Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



26 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
dac286fb33
NEW
none[none] WinXP 33 of 35 11:37:46 11:37:46 1 none none:none
none|none none none
449f96770b
NEW
none[none] Win2K-f 2 of 34 11:34:40 11:34:40 1 none none:none
none|none none none
53bfe15e91
[Firefox:921 hits: 06-17 to 07-25]
73f1082158
[Firefox:458 hits: 06-18 to 07-25]
none[4]
73f1082158[1]
WinXP
Win2K-f
0 of 32 00:05:27 23:48:39 13 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
378a4bac36
[Firefox: 2 hits: 07-01 to 07-15]
b5919931fe
[Firefox:149 hits: 06-20 to 07-25]
d11b4c2e19
[Firefox: 2 hits: 07-01 to 07-15]
none[none]
b5919931fe[1]
none [none]
Win2K-f 29 of 33 15:27:03 19:42:14 2 none none:none
ASM:Graph
none:none
none|none
ASProtect|
none|none
none
lines=90
none
none
trace
none
53bfe15e91
[Firefox:921 hits: 06-17 to 07-25]
none[4] WinXP
Win2K-f
33 of 33 00:05:27 23:48:39 25 none none:none
tElock| none trace
3f0a5b2ebe
[Firefox: 7 hits: 06-18 to 07-10]
5ab0a45f63
[Firefox: 4 hits: 07-24 to 07-24]
c6bfb5f0f2
[Firefox: 7 hits: 06-18 to 07-10]
none[4]
none [none]
c6bfb5f0f2[1]
Win2K-f 28 of 32 21:31:26 21:31:26 1 none none:none
none:none
ASM:Graph
PolyEnE|
none|none
Armadillo|
47% none
none
lines=81
trace
none
trace
55fe9d9ade
[Firefox:52 hits: 05-03 to 07-18]
4bce6c4887 [0] WinXP 29 of 29 08:16:34 08:16:34 1 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns
trace
87e1117f2a
NEW
none[none] Win2K-f 32 of 33 22:27:00 22:27:00 1 none none:none
none|none none none
33d3adcc81
NEW
c67c18c2a1
NEW
none[none]
none [none]
Win2K-f 34 of 35 08:25:01 20:48:10 2 none none:none
none:none
none|none
none|none
none
none
none
none
b402048f34
[Firefox: 2 hits: 07-05 to 07-21]
none[none] WinXP 27 of 33 13:49:23 13:49:23 1 none none:none
none|none none none
53bfe15e91
[Firefox:921 hits: 06-17 to 07-25]
b7082104e4
[Firefox:60 hits: 06-18 to 07-25]
none[4]
none [4]
Win2K-f
WinXP
8 of 33 14:43:29 15:20:17 2 none none:none
none:none
tElock|
tElock|
none
none
trace
trace
a6b65f725a
NEW
none[none] WinXP 33 of 34 20:48:23 20:48:23 1 none none:none
none|none none none
5378ab9d2d
[Firefox: 2 hits: 06-28 to 07-03]
none[none] WinXP 31 of 32 18:58:39 18:58:39 1 none none:none
none|none none none
765181de43
NEW
aad35e5bc5
NEW
none[none]
none [none]
Win2K-f 30 of 33 16:45:08 16:45:08 1 none none:none
none:none
none|none
none|none
none
none
none
none
32fdc78338
NEW
8390780c27
[Firefox:24 hits: 06-18 to 07-24]
none[none]
none [4]
Win2K-f 30 of 32 12:16:09 12:16:09 1 none none:none
none:none
none|none
tElock|
none
none
none
trace
e89d2af9c4
NEW
none[none] WinXP 35 of 35 15:47:55 15:47:55 1 none none:none
none|none none none
99b828dad0
NEW
none[4] Win2K-f 0 of 0 11:36:12 11:36:12 1 none none:none
PolyEnE| none trace
168aab35a3
[Firefox:68 hits: 06-17 to 07-25]
none[4] WinXP
Win2K-f
31 of 33 12:41:58 20:39:19 3 none none:none
tElock| none trace
00b7e57d8b
NEW
none[none] WinXP 32 of 35 12:31:00 12:31:00 1 none none:none
none|none none none
e321efdb3f
[Firefox:11 hits: 05-07 to 07-22]
none[none] WinXP 26 of 28 11:00:41 11:00:41 1 none none:none
none|none none none
a73c16ccd0
[Firefox: 2 hits: 01-03 to 06-27]
none[none] WinXP 29 of 29 06:17:32 06:17:32 1 none none:none
none|none none none
7bdeb65dd2
[Firefox: 2 hits: 07-04 to 07-11]
e2b84629ac
[Firefox: 2 hits: 07-04 to 07-11]
none[none]
none [none]
Win2K-f 31 of 33 10:09:36 10:09:36 1 none none:none
none:none
none|none
none|none
none
none
none
none
475d9a7753
NEW
none[4] Win2K-f 30 of 32 04:09:54 04:09:54 1 none none:none
tElock| none trace
5246e634df
NEW
none[none] Win2K-f 33 of 35 20:39:06 20:39:06 1 none none:none
none|none none none
d42c1cc7c0
[Firefox:321 hits: 05-01 to 07-23]
af9ca5bed1 [0] WinXP 29 of 29 16:49:23 16:49:23 1 none ASM:Graph
PolyEnE| 100% lines=54 trace
a12cab51ef
[Firefox:1136 hits: 05-01 to 07-25]
40f7f463c4 [0] WinXP 29 of 29 18:47:03 18:47:03 1 none ASM:Graph
ASPack| 54% lines=281
embedded dns
trace
2aa59ba425
[Firefox:46 hits: 06-30 to 07-21]
2aa59ba425 [1] WinXP 28 of 30 06:43:32 06:43:32 1 none ASM:Graph
ASPack| lines=10 trace
074325ecbc
[Firefox: 4 hits: 07-02 to 07-21]
none[none] Win2K-f 24 of 33 06:26:36 06:26:36 1 none none:none
none|none none none
03f912899b
[Firefox:58 hits: 12-14 to 07-25]
83893bd25d [0] WinXP 32 of 32 16:12:38 16:12:38 1 none ASM:Graph
none|none 100% lines=65 trace
765181de43
NEW
none[none] Win2K-f 31 of 33 16:45:08 16:45:08 1 none none:none
none|none none none
cce9566ceb
[Firefox:34 hits: 06-12 to 07-23]
none[4] WinXP 31 of 32 08:54:08 08:54:08 1 none none:none
PolyEnE| none trace
e96228a17e
NEW
none[none] Win2K-f 21 of 35 17:50:48 17:50:48 1 none none:none
none|none none none
47d8d38194
NEW
4adfa905ec
NEW
none[none]
none [none]
Win2K-f 34 of 35 07:49:38 07:49:38 1 none none:none
none:none
none|none
none|none
none
none
none
none
c50e0e1396
NEW
none[none] WinXP 31 of 35 06:20:57 06:20:57 1 none none:none
none|none none none
899035248c
NEW
899035248c [1] WinXP 29 of 32 00:19:59 00:19:59 1 none ASM:Graph
Armadillo| 47% lines=82 trace
37f41fd8ab
[Firefox: 4 hits: 07-24 to 07-24]
none[none] Win2K-f 19 of 35 20:39:19 22:06:23 3 none none:none
none|none none none
168aab35a3
[Firefox:68 hits: 06-17 to 07-25]
37f41fd8ab
[Firefox: 4 hits: 07-24 to 07-24]
4c3df24b32
[Firefox:112 hits: 06-17 to 07-25]
none[4]
none [none]
4c3df24b32[1]
Win2K-f
WinXP
0 of 33 06:20:56 20:39:19 5 none none:none
none:none
ASM:Graph
tElock|
none|none
Armadillo|
47% none
none
lines=81
trace
none
trace
6cadd3fa9b
NEW
none[none] WinXP 32 of 35 12:05:31 12:05:31 1 none none:none
none|none none none
5c7c5189af
NEW
none[none] Win2K-f 31 of 35 23:30:00 23:30:00 1 none none:none
none|none none none
6d86a1ff5a
[Firefox:21 hits: 06-25 to 07-25]
none[none] Win2K-f 28 of 33 12:16:51 12:16:51 1 none none:none
none|none none none
741e3b03b3
[Firefox:210 hits: 09-28 to 07-25]
e0197e8a64 [0] WinXP 31 of 32 06:39:57 13:59:48 5 none ASM:Graph
none|none 100% lines=62 trace
2949152a24
[Firefox: 4 hits: 07-02 to 07-25]
none[none] Win2K-f 30 of 32 23:04:45 23:04:45 1 none none:none
none|none none none
cf2da9e119
NEW
none[none] WinXP 35 of 35 14:13:29 14:13:29 1 none none:none
none|none none none
6d86a1ff5a
[Firefox:21 hits: 06-25 to 07-25]
7f6e032fc0
[Firefox:21 hits: 06-25 to 07-25]
none[none]
none [none]
Win2K-f 31 of 33 12:16:51 12:16:51 1 none none:none
none:none
none|none
none|none
none
none
none
none
831f4ee0a7
[Firefox:743 hits: 07-11 to 07-25]
eb7546c600 [0] WinXP 29 of 29 19:08:43 22:52:51 3 none ASM:Graph
none|none 100% lines=61 trace
3f0a5b2ebe
[Firefox: 7 hits: 06-18 to 07-10]
none[4] Win2K-f 32 of 33 21:31:26 21:31:26 1 none none:none
PolyEnE| none trace
81264c16dd
[Firefox: 3 hits: 07-03 to 07-14]
9a91743938
[Firefox: 3 hits: 07-03 to 07-14]
none[none]
none [none]
WinXP 29 of 33 22:31:58 22:31:58 1 none none:none
none:none
none|none
none|none
none
none
none
none
4b1e5a8e77
[Firefox: 2 hits: 07-05 to 07-25]
none[none] WinXP 32 of 33 01:27:18 01:27:18 1 none none:none
none|none none none
557c0e2562
NEW
none[none] Win2K-f 22 of 35 22:39:07 22:39:07 1 none none:none
none|none none none
378a4bac36
[Firefox: 2 hits: 07-01 to 07-15]
b5919931fe
[Firefox:149 hits: 06-20 to 07-25]
none[none]
b5919931fe[1]
Win2K-f 0 of 32 03:56:52 19:42:14 7 none none:none
ASM:Graph
none|none
ASProtect|
48% none
lines=90
none
trace
93385541f3
[Firefox:15 hits: 06-22 to 07-24]
none[4] WinXP 32 of 32 20:40:14 23:15:27 2 none none:none
none|none none trace
9d9054829c
[Firefox: 3 hits: 06-24 to 07-18]
none[4] WinXP 31 of 33 11:41:59 11:41:59 1 none none:none
tElock| none trace
4ce93b70f2
NEW
none[none] Win2K-f 31 of 35 01:46:46 01:48:16 2 none none:none
none|none none none
57ce4acac2
[Firefox:79 hits: 06-17 to 07-25]
57ce4acac2 [1] WinXP 0 of 33 03:10:06 04:29:49 2 none ASM:Graph
Armadillo| 47% lines=81 trace
4b1e5a8e77
[Firefox: 2 hits: 07-05 to 07-25]
9a62aaacc0
NEW
none[none]
none [none]
WinXP 3 of 35 01:27:18 01:27:18 1 none none:none
none:none
none|none
none|none
none
none
none
none
2ef2f78792
[Firefox: 8 hits: 06-21 to 07-15]
b7a332eb7c
[Firefox: 8 hits: 06-21 to 07-15]
2ef2f78792 [1]
none [4]
Win2K-f 30 of 33 21:34:30 21:34:30 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=82
none
trace
trace
53bfe15e91
[Firefox:921 hits: 06-17 to 07-25]
a08f3b74a4
[Firefox:299 hits: 06-18 to 07-25]
none[4]
a08f3b74a4[1]
WinXP
Win2K-f
0 of 33 10:41:17 20:14:54 7 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
87e1117f2a
NEW
b4fe4581c3
NEW
none[none]
none [none]
Win2K-f 29 of 33 22:27:00 22:27:00 1 none none:none
none:none
none|none
none|none
none
none
none
none
47d8d38194
NEW
none[none] Win2K-f 30 of 35 07:49:38 07:49:38 1 none none:none
none|none none none
32fdc78338
NEW
none[none] Win2K-f 32 of 35 12:16:09 12:16:09 1 none none:none
none|none none none
3516e33174
NEW
none[none] Win2K-f 32 of 33 00:28:01 00:28:01 1 none none:none
none|none none none
37f41fd8ab
[Firefox: 4 hits: 07-24 to 07-24]
5ab0a45f63
[Firefox: 4 hits: 07-24 to 07-24]
none[none]
none [none]
Win2K-f 17 of 35 20:39:19 22:06:23 4 none none:none
none:none
none|none
none|none
none
none
none
none
2d76ff4e53
NEW
none[none] Win2K-f 34 of 35 15:40:36 15:40:36 1 none none:none
none|none none none
8b3607bd00
NEW
none[none] WinXP 34 of 35 23:05:51 23:05:52 2 none none:none
none|none none none
16874933ea
[Firefox:22 hits: 06-18 to 07-22]
76ee340669
[Firefox:22 hits: 06-18 to 07-22]
16874933ea [1]
none [4]
Win2K-f 33 of 33 03:56:52 03:56:52 1 none ASM:Graph
none:none
Armadillo|
PolyEnE|
lines=82
none
trace
trace
46fa1ba8ee
NEW
none[none] Win2K-f 31 of 35 07:53:15 07:53:15 1 none none:none
none|none none none
f2f692a719
NEW
none[none] WinXP 30 of 35 20:33:55 20:33:55 1 none none:none
none|none none none
a99f17e623
[Firefox:25 hits: 03-28 to 07-03]
87dfec58db [0] WinXP 31 of 32 08:18:44 08:18:44 1 none ASM:Graph
PolyEnE| 99% lines=69 trace
46fa1ba8ee
NEW
f76b83473a
NEW
none[none]
none [none]
Win2K-f 34 of 35 07:53:15 07:53:15 1 none none:none
none:none
none|none
none|none
none
none
none
none
154d5f562a
NEW
none[none] WinXP 32 of 35 18:31:49 18:31:49 1 none none:none
none|none none none
5c7c5189af
NEW
ec725de4e7
NEW
none[none]
none [none]
Win2K-f 32 of 35 23:30:00 23:30:00 1 none none:none
none:none
none|none
none|none
none
none
none
none
16874933ea
[Firefox:22 hits: 06-18 to 07-22]
16874933ea [1] Win2K-f 29 of 33 03:56:52 03:56:52 1 none ASM:Graph
Armadillo| 48% lines=82 trace
9d9054829c
[Firefox: 3 hits: 06-24 to 07-18]
b69118be9f
[Firefox: 3 hits: 06-24 to 07-18]
none[4]
b69118be9f[1]
WinXP 30 of 33 11:41:59 11:41:59 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=82
trace
trace
87bd0a062f
[Firefox: 4 hits: 06-29 to 07-24]
none[none] Win2K-f 30 of 33 01:09:53 01:09:53 1 none none:none
none|none none none
2949152a24
[Firefox: 4 hits: 07-02 to 07-25]
f1a10a0d85
[Firefox: 4 hits: 07-02 to 07-25]
none[none]
none [none]
Win2K-f 30 of 33 23:04:45 23:04:45 1 none none:none
none:none
none|none
none|none
none
none
none
none
382279b44f
[Firefox:20 hits: 05-22 to 07-25]
049e62d55b [0] Win2K-f
WinXP
19 of 32 05:09:48 23:34:29 7 none ASM:Graph
Armadillo| 50% lines=192 trace
3cd7958258
[Firefox:10 hits: 06-17 to 07-25]
41efedf70f
[Firefox: 9 hits: 06-19 to 07-25]
e07c29c4ae
[Firefox:118 hits: 06-19 to 07-25]
none[4]
41efedf70f[1]
e07c29c4ae[1]
WinXP 0 of 33 12:41:58 19:43:24 3 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
FSG|
48% none
lines=82
lines=92
trace
trace
trace
7df4b2c746
NEW
none[none] WinXP 28 of 34 06:37:18 06:40:16 2 none none:none
none|none none none
9716d7995a
NEW
none[none] WinXP 35 of 35 13:22:35 13:23:03 2 none none:none
none|none none none
3cd7958258
[Firefox:10 hits: 06-17 to 07-25]
none[4] WinXP
Win2K-f
30 of 33 15:48:07 23:14:29 3 none none:none
tElock| none trace
7bdeb65dd2
[Firefox: 2 hits: 07-04 to 07-11]
none[none] Win2K-f 31 of 33 10:09:36 10:09:36 1 none none:none
none|none none none
378a4bac36
[Firefox: 2 hits: 07-01 to 07-15]
none[none] Win2K-f 30 of 33 15:27:03 19:42:14 2 none none:none
none|none none none
074325ecbc
[Firefox: 4 hits: 07-02 to 07-21]
2a66fc87fa
[Firefox: 4 hits: 07-02 to 07-21]
none[none]
none [none]
Win2K-f 32 of 33 06:26:36 06:26:36 1 none none:none
none:none
none|none
none|none
none
none
none
none
a40ec6f7e3
NEW
none[none] WinXP 34 of 35 21:37:45 21:37:47 2 none none:none
none|none none none
57ce4acac2
[Firefox:79 hits: 06-17 to 07-25]
83f26f5044
[Firefox:15 hits: 06-20 to 07-23]
57ce4acac2 [1]
none [4]
WinXP 29 of 32 04:29:49 04:29:49 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=81
none
trace
trace
7f60162c2c
[Firefox:1446 hits: 12-31 to 07-25]
1aad8e4632 [0] WinXP 25 of 25 12:07:17 12:07:17 1 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns
trace
776985f561
NEW
776985f561 [1] Win2K-f 31 of 33 09:36:46 09:36:46 1 none ASM:Graph
Armadillo| 47% lines=82 trace
d1770194f5
NEW
none[none] Win2K-f 33 of 35 18:32:45 18:32:45 1 none none:none
none|none none none
3cd7958258
[Firefox:10 hits: 06-17 to 07-25]
41efedf70f
[Firefox: 9 hits: 06-19 to 07-25]
none[4]
41efedf70f[1]
WinXP
Win2K-f
28 of 32 15:48:07 23:14:29 3 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=82
trace
trace
0c803048e4
NEW
none[none] WinXP 35 of 35 13:39:27 13:39:27 1 none none:none
none|none none none
8acd7e1937
[Firefox: 5 hits: 06-22 to 07-07]
cc9d6491b2
NEW
8acd7e1937 [1]
none [none]
WinXP 31 of 34 04:37:16 04:37:16 1 none ASM:Graph
none:none
none|none
none|none
lines=0
none
trace
none
892144694d
NEW
none[none] Win2K-f 33 of 35 02:05:49 02:05:49 1 none none:none
none|none none none
3ae357d17b
[Firefox:745 hits: 05-01 to 07-24]
462a7be171 [0] WinXP 29 of 29 03:14:06 23:32:45 4 none ASM:Graph
PolyEnE| 99% lines=73 trace
b9cdf4ca69
[Firefox: 2 hits: 06-18 to 07-24]
none[4] Win2K-f 31 of 33 01:37:45 01:37:45 1 none none:none
none|none none trace
33d3adcc81
NEW
none[none] Win2K-f 32 of 35 08:25:01 20:48:10 2 none none:none
none|none none none
2d76ff4e53
NEW
7df1377ee3
NEW
none[none]
none [none]
Win2K-f 32 of 35 15:40:36 15:40:36 1 none none:none
none:none
none|none
none|none
none
none
none
none
7d99b0e910
[Firefox:3256 hits: 12-31 to 07-25]
7a70e1b592 [0] WinXP 26 of 28 05:33:30 23:24:19 12 none ASM:Graph
PolyEnE| 99% lines=68 trace
8acd7e1937
[Firefox: 5 hits: 06-22 to 07-07]
8acd7e1937 [1] WinXP 29 of 32 04:37:16 04:37:16 1 none ASM:Graph
none|none 44% lines=0 trace
89c318e39d
NEW
none[none] WinXP 34 of 35 20:01:40 20:01:40 1 none none:none
none|none none none
776985f561
NEW
8ec6129efe
NEW
776985f561 [1]
none [4]
Win2K-f 31 of 33 09:36:46 09:36:46 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=82
none
trace
trace
81264c16dd
[Firefox: 3 hits: 07-03 to 07-14]
none[none] WinXP 31 of 33 22:31:58 22:31:58 1 none none:none
none|none none none
168aab35a3
[Firefox:68 hits: 06-17 to 07-25]
61426996c3
[Firefox: 6 hits: 06-20 to 07-21]
none[4]
61426996c3[1]
WinXP 29 of 32 14:56:27 14:56:27 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=82
trace
trace
87bd0a062f
[Firefox: 4 hits: 06-29 to 07-24]
c7d6018f97
[Firefox: 4 hits: 06-29 to 07-24]
none[none]
none [none]
Win2K-f 31 of 33 01:09:53 01:09:53 1 none none:none
none:none
none|none
none|none
none
none
none
none
6b908b4135
NEW
none[none] WinXP
Win2K-f
33 of 35 18:29:41 18:30:05 2 none none:none
none|none none none
63bca2a296
NEW
none[none] Win2K-f 20 of 35 13:50:52 13:50:52 1 none none:none
none|none none none
ce664ea1d1
NEW
none[none] WinXP 34 of 35 12:07:51 12:08:16 2 none none:none
none|none none none
5378ab9d2d
[Firefox: 2 hits: 06-28 to 07-03]
60a6e7e23c
[Firefox: 2 hits: 06-28 to 07-03]
none[none]
none [none]
WinXP 29 of 33 18:58:39 18:58:39 1 none none:none
none:none
none|none
none|none
none
none
none
none
3516e33174
NEW
d093c44748
NEW
none[none]
none [none]
Win2K-f 29 of 33 00:28:01 00:28:01 1 none none:none
none:none
none|none
none|none
none
none
none
none
899035248c
NEW
9d677c3f70
[Firefox: 2 hits: 06-20 to 07-12]
899035248c [1]
none [4]
WinXP 29 of 32 00:19:59 00:19:59 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=82
none
trace
trace
2ef2f78792
[Firefox: 8 hits: 06-21 to 07-15]
2ef2f78792 [1] Win2K-f 29 of 33 21:34:30 21:34:30 1 none ASM:Graph
Armadillo| 48% lines=82 trace
475d9a7753
NEW
e9a7fa27d5
NEW
none[4]
e9a7fa27d5[1]
Win2K-f 30 of 32 04:09:54 04:09:54 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=82
trace
trace