03:47 1 none none:none
 ASPack| none trace
4f8d6c0a4d
NEW		 none[4] WinXP 0 of 0 11:45:38 11:45:38 1 none none:none
 none|none none trace
05c5bca473
NEW
09c7dd2528
NEW		 none[4]
09c7dd2528[1]		 Win2K-f 0 of 0 21:43:50 21:43:50 1 none none:none
ASM:Graph
 StarForce|
Armadillo|		 47% none
lines=82		 trace
trace
32a0d7d0e0
[Firefox:44 hits: 05-04 to 06-09]		 d791762796 [0] WinXP 29 of 29 21:07:32 21:07:32 1 none ASM:Graph
 tElock| 100% lines=81
embedded dns		 trace
a0139d7ad8
[Firefox:441 hits: 05-02 to 06-21]		 d9e9662db1 [0] WinXP 29 of 29 19:15:49 19:15:49 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
133401d618
[Firefox: 2 hits: 06-18 to 06-21]		 none[4] WinXP 31 of 33 08:38:44 08:38:44 1 none none:none
 tElock| none trace