Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

29 August 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

00adf9a537
NEW none[none] WinXP 0 of 36 18:57:03 18:57:03 1 none none:none
none|none none none

5c6c664c09
NEW
703c513417
NEW
95a1e56583
[Firefox: 6 hits: 08-02 to 08-23]
b39357c344
[Firefox: 6 hits: 08-02 to 08-23] none[none]
none [none]
none [none]
none [none] Win2K-f 35 of 36 14:24:34 20:59:44 2 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none none
none
none
none none
none
none
none

53bfe15e91
[Firefox:1922 hits: 06-17 to 08-27]
73f1082158
[Firefox:964 hits: 06-18 to 08-27] none[4]
73f1082158[1] Win2K-f
WinXP 0 of 32 11:20:14 22:56:47 13 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

1fcc146d70
[Firefox:33 hits: 01-02 to 08-26] 258fafe892 [0] WinXP 29 of 29 14:16:50 14:16:52 2 none ASM:Graph
PolyEnE| 99% lines=68 trace

53bfe15e91
[Firefox:1922 hits: 06-17 to 08-27] none[4] Win2K-f
WinXP 33 of 33 11:20:14 23:11:04 32 none none:none
tElock| none trace

3f0a5b2ebe
[Firefox:17 hits: 06-18 to 08-27]
5c6c664c09
NEW
b5919931fe
[Firefox:490 hits: 06-20 to 08-27]
c6bfb5f0f2
[Firefox:17 hits: 06-18 to 08-27] none[4]
none [none]
b5919931fe[1]
c6bfb5f0f2[1] Win2K-f 28 of 32 18:06:40 18:06:40 1 none none:none
none:none
ASM:Graph
ASM:Graph
PolyEnE|
none|none
ASProtect|
Armadillo| 47% none
none
lines=90
lines=81 trace
none
trace
trace

389cf0c860
NEW none[none] WinXP 34 of 36 20:43:07 20:43:07 1 none none:none
none|none none none

53bfe15e91
[Firefox:1922 hits: 06-17 to 08-27]
b5919931fe
[Firefox:490 hits: 06-20 to 08-27]
b7082104e4
[Firefox:117 hits: 06-18 to 08-27] none[4]
b5919931fe[1]
none [4] Win2K-f 8 of 33 17:50:19 20:13:11 2 none none:none
ASM:Graph
none:none
tElock|
ASProtect|
tElock| none
lines=90
none trace
trace
trace

0f2939b94c
NEW
2af1dfd9d9
NEW none[none]
none [none] Win2K-f 31 of 35 21:36:17 21:36:17 1 none none:none
none:none
none|none
none|none none
none none
none

168aab35a3
[Firefox:122 hits: 06-17 to 08-27] none[4] WinXP 31 of 33 20:09:58 20:09:58 1 none none:none
tElock| none trace

1d1b7d77a6
NEW
29e0d3d46b
NEW none[none]
none [none] WinXP 26 of 32 12:25:44 12:25:44 1 none none:none
none:none
none|none
none|none none
none none
none

5c6c664c09
NEW
703c513417
NEW
95a1e56583
[Firefox: 6 hits: 08-02 to 08-23] none[none]
none [none]
none [none] Win2K-f 32 of 36 14:24:34 20:59:44 2 none none:none
none:none
none:none
none|none
none|none
none|none none
none
none none
none
none

e8d4d8cde1
[Firefox:571 hits: 03-31 to 08-27] fda109a6fd [0] Win2K-f
WinXP 13 of 31 10:03:52 22:32:20 34 none ASM:Graph
ASProtect| 64% lines=583
embedded dns trace

00adf9a537
NEW
0a51d26098
NEW
a12cab51ef
[Firefox:495 hits: 01-01 to 08-27] none[none]
none [none]
40f7f463c4[0] WinXP 29 of 29 18:57:03 18:57:03 1 none none:none
none:none
ASM:Graph
none|none
none|none
ASPack| 54% none
none
lines=281
embedded dns none
none
trace

2180dd939c
NEW
9b09258622
[Firefox:11 hits: 08-05 to 08-22] none[none]
none [none] Win2K-f 14 of 36 22:25:46 22:25:46 1 none none:none
none:none
none|none
none|none none
none none
none

168aab35a3
[Firefox:122 hits: 06-17 to 08-27]
5c6c664c09
NEW
a26d9d476b
NEW
d9766a3162
NEW none[4]
none [none]
none [none]
none [none] WinXP 2 of 36 20:09:58 20:09:58 1 none none:none
none:none
none:none
none:none
tElock|
none|none
none|none
none|none none
none
none
none trace
none
none
none

3a379d9fac
NEW none[none] WinXP 12 of 36 15:49:42 15:49:42 1 none none:none
none|none none none

4c3df24b32
[Firefox:177 hits: 06-17 to 08-27] 4c3df24b32 [1] Win2K-f 0 of 33 23:08:42 23:08:42 1 none ASM:Graph
Armadillo| 47% lines=81 trace

3ed16ae12d
[Firefox:16 hits: 06-19 to 08-27] 3ed16ae12d [1] WinXP 3 of 33 20:25:01 20:25:01 1 none ASM:Graph
Armadillo| 47% lines=81 trace

bcc96fab23
NEW none[none] WinXP 35 of 36 20:36:48 20:36:48 1 none none:none
none|none none none

47af15bf90
NEW none[none] WinXP 36 of 36 13:18:11 13:18:11 1 none none:none
none|none none none

53bfe15e91
[Firefox:1922 hits: 06-17 to 08-27]
b5919931fe
[Firefox:490 hits: 06-20 to 08-27]
bea8cb1865
[Firefox: 8 hits: 08-11 to 08-25] none[4]
b5919931fe[1]
none [none] Win2K-f 32 of 36 23:04:27 23:04:27 1 none none:none
ASM:Graph
none:none
tElock|
ASProtect|
none|none none
lines=90
none trace
trace
none

2180dd939c
NEW
9b09258622
[Firefox:11 hits: 08-05 to 08-22]
9ed9d4319e
NEW
9f6d05a60b
NEW
f922fdc9fd
NEW none[none]
none [none]
none [none]
none [none]
none [none] Win2K-f 23 of 36 22:25:46 22:25:46 1 none none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none none
none
none
none
none none
none
none
none
none

831f4ee0a7
[Firefox:518 hits: 01-01 to 08-27] eb7546c600 [0] WinXP 29 of 29 12:17:50 19:20:40 2 none ASM:Graph
none|none 100% lines=61 trace

3f0a5b2ebe
[Firefox:17 hits: 06-18 to 08-27] none[4] Win2K-f 32 of 33 18:06:40 18:06:40 1 none none:none
PolyEnE| none trace

eec7cce07c
[Firefox: 2 hits: 08-15 to 08-15] none[none] WinXP 29 of 29 22:38:42 22:39:06 2 none none:none
none|none none none

53bfe15e91
[Firefox:1922 hits: 06-17 to 08-27]
a08f3b74a4
[Firefox:647 hits: 06-18 to 08-27]
b5919931fe
[Firefox:490 hits: 06-20 to 08-27] none[4]
a08f3b74a4[1]
b5919931fe[1] Win2K-f 0 of 32 11:20:14 23:11:04 28 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect| 48% none
lines=81
lines=90 trace
trace
trace

bfec7d0b0b
[Firefox:11 hits: 08-06 to 08-27] none[none] WinXP 35 of 36 14:48:46 14:48:46 1 none none:none
none|none none none

53bfe15e91
[Firefox:1922 hits: 06-17 to 08-27]
57ce4acac2
[Firefox:158 hits: 06-17 to 08-27] none[4]
57ce4acac2[1] WinXP
Win2K-f 0 of 33 13:35:46 22:59:24 7 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

2180dd939c
NEW
9b09258622
[Firefox:11 hits: 08-05 to 08-22]
9ed9d4319e
NEW none[none]
none [none]
none [none] Win2K-f 21 of 36 22:25:46 22:25:46 1 none none:none
none:none
none:none
none|none
none|none
none|none none
none
none none
none
none

168aab35a3
[Firefox:122 hits: 06-17 to 08-27]
5c6c664c09
NEW
a26d9d476b
NEW none[4]
none [none]
none [none] WinXP 12 of 36 20:09:58 20:09:58 1 none none:none
none:none
none:none
tElock|
none|none
none|none none
none
none trace
none
none

53bfe15e91
[Firefox:1922 hits: 06-17 to 08-27]
a08f3b74a4
[Firefox:647 hits: 06-18 to 08-27] none[4]
a08f3b74a4[1] WinXP
Win2K-f 0 of 33 15:01:13 23:11:04 10 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

4ae8ee3afb
NEW none[none] WinXP 35 of 36 15:04:05 15:04:05 1 none none:none
none|none none none

bce12aa21f
[Firefox:29 hits: 05-12 to 08-20] none[4] WinXP 31 of 33 15:43:03 15:43:26 2 none none:none
PolyEnE| none trace

a41d9d371e
[Firefox: 6 hits: 04-21 to 07-24] c2640d398b [0] WinXP 30 of 32 23:38:34 23:38:34 1 none ASM:Graph
PolyEnE| 99% lines=129 trace

017226a316
[Firefox: 5 hits: 07-27 to 08-25] none[none] WinXP 33 of 35 22:42:36 22:42:36 1 none none:none
none|none none none

2180dd939c
NEW none[none] Win2K-f 16 of 36 22:25:46 22:25:46 1 none none:none
none|none none none

a0139d7ad8
[Firefox:95 hits: 01-03 to 08-26] d9e9662db1 [0] WinXP 29 of 29 18:44:42 18:44:42 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

5c6c664c09
NEW
d573e103b5
NEW
ea9787a186
[Firefox: 4 hits: 06-20 to 08-26] none[none]
none [none]
none [4] Win2K-f 29 of 32 15:15:27 15:15:27 1 none none:none
none:none
none:none
none|none
none|none
PolyEnE| none
none
none none
none
trace

60355a8247
[Firefox: 2 hits: 08-16 to 08-26] none[none] WinXP 34 of 36 23:42:30 23:42:30 1 none none:none
none|none none none

017226a316
[Firefox: 5 hits: 07-27 to 08-25]
9b03689ec5
[Firefox: 5 hits: 07-27 to 08-25] none[none]
none [none] WinXP 30 of 35 22:42:36 22:42:36 1 none none:none
none:none
none|none
none|none none
none none
none

3373948767
[Firefox:19 hits: 07-03 to 08-20]
c73f738c30
[Firefox:19 hits: 07-03 to 08-20] none[none]
none [none] Win2K-f 29 of 33 20:31:03 20:31:03 1 none none:none
none:none
none|none
none|none none
none none
none

5c6c664c09
NEW
80b23f395b
NEW none[none]
none [none] Win2K-f 12 of 36 22:02:23 22:02:23 1 none none:none
none:none
none|none
none|none none
none none
none

4326e0f8f0
NEW none[none] Win2K-f 12 of 36 22:04:16 22:04:16 1 none none:none
none|none none none

df17a625ee
[Firefox:227 hits: 01-01 to 08-27] 9bbdd086c5 [0] WinXP 29 of 29 12:19:26 12:19:26 1 none ASM:Graph
ASPack| 49% lines=186
embedded dns trace

e30fb27bda
[Firefox: 5 hits: 07-07 to 08-24] none[none] Win2K-f 33 of 33 14:07:04 14:07:04 1 none none:none
none|none none none

4391562eab
NEW none[none] WinXP 34 of 36 13:59:24 13:59:24 1 none none:none
none|none none none

27b945de66
[Firefox:17 hits: 06-20 to 08-20] none[4] WinXP 31 of 32 16:09:30 16:09:30 1 none none:none
none|none none trace

3875b6257d
NEW none[4] Win2K-f 32 of 32 18:26:31 18:26:31 1 none none:none
none|none none trace

50f889782d
[Firefox: 2 hits: 08-26 to 08-26] none[none] WinXP 31 of 36 11:01:37 11:01:37 1 none none:none
none|none none none

53bfe15e91
[Firefox:1922 hits: 06-17 to 08-27]
57ce4acac2
[Firefox:158 hits: 06-17 to 08-27]
e07c29c4ae
[Firefox:383 hits: 06-19 to 08-27] none[4]
57ce4acac2[1]
e07c29c4ae[1] WinXP 0 of 33 13:35:46 22:59:24 13 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
FSG| 48% none
lines=81
lines=92 trace
trace
trace

7e8782e8f4
[Firefox: 3 hits: 04-19 to 04-23] 486e5604b0 [0] WinXP 31 of 32 10:28:01 10:28:01 1 none ASM:Graph
PolyEnE| 100% lines=68 trace

00adf9a537
NEW
0a51d26098
NEW none[none]
none [none] WinXP 0 of 36 18:57:03 18:57:03 1 none none:none
none:none
none|none
none|none none
none none
none

5c6c664c09
NEW none[none] Win2K-f
WinXP 30 of 36 14:24:34 22:30:53 13 none none:none
none|none none none

3a379d9fac
NEW
462c169957
NEW
5c6c664c09
NEW
82558dde21
NEW none[none]
none [none]
none [none]
none [none] WinXP 29 of 36 15:49:42 15:49:42 1 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none none
none
none
none none
none
none
none

4326e0f8f0
NEW
5c6c664c09
NEW
9cc7d74bac
NEW none[none]
none [none]
none [none] Win2K-f 33 of 36 22:02:23 22:04:16 2 none none:none
none:none
none:none
none|none
none|none
none|none none
none
none none
none
none

3cd7958258
[Firefox:20 hits: 06-17 to 08-21] none[4] Win2K-f
WinXP 30 of 33 13:48:26 21:53:51 2 none none:none
tElock| none trace

1d1b7d77a6
NEW none[none] WinXP 29 of 36 12:25:44 12:25:44 1 none none:none
none|none none none

0f2939b94c
NEW none[none] Win2K-f 12 of 36 21:36:17 21:36:17 1 none none:none
none|none none none

7f60162c2c
[Firefox:517 hits: 12-31 to 08-27] 1aad8e4632 [0] WinXP 25 of 25 18:45:25 23:28:57 4 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

3a379d9fac
NEW
462c169957
NEW none[none]
none [none] WinXP 34 of 35 15:49:42 15:49:42 1 none none:none
none:none
none|none
none|none none
none none
none

3cd7958258
[Firefox:20 hits: 06-17 to 08-21]
41efedf70f
[Firefox:19 hits: 06-19 to 08-21] none[4]
41efedf70f[1] Win2K-f
WinXP 28 of 32 13:48:26 21:53:51 2 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

f0b49cdcfc
[Firefox:10 hits: 07-04 to 08-22] none[none] WinXP 33 of 33 19:08:15 19:08:15 1 none none:none
none|none none none

389cf0c860
NEW
e07c29c4ae
[Firefox:383 hits: 06-19 to 08-27]
ed7d5d9ce7
NEW none[none]
e07c29c4ae[1]
none [none] WinXP 33 of 36 20:43:07 20:43:07 1 none none:none
ASM:Graph
none:none
none|none
FSG|
none|none none
lines=92
none none
trace
none

3373948767
[Firefox:19 hits: 07-03 to 08-20] none[none] Win2K-f 30 of 33 20:31:03 20:31:03 1 none none:none
none|none none none

a219ed3aeb
[Firefox:19 hits: 08-02 to 08-27] none[none] WinXP 36 of 36 12:28:22 14:50:06 3 none none:none
none|none none none

7d99b0e910
[Firefox:1035 hits: 12-31 to 08-27] 7a70e1b592 [0] WinXP 26 of 28 16:43:52 19:06:51 3 none ASM:Graph
PolyEnE| 99% lines=68 trace

3ed16ae12d
[Firefox:16 hits: 06-19 to 08-27]
79c01ec060
[Firefox:27 hits: 06-18 to 08-27] 3ed16ae12d [1]
none [4] WinXP 33 of 33 19:41:15 20:25:01 2 none ASM:Graph
none:none
Armadillo|
tElock| lines=81
none trace
trace

5c6c664c09
NEW
d573e103b5
NEW none[none]
none [none] Win2K-f 12 of 36 15:15:27 15:15:27 1 none none:none
none:none
none|none
none|none none
none none
none

5c6c664c09
NEW
95a1e56583
[Firefox: 6 hits: 08-02 to 08-23]
b39357c344
[Firefox: 6 hits: 08-02 to 08-23]
b5919931fe
[Firefox:490 hits: 06-20 to 08-27]
ca92c44e2b
NEW none[none]
none [none]
none [none]
b5919931fe[1]
none [none] Win2K-f 12 of 34 14:24:34 14:24:34 1 none none:none
none:none
none:none
ASM:Graph
none:none
none|none
none|none
none|none
ASProtect|
none|none none
none
none
lines=90
none none
none
none
trace
none

5c6c664c09
NEW
703c513417
NEW none[none]
none [none] Win2K-f 12 of 36 20:59:44 20:59:44 1 none none:none
none:none
none|none
none|none none
none none
none

3f0a5b2ebe
[Firefox:17 hits: 06-18 to 08-27]
5c6c664c09
NEW
b5919931fe
[Firefox:490 hits: 06-20 to 08-27]
c6bfb5f0f2
[Firefox:17 hits: 06-18 to 08-27]
e9fd5457db
NEW none[4]
none [none]
b5919931fe[1]
c6bfb5f0f2[1]
none [none] Win2K-f 12 of 36 18:06:40 18:06:40 1 none none:none
none:none
ASM:Graph
ASM:Graph
none:none
PolyEnE|
none|none
ASProtect|
Armadillo|
none|none none
none
lines=90
lines=81
none trace
none
trace
trace
none

2180dd939c
NEW
9b09258622
[Firefox:11 hits: 08-05 to 08-22]
9ed9d4319e
NEW
9f6d05a60b
NEW none[none]
none [none]
none [none]
none [none] Win2K-f 22 of 36 22:25:46 22:25:46 1 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none none
none
none
none none
none
none
none