Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



16 June 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
WinXP
Win2K-f
0 of 32 07:04:41 23:42:04 4 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
2851817490
NEW
none[none] Win2K-f 32 of 33 20:50:18 20:50:18 1 none none:none
none|none none none
dc331fb791
NEW
none[3] Win2K-f 3 of 37 01:10:52 22:56:25 5 none none:none
UPX| none trace
2851817490
NEW
624c441842
NEW
none[none]
none [none]
Win2K-f 9 of 33 20:50:18 20:50:18 1 none none:none
none:none
none|none
none|none
none
none
none
none
0ac0fa7432
NEW
c68b0d96f2
NEW
none[none]
none [none]
WinXP 37 of 41 17:25:11 17:25:11 1 none none:none
none:none
none|none
none|none
none
none
none
none
9488c0ed2d
NEW
none[none] Win2K-f 38 of 41 03:10:37 03:10:37 1 none none:none
none|none none none
53bfe15e91
NEW
1473091351 [0] Win2K-f
WinXP
33 of 33 00:20:39 23:42:04 14 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
6d7baa9138
NEW
none[none] WinXP 34 of 36 05:17:59 05:17:59 1 none none:none
none|none none none
265a4ee61b
NEW
4e5c8605d3
NEW
05499f2ac5 [0]
67d26a703b[0]
Win2K-f 37 of 40 01:49:08 01:49:08 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
67a66839f7
NEW
none[none] WinXP
Win2K-f
37 of 41 09:43:24 09:48:21 2 none none:none
none|none none none
d175bad0e6
NEW
dfb15f5463 [0] WinXP 29 of 29 05:40:34 05:40:34 1 none ASM:Graph
tElock| 100% lines=81
embedded dns
trace
bfb4f279c7
NEW
none[none] WinXP 34 of 41 17:29:31 17:29:31 1 none none:none
none|none none none
4f6b51ea3b
NEW
none[3] Win2K-f 8 of 38 04:17:45 04:17:45 1 none none:none
MEW| none trace
2590d969cb
NEW
none[none] WinXP 38 of 40 11:04:50 11:04:50 1 none none:none
none|none none none
d5966f5d2c
NEW
none[none] WinXP 38 of 40 07:45:47 07:45:47 1 none none:none
none|none none none
53bfe15e91
NEW
b7082104e4
NEW
1473091351 [0]
c5b49e7b82[0]
WinXP 8 of 33 17:10:18 17:10:18 1 none ASM:Graph
ASM:Graph
tElock|
tElock|
100% lines=75
embedded dns
lines=41
trace
trace
83f6cb959d
NEW
none[none] Win2K-f 36 of 41 18:31:30 18:31:30 1 none none:none
none|none none none
b2aa60cb38
NEW
none[none] Win2K-f 30 of 33 03:30:23 03:30:23 1 none none:none
none|none none none
2e09862c1b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
abf828b2d5
NEW
none[none]
c67adf46e2[0]
none [0]
230036ecf3[0]
WinXP 7 of 40 09:04:29 09:04:29 1 none none:none
ASM:Graph
none:none
ASM:Graph
none|none
tElock|
Armadillo|
none|none
100% none
lines=126
embedded dns
lines=91
lines=6
none
trace
trace
trace
b502f83a7c
NEW
none[none] WinXP 32 of 32 17:44:13 17:44:13 1 none none:none
none|none none none
47d3548e36
NEW
d8722af110
NEW
none[none]
none [none]
WinXP 36 of 40 17:55:02 17:55:02 1 none none:none
none:none
none|none
none|none
none
none
none
none
e8d4d8cde1
NEW
none[0] WinXP
Win2K-f
13 of 31 09:47:08 11:10:04 5 none none:none
ASProtect| 63% lines=585
embedded dns
trace
2e09862c1b
NEW
533d15b5ce
NEW
none[none]
c67adf46e2[0]
WinXP 30 of 33 09:04:29 09:04:29 1 none none:none
ASM:Graph
none|none
tElock|
96% none
lines=126
embedded dns
none
trace
a12cab51ef
NEW
none[0] WinXP 29 of 29 04:44:57 16:08:16 3 none none:none
ASPack| 54% lines=281
embedded dns
trace
f502585714
NEW
none[0] WinXP 29 of 29 20:01:15 20:01:15 1 none none:none
PolyEnE| 100% lines=63 trace
36791e4496
NEW
none[none] WinXP 37 of 41 16:20:17 16:20:17 1 none none:none
none|none none none
f5114d3371
NEW
none[none] Win2K-f 36 of 39 01:00:55 01:00:55 1 none none:none
none|none none none
c392067a90
NEW
none[none] WinXP 35 of 36 04:54:56 04:54:56 1 none none:none
none|none none none
05cfbe0bc5
NEW
6e704f13e9 [0] Win2K-f 39 of 40 10:23:08 10:23:08 1 none ASM:Graph
FSG| 89% lines=48 trace
7222faa895
NEW
none[none] Win2K-f 35 of 40 11:15:04 11:15:04 1 none none:none
none|none none none
36791e4496
NEW
53a2030ec4
NEW
none[none]
none [none]
WinXP 38 of 41 16:20:17 16:20:17 1 none none:none
none:none
none|none
none|none
none
none
none
none
409ef22885
NEW
none[3] Win2K-f 2 of 37 14:21:58 14:30:40 2 none none:none
UPX| none trace
29724af5b9
NEW
none[none] Win2K-f 10 of 40 09:23:37 09:23:37 1 none none:none
none|none none none
997df700c8
NEW
none[none] WinXP 34 of 40 10:12:10 10:12:10 1 none none:none
none|none none none
973db01c83
NEW
none[none] Win2K-f 6 of 41 08:00:57 08:00:57 1 none none:none
none|none none none
7c7e0281d4
NEW
none[none] Win2K-f 38 of 41 10:59:30 10:59:30 1 none none:none
none|none none none
997df700c8
NEW
b9d6e986bd
NEW
none[none]
none [none]
WinXP 35 of 40 10:12:10 10:12:10 1 none none:none
none:none
none|none
none|none
none
none
none
none
741c93f3c1
NEW
none[3] Win2K-f 5 of 37 22:15:39 22:24:26 2 none none:none
UPX| none trace
76ffef4993
NEW
none[none] Win2K-f 35 of 40 17:37:25 17:37:25 1 none none:none
none|none none none
2e09862c1b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
none[none]
c67adf46e2[0]
none [0]
WinXP 28 of 33 09:04:29 09:04:29 1 none none:none
ASM:Graph
none:none
none|none
tElock|
Armadillo|
0% none
lines=126
embedded dns
lines=91
none
trace
trace
47d3548e36
NEW
none[none] WinXP 37 of 41 17:55:02 17:55:02 1 none none:none
none|none none none
960b4282ea
NEW
none[none] WinXP 37 of 40 06:08:08 06:08:08 1 none none:none
none|none none none
2e09862c1b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
abf828b2d5
NEW
f37b5a8f0c
NEW
none[none]
c67adf46e2[0]
none [0]
230036ecf3[0]
dce19a471e[0]
WinXP 19 of 40 09:04:29 09:04:29 1 none none:none
ASM:Graph
none:none
ASM:Graph
none:none
none|none
tElock|
Armadillo|
none|none
none|none
none
lines=126
embedded dns
lines=91
lines=6
none
none
trace
trace
trace
trace
53bfe15e91
NEW
57ce4acac2
NEW
1473091351 [0]
none [0]
Win2K-f 0 of 33 00:20:39 08:33:53 2 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
4f88618d4f
NEW
none[3] Win2K-f 8 of 37 10:24:59 10:24:59 1 none none:none
UPX| none trace
0ac0fa7432
NEW
none[none] WinXP 38 of 41 17:25:11 17:25:11 1 none none:none
none|none none none
e1a2e3980d
NEW
none[3] Win2K-f 9 of 38 03:52:23 03:52:23 1 none none:none
UPX| none trace
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
Win2K-f
WinXP
0 of 33 00:36:09 20:27:26 7 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
2e09862c1b
NEW
none[none] WinXP 18 of 41 09:04:29 09:04:29 1 none none:none
none|none none none
7587773eea
NEW
none[3] Win2K-f 7 of 37 16:17:08 16:25:52 2 none none:none
StarForce| none trace
2e3283a520
NEW
none[none] WinXP 34 of 41 04:10:34 04:10:34 1 none none:none
none|none none none
e1a7bda6ff
NEW
none[none] WinXP 41 of 41 15:15:59 15:15:59 1 none none:none
none|none none none
e3335c61bb
NEW
none[none] Win2K-f 9 of 40 00:42:13 00:42:13 1 none none:none
none|none none none
878ae0e7ed
NEW
none[none] WinXP 34 of 40 22:04:19 22:04:19 1 none none:none
none|none none none
265a4ee61b
NEW
05499f2ac5 [0] Win2K-f 31 of 39 01:49:08 01:49:08 1 none ASM:Graph
Armadillo| 0% lines=91 trace
0310ba7fff
NEW
none[none] WinXP 33 of 41 10:55:53 10:55:53 1 none none:none
none|none none none
a09dc0cda1
NEW
none[none] Win2K-f 37 of 40 04:52:28 04:57:14 2 none none:none
none|none none none
bd81d71c06
NEW
none[none] WinXP 39 of 40 06:38:04 06:38:04 1 none none:none
none|none none none
ee6a8facb7
NEW
none[none] WinXP 37 of 41 06:08:57 06:08:57 1 none none:none
none|none none none
d9cb288f31
NEW
45603a001c [0] Win2K-f 3 of 37 01:09:05 22:46:08 15 none ASM:Graph
UPX| 92% lines=174
embedded dns
trace
9bb68450cd
NEW
c2d5ac2315 [0] WinXP 34 of 36 09:13:09 09:13:09 1 none ASM:Graph
PolyEnE| 100% lines=73
embedded dns
trace