Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


12 September 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
34ea4db965
NEW		 none[none] Win2K-f 30 of 36 05:01:18 06:25:36 2 none none:none
 none|none none none
7ba9e53288
[Firefox: 2 hits: 07-11 to 07-14]		 none[none] WinXP 31 of 33 23:28:15 23:28:15 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1992 hits: 06-17 to 08-30]
73f1082158
[Firefox:998 hits: 06-18 to 08-30]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 00:15:18 23:55:42 17 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
28ce5fc467
NEW
e07c29c4ae
[Firefox:411 hits: 06-19 to 08-30]
e7335cb667
NEW		 none[none]
e07c29c4ae[1]
none [none]		 WinXP 33 of 36 14:09:14 14:09:14 1 none none:none
ASM:Graph
none:none
 none|none
FSG|
none|none		 none
lines=92
none		 none
trace
none
22999be88c
[Firefox:15 hits: 04-05 to 08-27]		 eda2056971 [0] WinXP 31 of 32 08:52:42 08:52:42 1 none ASM:Graph
 PolyEnE| 100% lines=154
embedded dns		 trace
53bfe15e91
[Firefox:1992 hits: 06-17 to 08-30]		 none[4] WinXP
Win2K-f		 33 of 33 00:15:18 23:55:42 35 none none:none
 tElock| none trace
0bfa79dc19
[Firefox: 9 hits: 07-22 to 08-26]		 none[none] WinXP 31 of 33 06:48:49 06:48:49 1 none none:none
 none|none none none
0115338c8b
NEW		 none[none] Win2K-f 0 of 0 02:51:31 02:51:31 1 none none:none
 none|none none none
f04fb66461
NEW		 none[none] WinXP 35 of 36 00:59:12 00:59:14 2 none none:none
 none|none none none
53bfe15e91
[Firefox:1992 hits: 06-17 to 08-30]
b7082104e4
[Firefox:120 hits: 06-18 to 08-30]		 none[4]
none [4]		 Win2K-f
WinXP		 8 of 33 11:24:28 22:00:56 3 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
8ef9e03ad3
NEW		 none[none] WinXP 0 of 0 15:09:43 15:09:43 1 none none:none
 none|none none none
d28bf8aa1a
NEW		 none[none] WinXP 36 of 36 03:48:22 03:48:22 1 none none:none
 none|none none none
9e4ccec7e5
[Firefox: 2 hits: 08-19 to 08-20]		 none[none] WinXP 36 of 36 03:37:45 08:59:51 2 none none:none
 none|none none none
4efecd976f
NEW		 none[none] WinXP 0 of 0 20:59:29 20:59:29 1 none none:none
 none|none none none
4c3df24b32
[Firefox:178 hits: 06-17 to 08-29]
8390780c27
[Firefox:36 hits: 06-18 to 08-27]		 4c3df24b32 [1]
none [4]		 Win2K-f 30 of 32 06:06:43 06:06:43 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
2e04b06527
[Firefox: 6 hits: 06-18 to 08-23]
5c054291de
[Firefox: 6 hits: 06-18 to 08-23]		 none[4]
5c054291de[1]		 WinXP 30 of 33 19:11:05 19:11:05 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
a12cab51ef
[Firefox:500 hits: 01-01 to 08-30]		 40f7f463c4 [0] WinXP 29 of 29 04:17:41 23:28:01 5 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
4abdfdab44
NEW
79a81e4dd6
NEW
98313e1004
NEW
9b09258622
[Firefox:13 hits: 08-05 to 08-30]		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 14 of 36 14:05:53 14:05:53 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
03f912899b
[Firefox:111 hits: 01-08 to 08-30]		 83893bd25d [0] WinXP 32 of 32 00:16:12 06:03:43 3 none ASM:Graph
 none|none 100% lines=65 trace
4c3df24b32
[Firefox:178 hits: 06-17 to 08-29]		 4c3df24b32 [1] Win2K-f 0 of 33 06:06:43 06:06:43 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
a12cab51ef
[Firefox:500 hits: 01-01 to 08-30]
c4421792b2
NEW		 40f7f463c4 [0]
none [none]		 WinXP 0 of 0 04:17:41 04:17:41 1 none ASM:Graph
none:none
 ASPack|
none|none		 lines=281
embedded dns
none		 trace
none
68cd473638
NEW		 none[none] WinXP 22 of 32 19:45:14 19:45:14 1 none none:none
 none|none none none
741e3b03b3
[Firefox:344 hits: 01-05 to 08-30]		 e0197e8a64 [0] WinXP 31 of 32 10:13:12 15:23:52 2 none ASM:Graph
 none|none 100% lines=62 trace
14d02d7a70
NEW		 none[none] WinXP 0 of 0 00:54:38 00:54:38 1 none none:none
 none|none none none
b4b2ce01ca
NEW		 none[none] WinXP 34 of 36 09:06:30 09:06:30 1 none none:none
 none|none none none
75cf39cba2
NEW		 none[none] WinXP 35 of 36 07:55:42 11:43:19 2 none none:none
 none|none none none
0bfa79dc19
[Firefox: 9 hits: 07-22 to 08-26]
8dfb3b619f
[Firefox:10 hits: 07-22 to 08-26]		 none[none]
none [none]		 WinXP 29 of 34 06:48:49 06:48:49 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
c7428c259b
NEW		 none[none] WinXP 0 of 0 23:47:45 23:47:45 1 none none:none
 none|none none none
831f4ee0a7
[Firefox:524 hits: 01-01 to 08-30]		 eb7546c600 [0] WinXP 29 of 29 04:22:47 18:06:29 6 none ASM:Graph
 none|none 100% lines=61 trace
aa9a5814b5
NEW
d65dae6c35
NEW		 none[none]
none [none]		 Win2K-f 33 of 36 20:08:08 20:08:08 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:1992 hits: 06-17 to 08-30]
a08f3b74a4
[Firefox:669 hits: 06-18 to 08-30]
b5919931fe
[Firefox:531 hits: 06-20 to 08-30]		 none[4]
a08f3b74a4[1]
b5919931fe[1]		 Win2K-f 0 of 32 02:37:02 23:33:14 16 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
0115338c8b
NEW
321f4fc27d
NEW		 none[none]
none [none]		 Win2K-f 0 of 0 02:51:31 02:51:31 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:1992 hits: 06-17 to 08-30]
57ce4acac2
[Firefox:170 hits: 06-17 to 08-30]		 none[4]
57ce4acac2[1]		 Win2K-f 0 of 33 01:31:36 11:54:36 3 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
0a2b1894da
[Firefox: 4 hits: 06-26 to 08-20]
34ea4db965
NEW
414b95a784
[Firefox: 4 hits: 06-26 to 08-20]
42c978cb3c
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 0 of 0 05:01:18 05:01:18 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
0a2b1894da
[Firefox: 4 hits: 06-26 to 08-20]
34ea4db965
NEW
414b95a784
[Firefox: 4 hits: 06-26 to 08-20]
42c978cb3c
NEW
664bac8971
NEW
68ee501dc9
NEW
8abb36799e
NEW
b5919931fe
[Firefox:531 hits: 06-20 to 08-30]
d2c30239b2
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
b5919931fe[1]
none [none]		 Win2K-f 8 of 36 05:01:18 05:01:18 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
 none|none
none|none
none|none
none|none
none|none
none|none
none|none
ASProtect|
none|none		 none
none
none
none
none
none
none
lines=90
none		 none
none
none
none
none
none
none
trace
none
1a2c0e6130
[Firefox:377 hits: 12-31 to 08-30]		 048df78048 [0] WinXP 29 of 29 03:53:09 21:17:14 3 none ASM:Graph
 none|none 100% lines=61 trace
34ea4db965
NEW
664bac8971
NEW
68ee501dc9
NEW
9dd8cfa0cf
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 0 of 0 06:25:36 06:25:36 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
53bfe15e91
[Firefox:1992 hits: 06-17 to 08-30]
a08f3b74a4
[Firefox:669 hits: 06-18 to 08-30]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 05:00:46 23:33:14 10 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
e4157a2cc3
[Firefox: 5 hits: 08-23 to 08-26]		 none[none] WinXP 36 of 36 20:20:42 20:20:42 1 none none:none
 none|none none none
65494b4a08
[Firefox: 4 hits: 06-29 to 07-09]		 none[none] Win2K-f 30 of 33 05:41:28 05:41:28 1 none none:none
 none|none none none
a41d9d371e
[Firefox: 7 hits: 04-21 to 08-29]		 c2640d398b [0] WinXP 30 of 32 06:19:12 06:19:12 1 none ASM:Graph
 PolyEnE| 99% lines=129 trace
017226a316
[Firefox: 6 hits: 07-27 to 08-29]		 none[none] WinXP 33 of 35 23:02:01 23:02:01 1 none none:none
 none|none none none
a0139d7ad8
[Firefox:97 hits: 01-03 to 08-30]		 d9e9662db1 [0] WinXP 29 of 29 19:41:57 22:41:54 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
4a5657d3c4
NEW		 none[none] Win2K-f 0 of 0 15:19:43 15:19:43 1 none none:none
 none|none none none
5364c612fa
[Firefox: 6 hits: 07-06 to 08-23]		 none[none] Win2K-f 30 of 32 18:21:43 18:21:43 1 none none:none
 none|none none none
a234560774
NEW		 none[none] WinXP 0 of 0 13:31:46 13:31:46 1 none none:none
 none|none none none
017226a316
[Firefox: 6 hits: 07-27 to 08-29]
9b03689ec5
[Firefox: 6 hits: 07-27 to 08-29]		 none[none]
none [none]		 WinXP 30 of 35 23:02:01 23:02:01 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4b2541d5f7
[Firefox: 7 hits: 08-19 to 08-24]		 none[none] WinXP 35 of 36 13:04:31 13:04:31 1 none none:none
 none|none none none
986b59708d
[Firefox:73 hits: 01-14 to 08-26]		 8a00217866 [0] WinXP 29 of 29 17:54:27 17:54:27 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
b9e6a0c882
NEW		 none[none] WinXP 35 of 35 16:23:50 16:23:54 2 none none:none
 none|none none none
4abdfdab44
NEW
79a81e4dd6
NEW		 none[none]
none [none]		 Win2K-f 17 of 36 14:05:53 14:05:53 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0a2b1894da
[Firefox: 4 hits: 06-26 to 08-20]		 none[none] Win2K-f 30 of 33 05:01:18 08:33:16 2 none none:none
 none|none none none
4abdfdab44
NEW		 none[none] Win2K-f 17 of 36 14:05:53 14:05:53 1 none none:none
 none|none none none
cfe42c471f
[Firefox: 2 hits: 08-10 to 08-20]		 none[none] Win2K-f 31 of 35 03:04:02 03:04:02 1 none none:none
 none|none none none
65494b4a08
[Firefox: 4 hits: 06-29 to 07-09]
b5919931fe
[Firefox:531 hits: 06-20 to 08-30]
eeb51a6e9e
[Firefox: 4 hits: 06-29 to 07-09]		 none[none]
b5919931fe[1]
none [none]		 Win2K-f 29 of 33 05:41:28 05:41:28 1 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=90
none		 none
trace
none
1421136df9
NEW
a4f2231d1a
NEW		 none[none]
none [none]		 Win2K-f 0 of 0 16:14:50 16:14:50 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:1992 hits: 06-17 to 08-30]
73f1082158
[Firefox:998 hits: 06-18 to 08-30]
956cca27e8
NEW		 none[4]
73f1082158[1]
none [none]		 Win2K-f 0 of 0 23:55:42 23:55:42 1 none none:none
ASM:Graph
none:none
 tElock|
Armadillo|
none|none		 none
lines=81
none		 trace
trace
none
4abdfdab44
NEW
79a81e4dd6
NEW
98313e1004
NEW		 none[none]
none [none]
none [none]		 Win2K-f 0 of 0 14:05:53 14:05:53 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
28ce5fc467
NEW		 none[none] WinXP 31 of 36 14:09:14 14:09:14 1 none none:none
 none|none none none
a9cfbd1b0c
NEW		 none[none] WinXP 36 of 36 06:59:43 06:59:43 1 none none:none
 none|none none none
7ba9e53288
[Firefox: 2 hits: 07-11 to 07-14]
d2e7fab9c3
[Firefox: 2 hits: 07-11 to 07-14]
e07c29c4ae
[Firefox:411 hits: 06-19 to 08-30]		 none[none]
none [none]
e07c29c4ae[1]		 WinXP 0 of 33 00:15:18 23:28:15 9 none none:none
none:none
ASM:Graph
 none|none
none|none
FSG|		 48% none
none
lines=92		 none
none
trace
382279b44f
[Firefox:149 hits: 05-22 to 08-14]		 049e62d55b [0] Win2K-f
WinXP		 19 of 32 00:13:27 16:20:43 12 none ASM:Graph
 Armadillo| 50% lines=192 trace
0c3d1ec2df
[Firefox: 5 hits: 08-11 to 08-30]		 none[none] WinXP
Win2K-f		 32 of 36 09:41:09 19:18:40 2 none none:none
 none|none none none
0a2b1894da
[Firefox: 4 hits: 06-26 to 08-20]
34ea4db965
NEW
414b95a784
[Firefox: 4 hits: 06-26 to 08-20]
42c978cb3c
NEW
664bac8971
NEW
68ee501dc9
NEW
8abb36799e
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 0 of 0 05:01:18 05:01:18 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none
none		 none
none
none
none
none
none
none
f0348270ec
NEW		 none[none] WinXP 0 of 0 05:22:05 05:22:05 1 none none:none
 none|none none none
eca9a5fa95
NEW		 none[none] WinXP 36 of 36 13:33:00 19:59:11 4 none none:none
 none|none none none
aa9a5814b5
NEW		 none[none] Win2K-f 34 of 36 20:08:08 20:08:08 1 none none:none
 none|none none none
30d50bdc3d
NEW		 none[none] WinXP
Win2K-f		 33 of 36 07:59:45 08:46:25 3 none none:none
 none|none none none
34ea4db965
NEW
664bac8971
NEW
68ee501dc9
NEW		 none[none]
none [none]
none [none]		 Win2K-f 0 of 0 05:01:18 06:25:36 2 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
0b09052fb7
NEW
b5919931fe
[Firefox:531 hits: 06-20 to 08-30]
d8cf9fc784
NEW		 none[none]
b5919931fe[1]
none [none]		 Win2K-f 34 of 36 12:59:48 12:59:48 1 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=90
none		 none
trace
none
34ea4db965
NEW
664bac8971
NEW		 none[none]
none [none]		 Win2K-f 10 of 36 05:01:18 06:25:36 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0a2b1894da
[Firefox: 4 hits: 06-26 to 08-20]
414b95a784
[Firefox: 4 hits: 06-26 to 08-20]		 none[none]
none [none]		 Win2K-f 32 of 33 05:01:18 08:33:16 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7f60162c2c
[Firefox:524 hits: 12-31 to 08-30]		 1aad8e4632 [0] WinXP 25 of 25 04:11:23 19:49:53 3 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
776985f561
[Firefox: 9 hits: 06-24 to 08-23]		 776985f561 [1] WinXP 31 of 33 11:59:13 11:59:13 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
7ba9e53288
[Firefox: 2 hits: 07-11 to 07-14]
d2e7fab9c3
[Firefox: 2 hits: 07-11 to 07-14]		 none[none]
none [none]		 WinXP 29 of 33 23:28:15 23:28:15 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1421136df9
NEW		 none[none] Win2K-f 0 of 0 16:14:50 16:14:50 1 none none:none
 none|none none none
0b09052fb7
NEW		 none[none] Win2K-f 34 of 36 12:59:48 12:59:48 1 none none:none
 none|none none none
0c3d1ec2df
[Firefox: 5 hits: 08-11 to 08-30]
8de905030e
[Firefox: 5 hits: 08-11 to 08-30]		 none[none]
none [none]		 WinXP
Win2K-f		 34 of 36 09:41:09 19:18:40 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3ae357d17b
[Firefox:170 hits: 01-01 to 08-27]		 462a7be171 [0] WinXP 29 of 29 02:09:38 02:10:12 2 none ASM:Graph
 PolyEnE| 99% lines=73 trace
53bfe15e91
[Firefox:1992 hits: 06-17 to 08-30]
5460b1fa77
NEW		 none[4]
none [none]		 WinXP 0 of 0 20:57:54 20:57:54 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
790dcb2cfc
[Firefox: 2 hits: 08-06 to 08-09]		 none[none] WinXP 35 of 36 07:06:48 07:06:48 1 none none:none
 none|none none none
7d99b0e910
[Firefox:1041 hits: 12-31 to 08-30]		 7a70e1b592 [0] WinXP 26 of 28 04:25:00 18:32:58 8 none ASM:Graph
 PolyEnE| 99% lines=68 trace
6cf11d6364
NEW		 none[none] WinXP 36 of 36 05:13:48 05:13:48 1 none none:none
 none|none none none
1509c8d024
[Firefox:20 hits: 06-17 to 08-22]
f23b040440
[Firefox:11 hits: 06-22 to 08-22]		 none[4]
f23b040440[1]		 WinXP 30 of 32 03:03:55 03:03:55 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
776985f561
[Firefox: 9 hits: 06-24 to 08-23]
8ec6129efe
[Firefox: 9 hits: 06-24 to 08-23]		 776985f561 [1]
none [4]		 WinXP 31 of 33 11:59:13 11:59:13 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
ab5e47bf8d
[Firefox:38 hits: 01-02 to 08-20]		 none[3] WinXP 29 of 29 20:18:31 20:18:31 1 none none:none
 ASPack| none trace
1509c8d024
[Firefox:20 hits: 06-17 to 08-22]		 none[4] WinXP 31 of 33 03:03:55 03:03:55 1 none none:none
 tElock| none trace
2e04b06527
[Firefox: 6 hits: 06-18 to 08-23]		 none[4] WinXP 30 of 33 19:11:05 19:11:05 1 none none:none
 tElock| none trace
e32e62a49b
NEW		 none[none] WinXP 0 of 0 03:55:22 03:55:22 1 none none:none
 none|none none none