Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



19 June 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
1a6c7da535
NEW
1d04d6dc84 [0] Win2K-f 30 of 39 18:38:31 23:44:42 2 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
8a75955033
NEW
9276c8b36b
NEW
ca557e7460
NEW
def0132311
NEW
2bf3e548b9 [0]
none [0]
42d57774ef[0]
7a31307d90[0]
WinXP 25 of 41 09:14:24 09:14:24 1 none ASM:Graph
ASM:Graph
none:none
none:none
tElock|
Armadillo|
none|none
ASProtect|
lines=126
embedded dns
lines=81
none
none
trace
trace
trace
trace
379a6daa0d
NEW
1d04d6dc84 [0] WinXP
Win2K-f
39 of 40 20:43:45 22:51:04 2 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
b7a2732226
NEW
4fadf3fb74 [0] Win2K-f 39 of 40 18:13:45 18:13:45 1 none none:none
ASPack| none trace
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
WinXP
Win2K-f
0 of 32 12:50:44 22:31:54 5 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
dc331fb791
NEW
none[3] Win2K-f 3 of 37 20:56:51 20:56:51 1 none none:none
UPX| none trace
7bbf2f5acb
NEW
1701831bae [0] WinXP 39 of 41 23:39:45 23:39:45 1 none none:none
ASPack| none trace
53bfe15e91
NEW
1473091351 [0] WinXP
Win2K-f
33 of 33 04:12:14 22:31:54 11 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
43f1afcbda
NEW
1a83fc6fb4 [0] WinXP 35 of 38 22:54:37 22:54:37 1 none none:none
Armadillo| none trace
a2edb8f907
NEW
da04648dc3 [0] WinXP 31 of 41 19:37:26 19:37:26 1 none none:none
PolyEnE| none trace
bb7681eca8
NEW
none[3] WinXP 32 of 32 08:12:40 08:12:40 1 none none:none
tElock| none trace
61a9127875
NEW
61a9127875 [1] Win2K-f
WinXP
38 of 41 17:50:37 23:38:24 2 none ASM:Graph
pex| 42% lines=19 trace
367ce61cff
NEW
48128671a8 [0] WinXP 25 of 39 20:48:09 21:44:38 2 none ASM:Graph
StarForce| 62% lines=52 trace
c386426b7e
NEW
b4b3d9fd14 [0] Win2K-f 33 of 41 22:21:21 22:21:21 1 none none:none
PENinja S| none trace
3539b0aaf8
NEW
e7124c9b61 [0] Win2K-f 40 of 41 19:29:39 19:29:39 1 none none:none
Stranik| none trace
fe87c62b51
NEW
fe87c62b51 [1] Win2K-f 38 of 41 18:52:02 18:52:02 1 none ASM:Graph
pex| 42% lines=19 trace
ec007c5df1
NEW
18ff3687ad [0] Win2K-f
WinXP
39 of 40 17:50:45 18:00:00 2 none none:none
ASPack| none trace
58f016311a
NEW
99e6d4fa8d [0] WinXP 38 of 41 17:17:09 17:17:09 1 none none:none
PolyEnE| none trace
9c681fb3f5
NEW
93d1cdff9e [0] WinXP 40 of 41 19:09:39 19:09:39 1 none none:none
Stranik| none trace
03f912899b
NEW
none[0] WinXP 32 of 32 11:13:50 11:13:50 1 none none:none
none|none 32% lines=64 trace
84b1b363a1
NEW
1e4ad6cdb1 [0] WinXP 38 of 40 17:51:23 21:50:35 2 none none:none
ASPack| none trace
692f9bb8df
NEW
2bf6f4e9f0 [0] WinXP 37 of 41 03:25:26 03:25:26 1 none none:none
Armadillo| none trace
6306024fe3
NEW
4fadf3fb74 [0] WinXP 40 of 41 21:22:01 21:22:01 1 none none:none
ASPack| none trace
50cdd5c6cf
NEW
1d04d6dc84 [0] Win2K-f 37 of 40 19:30:23 22:01:22 4 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
692f9bb8df
NEW
d482a2bec3
NEW
2bf6f4e9f0 [0]
50a83c6b54[0]
WinXP 38 of 41 03:25:26 03:25:26 1 none none:none
none:none
Armadillo|
tElock|
none
none
trace
trace
d8b652221d
NEW
edfa4116ba [0] Win2K-f 39 of 40 11:33:16 11:33:16 1 none none:none
ASPack| none trace
a82464d8f8
NEW
1d04d6dc84 [0] WinXP 34 of 41 19:52:32 19:52:32 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
f14fd68756
NEW
f14fd68756 [1] Win2K-f 37 of 40 21:53:18 21:53:18 1 none ASM:Graph
pex| 42% lines=19 trace
ea9291e34b
NEW
9399e2ac48 [0] WinXP 38 of 41 20:13:44 20:13:44 1 none none:none
ASPack| none trace
9fb269d669
NEW
1599a3de5f [0] Win2K-f 38 of 41 19:11:37 19:11:37 1 none none:none
StarForce| none trace
6a7b38897f
NEW
6ac8587a1c [0] WinXP 40 of 41 19:32:35 19:32:35 1 none none:none
ASPack| none trace
53bfe15e91
NEW
57ce4acac2
NEW
1473091351 [0]
none [0]
WinXP 0 of 33 08:20:11 08:20:11 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
1a2c0e6130
NEW
none[0] WinXP 29 of 29 16:54:32 16:54:32 1 none none:none
none|none 33% lines=60 trace
8bdfceaf84
NEW
8a510bc571 [0] WinXP 40 of 41 18:57:29 18:57:29 1 none none:none
ASPack| none trace
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
WinXP
Win2K-f
0 of 33 04:12:14 15:30:18 5 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
7587773eea
NEW
none[3] Win2K-f 7 of 37 07:30:16 20:43:02 3 none none:none
StarForce| none trace
aafd96fe57
NEW
9d4029abac [0] WinXP 37 of 41 08:39:27 08:39:27 1 none none:none
StarForce| none trace
013a5ba10e
NEW
1d04d6dc84 [0] Win2K-f 40 of 40 20:39:46 20:39:46 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
6af2277cd2
NEW
6ac8587a1c [0] WinXP 38 of 41 18:12:41 18:12:41 1 none none:none
ASPack| none trace
053e25e2e4
NEW
1e4ad6cdb1 [0] WinXP 38 of 41 20:08:01 20:08:01 1 none none:none
ASPack| none trace
c13a6c3da5
NEW
1d04d6dc84 [0] WinXP
Win2K-f
40 of 41 18:52:43 23:14:21 2 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
3490e2ea15
NEW
1d04d6dc84 [0] WinXP
Win2K-f
38 of 40 18:39:22 22:45:51 9 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
8a75955033
NEW
9276c8b36b
NEW
2bf3e548b9 [0]
none [0]
WinXP 28 of 32 09:14:24 09:14:24 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
47% lines=126
embedded dns
lines=81
trace
trace
43f1afcbda
NEW
d0fe1a8e21
NEW
1a83fc6fb4 [0]
4a3bf4c8e1[0]
WinXP 38 of 41 22:54:37 22:54:37 1 none none:none
none:none
Armadillo|
tElock|
none
none
trace
trace
ae7a5cd8b1
NEW
18ff3687ad [0] Win2K-f 40 of 41 21:17:31 21:17:31 1 none none:none
ASPack| none trace
90c63ae197
NEW
08bd24eb68 [0] WinXP 38 of 41 18:32:26 18:32:26 1 none none:none
ASPack| none trace
f75c895158
NEW
afaf06d6cd [0] Win2K-f
WinXP
36 of 41 22:15:17 22:26:18 2 none none:none
pex| none trace
644e3df1d9
NEW
28e4c0f083 [0] Win2K-f 37 of 40 20:27:48 20:27:48 1 none none:none
ASPack| none trace
7b9a48dc79
NEW
d76340a7cd [0] Win2K-f 38 of 41 21:36:22 21:36:22 1 none none:none
ASPack| none trace
d60e538e72
NEW
none[3] Win2K-f 2 of 37 17:57:35 17:57:35 1 none none:none
UPX| none trace
8a75955033
NEW
2bf3e548b9 [0] WinXP 29 of 32 09:14:24 09:14:24 1 none ASM:Graph
tElock| 96% lines=126
embedded dns
trace
0b951c2832
NEW
5fe761661a [0] WinXP 32 of 36 20:12:37 20:12:37 1 none none:none
Armadillo| none trace
a7cb25c023
NEW
18ff3687ad [0] Win2K-f 40 of 41 21:11:15 21:11:15 1 none none:none
ASPack| none trace
6639fffb75
NEW
631ae2f910 [0] Win2K-f 40 of 41 22:25:20 22:25:20 1 none none:none
ASPack| none trace
7f60162c2c
NEW
none[0] WinXP 25 of 25 15:22:46 15:22:46 1 none none:none
PolyEnE| 100% lines=93
embedded dns
trace
b68d420d61
NEW
1d04d6dc84 [0] Win2K-f 40 of 41 20:56:27 20:56:27 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
a8c8cef5bf
NEW
069c47bc36 [0] Win2K-f 40 of 40 23:14:41 23:14:41 1 none none:none
ASPack| none trace
3ae357d17b
NEW
none[0] WinXP 29 of 29 10:55:48 10:55:48 1 none ASM:Graph
PolyEnE| 99% lines=73 trace
8c9b5f32e6
NEW
1e4ad6cdb1 [0] Win2K-f 33 of 41 18:31:40 18:31:40 1 none none:none
ASPack| none trace
8128405d8c
NEW
1d04d6dc84 [0] Win2K-f
WinXP
40 of 41 17:53:23 23:33:41 5 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
9b2c7d1c22
NEW
1e4ad6cdb1 [0] WinXP 39 of 41 19:27:42 19:27:42 1 none none:none
ASPack| none trace
4f88618d4f
NEW
none[3] Win2K-f 8 of 37 19:24:01 19:24:01 1 none none:none
UPX| none trace
ab5e47bf8d
NEW
67fb5eff61 [0] WinXP 29 of 29 16:52:34 16:52:34 1 none none:none
ASPack| none trace
8a75955033
NEW
9276c8b36b
NEW
ca557e7460
NEW
2bf3e548b9 [0]
none [0]
42d57774ef[0]
WinXP 12 of 30 09:14:24 09:14:24 1 none ASM:Graph
ASM:Graph
none:none
tElock|
Armadillo|
none|none
lines=126
embedded dns
lines=81
none
trace
trace
trace
25ef2f5f6d
NEW
9399e2ac48 [0] WinXP 40 of 41 19:56:46 19:56:46 1 none none:none
ASPack| none trace
9810215e67
NEW
18ff3687ad [0] Win2K-f 37 of 40 20:28:19 20:28:19 1 none none:none
ASPack| none trace
0b951c2832
NEW
e4ed4df0f0
NEW
5fe761661a [0]
de471fc380[0]
WinXP 34 of 36 20:12:37 20:12:37 1 none none:none
none:none
Armadillo|
tElock|
none
none
trace
trace
d9cb288f31
NEW
45603a001c [0] Win2K-f 3 of 37 03:55:55 23:17:46 15 none ASM:Graph
UPX| 92% lines=174
embedded dns
trace