Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


19 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
45e0b2544f
NEW
633a67eac3
NEW		 none[none]
none [none]		 WinXP 31 of 33 09:00:19 09:00:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1c7eb7ddae
NEW
20ee6418e6
NEW		 none[none]
none [none]		 Win2K-f 31 of 33 08:10:02 08:10:02 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
215317b391
NEW		 none[none] Win2K-f 25 of 33 18:46:43 18:46:43 1 none none:none
 none|none none none
53bfe15e91
[Firefox:753 hits: 06-17 to 07-18]
73f1082158
[Firefox:361 hits: 06-18 to 07-18]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 02:55:52 22:27:59 9 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
22999be88c
[Firefox: 6 hits: 04-05 to 06-20]		 eda2056971 [0] WinXP 31 of 32 06:10:22 07:26:52 2 none ASM:Graph
 PolyEnE| 100% lines=154
embedded dns		 trace
2851817490
[Firefox: 2 hits: 06-27 to 06-28]		 none[none] Win2K-f 32 of 33 03:57:11 03:57:11 1 none none:none
 none|none none none
dfcd73f7a7
[Firefox: 8 hits: 07-03 to 07-17]		 none[none] Win2K-f 30 of 33 22:12:09 22:12:09 1 none none:none
 none|none none none
53bfe15e91
[Firefox:753 hits: 06-17 to 07-18]		 none[4] WinXP
Win2K-f		 33 of 33 02:55:52 22:27:59 14 none none:none
 tElock| none trace
fef488dddc
NEW		 none[none] WinXP 30 of 33 03:45:22 03:45:22 1 none none:none
 none|none none none
c9594307a4
NEW		 none[none] WinXP 23 of 33 02:23:55 02:23:55 1 none none:none
 none|none none none
492957db81
[Firefox:66 hits: 05-01 to 05-05]		 064e4d7742 [0] WinXP 29 of 29 13:58:26 13:58:26 1 none ASM:Graph
 PolyEnE| 100% lines=69
embedded dns		 trace
53bfe15e91
[Firefox:753 hits: 06-17 to 07-18]
b7082104e4
[Firefox:51 hits: 06-18 to 07-18]		 none[4]
none [4]		 WinXP 8 of 33 08:38:53 08:38:53 1 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
5aeb9abc92
[Firefox: 3 hits: 12-27 to 07-16]		 none[none] WinXP 26 of 32 15:32:43 15:32:43 1 none none:none
 none|none none none
5c089fe241
NEW		 none[none] Win2K-f 32 of 33 09:33:25 09:33:25 1 none none:none
 none|none none none
0965a28cb9
NEW		 none[none] WinXP 29 of 33 09:11:34 09:11:34 1 none none:none
 none|none none none
897d59617c
[Firefox:49 hits: 06-28 to 07-18]		 none[none] WinXP
Win2K-f		 25 of 33 01:02:01 17:46:28 2 none none:none
 none|none none none
1ac39aea6b
NEW
7b1de9d82d
NEW
820bef376c
NEW		 none[none]
none [none]
none [none]		 Win2K-f 0 of 33 18:21:18 18:21:18 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
9341482fac
NEW		 none[none] Win2K-f 32 of 33 17:22:10 17:22:10 1 none none:none
 none|none none none
168aab35a3
[Firefox:58 hits: 06-17 to 07-18]		 none[4] Win2K-f
WinXP		 31 of 33 16:25:20 23:43:25 2 none none:none
 tElock| none trace
e8d4d8cde1
[Firefox:342 hits: 03-31 to 07-18]		 fda109a6fd [0] Win2K-f 13 of 31 02:26:02 02:26:02 1 none ASM:Graph
 ASProtect| 64% lines=583
embedded dns		 trace
d42c1cc7c0
[Firefox:319 hits: 05-01 to 07-18]		 af9ca5bed1 [0] WinXP 29 of 29 07:54:20 07:54:20 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
3c6781570e
NEW		 none[none] WinXP 28 of 33 06:54:08 06:54:08 1 none none:none
 none|none none none
f502585714
[Firefox:94 hits: 05-03 to 07-10]		 ae590430c5 [0] WinXP 29 of 29 14:21:57 14:21:57 1 none ASM:Graph
 PolyEnE| 100% lines=63 trace
2aa59ba425
[Firefox:44 hits: 06-30 to 07-17]		 2aa59ba425 [1] Win2K-f 28 of 30 14:31:58 14:31:58 1 none ASM:Graph
 ASPack| lines=10 trace
06f27eb5cb
[Firefox: 2 hits: 07-02 to 07-07]		 none[none] WinXP 28 of 33 19:46:12 19:46:12 1 none none:none
 none|none none none
4c3df24b32
[Firefox:96 hits: 06-17 to 07-18]
dbce870f48
[Firefox: 2 hits: 07-03 to 07-05]		 4c3df24b32 [1]
none [none]		 WinXP 29 of 32 22:26:16 22:26:16 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
eecf32426c
NEW		 none[none] WinXP 29 of 33 22:09:50 22:09:50 1 none none:none
 none|none none none
168aab35a3
[Firefox:58 hits: 06-17 to 07-18]
4c3df24b32
[Firefox:96 hits: 06-17 to 07-18]		 none[4]
4c3df24b32[1]		 Win2K-f
WinXP		 0 of 33 16:25:20 23:43:25 5 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
7fdfe363d5
[Firefox:2996 hits: 12-31 to 07-18]		 10862ea8b8 [0] WinXP
Win2K-f		 25 of 28 00:28:20 23:26:25 31 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
6d86a1ff5a
[Firefox:15 hits: 06-25 to 07-12]		 none[none] Win2K-f 28 of 33 21:38:09 21:38:09 1 none none:none
 none|none none none
897d59617c
[Firefox:49 hits: 06-28 to 07-18]
a014934a72
[Firefox:73 hits: 06-28 to 07-18]
cbb15caa12
NEW		 none[none]
none [none]
none [none]		 Win2K-f 31 of 33 17:46:28 17:46:28 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
741e3b03b3
[Firefox:171 hits: 09-28 to 07-18]		 e0197e8a64 [0] WinXP 31 of 32 01:22:45 21:06:07 5 none ASM:Graph
 none|none 100% lines=62 trace
0a0261b96a
[Firefox: 8 hits: 07-16 to 07-16]		 none[none] WinXP 24 of 29 22:43:22 22:43:22 1 none none:none
 none|none none none
5f11b319ef
[Firefox: 5 hits: 07-07 to 07-17]
a3f631e410
[Firefox: 5 hits: 07-07 to 07-17]		 none[none]
none [none]		 Win2K-f 31 of 33 02:24:23 02:24:23 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6d86a1ff5a
[Firefox:15 hits: 06-25 to 07-12]
7f6e032fc0
[Firefox:15 hits: 06-25 to 07-12]		 none[none]
none [none]		 Win2K-f 31 of 33 21:38:09 21:38:09 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
831f4ee0a7
[Firefox:712 hits: 07-11 to 07-17]		 eb7546c600 [0] WinXP 29 of 29 11:31:35 21:41:19 5 none ASM:Graph
 none|none 100% lines=61 trace
5f11b319ef
[Firefox: 5 hits: 07-07 to 07-17]		 none[none] Win2K-f 24 of 33 02:24:23 02:24:23 1 none none:none
 none|none none none
5c089fe241
NEW
6aff15795d
NEW
b5919931fe
[Firefox:136 hits: 06-20 to 07-18]		 none[none]
none [none]
b5919931fe[1]		 Win2K-f 0 of 32 00:35:27 09:33:25 2 none none:none
none:none
ASM:Graph
 none|none
none|none
ASProtect|		 48% none
none
lines=90		 none
none
trace
0fc4826292
NEW		 none[none] Win2K-f 32 of 33 10:23:44 10:23:44 1 none none:none
 none|none none none
93385541f3
[Firefox:10 hits: 06-22 to 07-16]		 none[4] WinXP 32 of 32 08:45:19 19:26:52 2 none none:none
 none|none none trace
7ef46e4e16
[Firefox:15 hits: 11-28 to 07-17]		 ef2e743fd2 [0] WinXP 31 of 32 04:11:32 04:11:32 1 none ASM:Graph
 PolyEnE| 99% lines=74 trace
2ef9098242
NEW
897d59617c
[Firefox:49 hits: 06-28 to 07-18]
a014934a72
[Firefox:73 hits: 06-28 to 07-18]
d789c8d157
NEW		 none[none]
none [none]
none [none]
none [none]		 WinXP 31 of 33 01:02:01 01:02:01 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
0a0261b96a
[Firefox: 8 hits: 07-16 to 07-16]
16d7c031c5
NEW		 none[none]
none [none]		 WinXP 15 of 33 22:43:22 22:43:22 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:753 hits: 06-17 to 07-18]
a08f3b74a4
[Firefox:249 hits: 06-18 to 07-18]		 none[4]
a08f3b74a4[1]		 Win2K-f 0 of 33 13:30:50 16:15:31 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
897d59617c
[Firefox:49 hits: 06-28 to 07-18]
a014934a72
[Firefox:73 hits: 06-28 to 07-18]		 none[none]
none [none]		 WinXP
Win2K-f		 27 of 33 01:02:01 17:46:28 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
9a9330fc9a
NEW		 none[none] WinXP 31 of 33 05:28:39 05:28:39 1 none none:none
 none|none none none
f1404cd261
NEW		 none[none] WinXP 32 of 33 00:16:48 00:16:48 1 none none:none
 none|none none none
a483ba8aa1
[Firefox: 7 hits: 07-09 to 07-18]		 none[none] WinXP 33 of 33 07:16:18 07:16:18 1 none none:none
 none|none none none
8354fa612f
[Firefox: 3 hits: 06-30 to 07-09]		 none[none] WinXP 30 of 32 01:31:34 01:31:34 1 none none:none
 none|none none none
3c6781570e
NEW
537e4f8dce
NEW		 none[none]
none [none]		 WinXP 32 of 33 06:54:08 06:54:08 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
c4cbb2e5e5
NEW		 none[none] Win2K-f 17 of 33 18:36:48 18:36:48 1 none none:none
 none|none none none
1f30ad9ed7
NEW
fb6a23eb04
NEW		 none[none]
none [none]		 WinXP 30 of 33 11:18:23 11:18:23 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
ce20f92227
[Firefox: 2 hits: 07-07 to 07-07]		 none[none] WinXP 32 of 33 16:21:17 16:21:17 1 none none:none
 none|none none none
1e5df7ba74
[Firefox:29 hits: 03-24 to 07-10]		 a5331b711f [0] WinXP 31 of 32 10:27:58 10:29:26 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
607b60ad51
[Firefox: 8 hits: 06-20 to 07-15]
e5c7bce70e
[Firefox: 8 hits: 06-20 to 07-15]		 none[4]
e5c7bce70e[1]		 WinXP 2 of 32 17:28:32 17:28:32 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
2851817490
[Firefox: 2 hits: 06-27 to 06-28]
624c441842
NEW		 none[none]
none [none]		 Win2K-f 9 of 33 03:57:11 03:57:11 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
16874933ea
[Firefox:20 hits: 06-18 to 07-17]
76ee340669
[Firefox:20 hits: 06-18 to 07-17]		 16874933ea [1]
none [4]		 Win2K-f 33 of 33 00:35:27 00:35:27 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=82
none		 trace
trace
3373948767
[Firefox: 7 hits: 07-03 to 07-17]
c73f738c30
[Firefox: 7 hits: 07-03 to 07-17]		 none[none]
none [none]		 Win2K-f 29 of 33 04:43:12 04:43:12 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3c8ada1df2
NEW
b8ba472d64
NEW		 none[none]
none [none]		 Win2K-f 29 of 33 01:46:52 01:46:52 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1c7eb7ddae
NEW		 none[none] Win2K-f 30 of 33 08:10:02 08:10:02 1 none none:none
 none|none none none
79a7a6d0ef
NEW		 none[none] WinXP 28 of 33 22:21:25 22:21:25 1 none none:none
 none|none none none
1ac39aea6b
NEW		 none[none] Win2K-f 8 of 33 18:21:18 18:21:18 1 none none:none
 none|none none none
27b945de66
[Firefox:10 hits: 06-20 to 07-11]		 none[4] WinXP 31 of 32 17:17:48 17:17:48 1 none none:none
 none|none none trace
b2aa60cb38
NEW		 none[none] WinXP 30 of 33 01:49:49 01:49:49 1 none none:none
 none|none none none
16874933ea
[Firefox:20 hits: 06-18 to 07-17]		 16874933ea [1] Win2K-f 29 of 33 00:35:27 00:35:27 1 none ASM:Graph
 Armadillo| 48% lines=82 trace
45e0b2544f
NEW		 none[none] WinXP 31 of 33 09:00:19 09:00:19 1 none none:none
 none|none none none
3c8ada1df2
NEW		 none[none] Win2K-f 30 of 33 01:46:52 01:46:52 1 none none:none
 none|none none none
168aab35a3
[Firefox:58 hits: 06-17 to 07-18]
4c3df24b32
[Firefox:96 hits: 06-17 to 07-18]
e07c29c4ae
[Firefox:106 hits: 06-19 to 07-18]		 none[4]
4c3df24b32[1]
e07c29c4ae[1]		 WinXP 0 of 33 23:43:25 23:43:25 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
ce75163af2
NEW		 none[none] Win2K-f 32 of 33 15:29:49 15:29:49 1 none none:none
 none|none none none
8178c88f5e
[Firefox: 9 hits: 07-08 to 07-18]		 none[none] WinXP 33 of 33 04:06:20 04:06:20 1 none none:none
 none|none none none
7f60162c2c
[Firefox:1424 hits: 12-31 to 07-18]		 1aad8e4632 [0] WinXP 25 of 25 11:14:05 11:14:05 1 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
50cf31abc4
NEW		 none[none] Win2K-f 2 of 33 21:39:09 21:39:09 1 none none:none
 none|none none none
f0b49cdcfc
[Firefox: 3 hits: 07-04 to 07-18]		 none[none] WinXP 33 of 33 09:20:08 09:20:08 1 none none:none
 none|none none none
3373948767
[Firefox: 7 hits: 07-03 to 07-17]		 none[none] Win2K-f 30 of 33 04:43:12 04:43:12 1 none none:none
 none|none none none
5c089fe241
NEW
6aff15795d
NEW		 none[none]
none [none]		 Win2K-f 29 of 33 09:33:25 09:33:25 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7d99b0e910
[Firefox:3214 hits: 12-31 to 07-18]		 7a70e1b592 [0] WinXP 26 of 28 10:51:58 21:26:58 3 none ASM:Graph
 PolyEnE| 99% lines=68 trace
06f27eb5cb
[Firefox: 2 hits: 07-02 to 07-07]
d27dfd506b
[Firefox: 2 hits: 07-02 to 07-07]		 none[none]
none [none]		 WinXP 31 of 33 19:46:12 19:46:12 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1ac39aea6b
NEW
7b1de9d82d
NEW		 none[none]
none [none]		 Win2K-f 21 of 33 18:21:18 18:21:18 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
c9594307a4
NEW
e37658a526
NEW		 none[none]
none [none]		 WinXP 32 of 33 02:23:55 02:23:55 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a92c299250
NEW
f0e73c39a8
[Firefox: 2 hits: 06-18 to 06-24]		 none[none]
none [4]		 Win2K-f 31 of 33 10:20:12 10:20:12 1 none none:none
none:none
 none|none
tElock|		 none
none		 none
trace
1f30ad9ed7
NEW		 none[none] WinXP 31 of 33 11:18:23 11:18:23 1 none none:none
 none|none none none
607b60ad51
[Firefox: 8 hits: 06-20 to 07-15]		 none[4] WinXP 31 of 32 17:28:32 17:28:32 1 none none:none
 tElock| none trace
2ef9098242
NEW		 none[none] WinXP 30 of 33 01:02:01 01:02:01 1 none none:none
 none|none none none
1ac39aea6b
NEW
7b1de9d82d
NEW
820bef376c
NEW
d6fbe37100
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 27 of 33 18:21:18 18:21:18 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
a92c299250
NEW		 none[none] Win2K-f 30 of 33 10:20:12 10:20:12 1 none none:none
 none|none none none
0fc4826292
NEW
970ae34562
NEW		 none[none]
none [none]		 Win2K-f 30 of 33 10:23:44 10:23:44 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none