Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


17 January 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
409ef22885
[Firefox:837 hits: 11-22 to 01-16]		 none[3] Win2K-f 2 of 37 08:19:01 20:43:35 4 none none:none
 UPX| none trace
fcb4920986
[Firefox:64 hits: 11-21 to 01-13]		 none[3] Win2K-f 2 of 37 07:27:30 07:27:30 1 none none:none
 UPX| none trace
dc331fb791
[Firefox:1621 hits: 11-24 to 01-16]		 none[3] Win2K-f 3 of 37 02:17:13 22:15:58 16 none none:none
 UPX| none trace
53bfe15e91
[Firefox:4122 hits: 06-17 to 01-13]		 1473091351 [0] WinXP 33 of 33 22:17:27 22:17:27 1 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
bd35d4d98f
[Firefox:60 hits: 11-27 to 01-14]		 none[3] Win2K-f 7 of 37 03:36:26 03:36:26 1 none none:none
 Armadillo| none trace
917c085aca
[Firefox:431 hits: 11-25 to 01-16]		 none[3] Win2K-f 3 of 37 03:25:36 22:50:51 5 none none:none
 Armadillo| none trace
4f6b51ea3b
[Firefox:205 hits: 12-19 to 01-16]		 none[3] Win2K-f 8 of 38 00:59:44 19:25:02 4 none none:none
 MEW| none trace
08f384b76a
[Firefox: 3 hits: 12-03 to 12-29]		 none[3] Win2K-f 7 of 37 03:37:00 03:37:00 1 none none:none
 MEW| none trace
8ce32ded17
[Firefox:515 hits: 11-26 to 01-16]		 none[3] Win2K-f 4 of 37 01:43:37 23:02:50 8 none none:none
 Armadillo| none trace
4f88618d4f
[Firefox:104 hits: 11-29 to 01-16]		 none[3] Win2K-f 8 of 37 07:07:01 07:23:25 2 none none:none
 UPX| none trace
e1a2e3980d
[Firefox:27 hits: 12-05 to 01-13]		 none[3] Win2K-f 9 of 38 09:01:56 09:01:56 1 none none:none
 UPX| none trace
53bfe15e91
[Firefox:4122 hits: 06-17 to 01-13]
a08f3b74a4
[Firefox:1476 hits: 06-18 to 01-08]		 1473091351 [0]
none [0]		 WinXP 0 of 33 22:17:27 22:17:27 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
7587773eea
[Firefox:961 hits: 11-30 to 01-16]		 none[3] Win2K-f 7 of 37 04:42:47 23:58:41 8 none none:none
 StarForce| none trace
223d8089f8
[Firefox:737 hits: 11-21 to 01-16]		 none[3] Win2K-f 2 of 37 02:14:49 19:23:37 6 none none:none
 StarForce| none trace
216ec67841
[Firefox:219 hits: 11-20 to 01-16]		 none[3] Win2K-f 2 of 37 11:09:37 12:47:13 2 none none:none
 StarForce| none trace
d60e538e72
[Firefox:1834 hits: 11-22 to 01-16]		 none[3] Win2K-f 2 of 37 01:04:29 21:19:41 14 none none:none
 UPX| none trace
13e15a653e
[Firefox:42 hits: 11-21 to 01-11]		 none[3] Win2K-f 6 of 37 03:12:46 03:12:46 1 none none:none
 UPX| none trace
d9cb288f31
[Firefox:17736 hits: 11-20 to 01-16]		 45603a001c [0] Win2K-f 3 of 37 00:10:46 23:31:17 229 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace