Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



30 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
45e0b2544f
[Firefox: 4 hits: 07-19 to 07-29]
633a67eac3
[Firefox: 4 hits: 07-19 to 07-29]
none[none]
none [none]
WinXP 31 of 33 06:34:21 06:34:21 1 none none:none
none:none
none|none
none|none
none
none
none
none
53bfe15e91
[Firefox:1013 hits: 06-17 to 07-29]
73f1082158
[Firefox:514 hits: 06-18 to 07-29]
none[4]
73f1082158[1]
Win2K-f
WinXP
0 of 32 10:33:31 12:35:38 2 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
4f2b4b1b01
NEW
none[none] Win2K-f
WinXP
31 of 35 05:54:39 11:07:15 5 none none:none
none|none none none
7f6ea12654
[Firefox:10 hits: 07-13 to 07-28]
none[none] WinXP 32 of 33 03:22:58 03:22:58 1 none none:none
none|none none none
53bfe15e91
[Firefox:1013 hits: 06-17 to 07-29]
none[4] Win2K-f
WinXP
33 of 33 01:36:12 14:08:44 11 none none:none
tElock| none trace
6bf9acfa77
[Firefox: 2 hits: 07-01 to 07-28]
none[none] Win2K-f 30 of 33 06:32:58 06:32:58 1 none none:none
none|none none none
17739a55ad
[Firefox:225 hits: 06-27 to 07-29]
none[none] Win2K-f
WinXP
20 of 33 06:15:43 12:06:01 6 none none:none
none|none none none
2ed62aa467
NEW
none[none] Win2K-f 27 of 35 10:45:49 10:45:49 1 none none:none
none|none none none
09d6505627
NEW
none[none] WinXP 33 of 35 05:34:28 14:05:13 2 none none:none
none|none none none
474312616d
[Firefox: 4 hits: 07-23 to 07-29]
48a8b58d74
NEW
62376cb971
[Firefox: 4 hits: 07-23 to 07-29]
d717616974
NEW
none[none]
none [none]
none [none]
none [none]
Win2K-f 16 of 35 12:13:51 12:13:51 1 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
d42c1cc7c0
[Firefox:323 hits: 05-01 to 07-28]
af9ca5bed1 [0] WinXP 29 of 29 13:06:57 13:06:57 1 none ASM:Graph
PolyEnE| 100% lines=54 trace
a58ccb5cc8
NEW
none[none] WinXP 33 of 35 05:51:06 05:51:06 1 none none:none
none|none none none
865f8e272f
NEW
none[none] WinXP 33 of 35 07:47:21 07:47:21 1 none none:none
none|none none none
a94f8fd4c2
[Firefox: 9 hits: 07-29 to 07-29]
none[none] Win2K-f 24 of 35 00:55:32 00:55:32 1 none none:none
none|none none none
03f912899b
[Firefox:67 hits: 12-14 to 07-29]
83893bd25d [0] WinXP 32 of 32 02:15:19 02:15:19 1 none ASM:Graph
none|none 100% lines=65 trace
03f242275e
NEW
none[none] Win2K-f 31 of 35 12:03:02 12:03:02 1 none none:none
none|none none none
7dd1fe2970
[Firefox:21 hits: 09-07 to 07-22]
dcc673c815 [0] WinXP 30 of 32 08:22:42 08:22:42 1 none ASM:Graph
ASPack| 72% lines=374
embedded dns
trace
6ad917f76d
NEW
none[none] Win2K-f 33 of 35 07:05:19 07:05:19 1 none none:none
none|none none none
ba4637f8f0
[Firefox: 2 hits: 07-01 to 07-23]
d02ae67164
[Firefox: 2 hits: 07-01 to 07-23]
none[none]
none [none]
Win2K-f 31 of 33 11:50:45 11:50:45 1 none none:none
none:none
none|none
none|none
none
none
none
none
741e3b03b3
[Firefox:230 hits: 09-28 to 07-29]
e0197e8a64 [0] WinXP 31 of 32 03:27:33 06:38:44 2 none ASM:Graph
none|none 100% lines=62 trace
1b8cd29d5d
NEW
none[none] WinXP 33 of 35 07:22:26 07:22:26 1 none none:none
none|none none none
e286d9e6a9
[Firefox:18 hits: 07-13 to 07-29]
none[none] Win2K-f 21 of 33 00:48:53 00:48:53 1 none none:none
none|none none none
a02e7d5927
NEW
none[none] WinXP 15 of 35 06:05:02 06:05:02 1 none none:none
none|none none none
6f970e729e
NEW
none[none] WinXP 22 of 35 07:06:27 07:06:27 1 none none:none
none|none none none
831f4ee0a7
[Firefox:760 hits: 07-11 to 07-29]
eb7546c600 [0] WinXP 29 of 29 01:10:18 07:29:25 3 none ASM:Graph
none|none 100% lines=61 trace
2a4ec56dfe
[Firefox: 3 hits: 07-10 to 07-24]
none[none] WinXP 31 of 33 13:14:08 13:14:08 1 none none:none
none|none none none
4ab5b0788c
[Firefox:14 hits: 04-21 to 07-14]
272da55ef8 [0] WinXP 29 of 31 12:14:04 12:14:04 1 none ASM:Graph
PolyEnE| 100% lines=114 trace
557c0e2562
[Firefox: 2 hits: 07-24 to 07-26]
none[none] Win2K-f 22 of 35 00:11:35 00:11:35 1 none none:none
none|none none none
ef641cacaa
NEW
none[none] WinXP 32 of 33 00:42:32 00:42:32 1 none none:none
none|none none none
d2c26e07fd
[Firefox:155 hits: 06-27 to 07-29]
none[none] Win2K-f
WinXP
10 of 33 05:48:20 08:14:22 6 none none:none
none|none none none
6ec2a8994b
[Firefox: 8 hits: 06-18 to 07-29]
bcf66a38c8
NEW
none[4]
none [none]
WinXP 2 of 35 13:44:20 13:44:20 1 none none:none
none:none
tElock|
none|none
none
none
trace
none
1a2c0e6130
[Firefox:509 hits: 12-31 to 07-28]
048df78048 [0] WinXP 29 of 29 13:45:12 13:45:12 1 none ASM:Graph
none|none 100% lines=61 trace
53bfe15e91
[Firefox:1013 hits: 06-17 to 07-29]
a08f3b74a4
[Firefox:330 hits: 06-18 to 07-29]
none[4]
a08f3b74a4[1]
Win2K-f
WinXP
0 of 33 01:36:12 14:08:44 9 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
fe166d0103
NEW
none[none] WinXP 33 of 35 08:43:04 08:43:04 1 none none:none
none|none none none
a12b896387
NEW
none[none] WinXP 33 of 35 09:04:29 09:04:29 1 none none:none
none|none none none
e40e9380f6
NEW
none[none] WinXP 34 of 35 09:11:51 09:11:51 1 none none:none
none|none none none
921683af46
NEW
none[none] Win2K-f 32 of 35 07:23:51 07:23:51 1 none none:none
none|none none none
971f716c7f
[Firefox: 3 hits: 04-10 to 07-09]
4373aeb95c [0] WinXP 29 of 32 11:49:52 11:49:52 1 none ASM:Graph
PolyEnE| 54% lines=265
embedded dns
trace
330eaa2da2
[Firefox:56 hits: 05-04 to 07-29]
none[3] WinXP 28 of 29 03:57:33 03:57:33 1 none none:none
ASPack| none trace
4de42f8aea
NEW
none[none] WinXP 30 of 32 06:15:11 06:15:11 1 none none:none
none|none none none
ac6ad5d9b9
NEW
none[none] WinXP 0 of 35 05:02:23 05:02:23 1 none none:none
none|none none none
8a75955033
[Firefox:12 hits: 06-20 to 07-27]
9276c8b36b
[Firefox:12 hits: 06-20 to 07-27]
none[4]
9276c8b36b[1]
Win2K-f 28 of 32 03:20:01 03:20:01 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
41c5cb7a3f
NEW
none[none] Win2K-f 31 of 35 08:19:05 08:19:05 1 none none:none
none|none none none
3373948767
[Firefox:11 hits: 07-03 to 07-27]
c73f738c30
[Firefox:11 hits: 07-03 to 07-27]
none[none]
none [none]
WinXP 29 of 33 13:38:55 13:38:55 1 none none:none
none:none
none|none
none|none
none
none
none
none
6ec2a8994b
[Firefox: 8 hits: 06-18 to 07-29]
none[4] WinXP 30 of 33 13:44:20 13:44:20 1 none none:none
tElock| none trace
df17a625ee
[Firefox:504 hits: 05-04 to 07-29]
9bbdd086c5 [0] WinXP 29 of 29 09:40:14 10:18:59 2 none ASM:Graph
ASPack| 49% lines=186
embedded dns
trace
09d6505627
NEW
7b1709ae4c
NEW
none[none]
none [none]
WinXP 33 of 35 05:34:28 14:05:13 2 none none:none
none:none
none|none
none|none
none
none
none
none
ca15c09536
[Firefox:188 hits: 06-27 to 07-29]
none[none] WinXP
Win2K-f
26 of 33 05:46:09 08:21:48 6 none none:none
none|none none none
474312616d
[Firefox: 4 hits: 07-23 to 07-29]
48a8b58d74
NEW
62376cb971
[Firefox: 4 hits: 07-23 to 07-29]
none[none]
none [none]
none [none]
Win2K-f 8 of 35 12:13:51 12:13:51 1 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
605fe84c5c
[Firefox: 9 hits: 07-04 to 07-04]
none[none] Win2K-f
WinXP
10 of 33 06:30:58 06:58:34 3 none none:none
none|none none none
474312616d
[Firefox: 4 hits: 07-23 to 07-29]
none[none] Win2K-f 16 of 35 12:13:51 12:13:51 1 none none:none
none|none none none
45e0b2544f
[Firefox: 4 hits: 07-19 to 07-29]
none[none] WinXP 31 of 33 06:34:21 06:34:21 1 none none:none
none|none none none
4113025530
NEW
none[none] Win2K-f 33 of 35 00:51:59 00:51:59 1 none none:none
none|none none none
382279b44f
[Firefox:50 hits: 05-22 to 07-29]
049e62d55b [0] Win2K-f
WinXP
19 of 32 02:50:25 03:22:25 2 none ASM:Graph
Armadillo| 50% lines=192 trace
09d6505627
NEW
7b1709ae4c
NEW
e07c29c4ae
[Firefox:124 hits: 06-19 to 07-29]
none[none]
none [none]
e07c29c4ae[1]
WinXP 0 of 33 05:34:28 05:34:28 1 none none:none
none:none
ASM:Graph
none|none
none|none
FSG|
48% none
none
lines=92
none
none
trace
778acb5418
NEW
none[none] Win2K-f 32 of 33 08:48:01 08:48:01 1 none none:none
none|none none none
8a75955033
[Firefox:12 hits: 06-20 to 07-27]
none[4] Win2K-f 29 of 32 03:20:01 03:20:01 1 none none:none
tElock| none trace
4113025530
NEW
e3ca792d99
NEW
none[none]
none [none]
Win2K-f 32 of 35 00:51:59 00:51:59 1 none none:none
none:none
none|none
none|none
none
none
none
none
973d8e4ee5
NEW
none[none] WinXP 33 of 35 07:09:05 07:09:05 1 none none:none
none|none none none
c45aab91d2
NEW
none[none] WinXP 22 of 35 09:36:42 09:36:42 1 none none:none
none|none none none
7f60162c2c
[Firefox:1454 hits: 12-31 to 07-29]
1aad8e4632 [0] WinXP 25 of 25 08:55:29 08:56:09 2 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns
trace
3373948767
[Firefox:11 hits: 07-03 to 07-27]
none[none] WinXP 30 of 33 13:38:55 13:38:55 1 none none:none
none|none none none
474312616d
[Firefox: 4 hits: 07-23 to 07-29]
48a8b58d74
NEW
none[none]
none [none]
Win2K-f 30 of 33 12:13:51 12:13:51 1 none none:none
none:none
none|none
none|none
none
none
none
none
2ebdc0b4c8
NEW
none[none] WinXP 32 of 35 07:38:15 07:38:15 1 none none:none
none|none none none
ba4637f8f0
[Firefox: 2 hits: 07-01 to 07-23]
none[none] Win2K-f 28 of 33 11:50:45 11:50:45 1 none none:none
none|none none none
7d99b0e910
[Firefox:3290 hits: 12-31 to 07-29]
7a70e1b592 [0] WinXP 26 of 28 08:42:03 08:42:03 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
f5a40500f2
[Firefox:24 hits: 05-08 to 06-27]
none[none] WinXP 29 of 29 11:56:42 11:56:42 1 none none:none
none|none none none
4c171459ff
NEW
none[none] WinXP 33 of 34 08:30:19 08:30:19 1 none none:none
none|none none none
2a4ec56dfe
[Firefox: 3 hits: 07-10 to 07-24]
37de553249
[Firefox: 3 hits: 07-10 to 07-24]
none[none]
none [none]
WinXP 30 of 33 13:14:08 13:14:08 1 none none:none
none:none
none|none
none|none
none
none
none
none
202a01088b
[Firefox: 2 hits: 06-28 to 06-28]
none[none] Win2K-f 29 of 33 05:47:20 05:47:20 1 none none:none
none|none none none
03f242275e
NEW
31d5e9cb41
NEW
none[none]
none [none]
Win2K-f 33 of 35 12:03:02 12:03:02 1 none none:none
none:none
none|none
none|none
none
none
none
none
55f1288a7a
[Firefox: 2 hits: 07-25 to 07-28]
none[none] WinXP 35 of 35 02:47:43 02:47:43 1 none none:none
none|none none none