Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


20 June 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
c13a6c3da5
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 03:07:39 03:46:34 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
3862324588
NEW		 none[3] Win2K-f 7 of 37 17:45:15 18:11:34 2 none none:none
 UPX| none trace
1a6c7da535
NEW		 1d04d6dc84 [0] Win2K-f 30 of 39 00:18:22 00:18:22 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
1ca2234289
NEW		 d1592021ee [0] WinXP 37 of 40 12:38:25 12:38:25 1 none none:none
 none|none none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 00:52:27 21:06:59 6 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 20:28:05 20:28:05 1 none none:none
 UPX| none trace
3490e2ea15
NEW		 1d04d6dc84 [0] WinXP 38 of 40 05:42:26 05:42:26 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
04ed4d2967
NEW
56db82dd48
NEW		 e8aa304d1c [0]
ff026fdfc7[0]		 WinXP 1 of 40 15:38:34 15:38:34 1 none none:none
none:none
 PolyEnE|
Stranik|		 none
none		 trace
trace
ec90ec15db
NEW		 7b0ab2b387 [0] Win2K-f 38 of 41 05:44:44 05:44:44 1 none none:none
 none|none none trace
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 00:52:27 23:23:46 17 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
3a6db3b186
NEW		 9eaa6cbd28 [0] WinXP 37 of 39 10:27:20 10:27:20 1 none none:none
 PolyEnE| none trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 19:39:48 19:39:48 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
551e8de6fc
NEW
66863cfb13
NEW
e8dfca0741
NEW		 ff026fdfc7 [0]
fca240f318[0]
20dfd2147c[0]		 Win2K-f
WinXP		 38 of 40 21:55:06 23:51:03 2 none none:none
none:none
none:none
 Stranik|
Armadillo|
tElock|		 none
none
none		 trace
trace
trace
986b59708d
NEW		 none[0] WinXP 29 of 29 16:44:17 16:44:17 1 none none:none
 PolyEnE| 100% lines=57 trace
367ce61cff
NEW		 48128671a8 [0] Win2K-f
WinXP		 25 of 39 00:14:04 00:30:45 2 none ASM:Graph
 StarForce| 62% lines=52 trace
04ed4d2967
NEW		 e8aa304d1c [0] WinXP 35 of 36 15:38:34 15:38:34 1 none none:none
 PolyEnE| none trace
0314f5d44a
NEW		 8a8dd8601a [0] Win2K-f 1 of 41 12:09:55 12:09:55 1 none none:none
 Stranik| none trace
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 20:04:37 20:04:37 1 none none:none
 PolyEnE| none trace
f75c895158
NEW		 afaf06d6cd [0] Win2K-f 36 of 41 02:54:04 02:54:04 1 none none:none
 pex| none trace
bca9e0fb5f
NEW
e53a9ea82e
NEW		 1d6b20137d [0]
none [0]		 Win2K-f 23 of 33 00:57:15 00:57:15 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
533d15b5ce
NEW		 c67adf46e2 [0] Win2K-f
WinXP		 30 of 33 12:09:55 21:43:53 2 none ASM:Graph
 tElock| 96% lines=126
embedded dns		 trace
bca9e0fb5f
NEW		 1d6b20137d [0] Win2K-f 31 of 32 00:57:15 00:57:15 1 none none:none
 PolyEnE| none trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 20:13:08 20:13:08 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
43a4caf363
NEW		 3cdcc73e70 [0] WinXP 35 of 40 07:11:56 07:11:56 1 none none:none
 PolyEnE| none trace
d60e538e72
NEW		 none[3] Win2K-f 2 of 37 21:40:43 23:48:59 3 none none:none
 UPX| none trace
48f3a2e0f6
NEW		 6bb43271dc [0] WinXP 38 of 41 13:38:53 13:38:53 1 none none:none
 none|none none trace
03f912899b
NEW		 none[0] WinXP 32 of 32 06:30:11 06:30:11 1 none none:none
 none|none 32% lines=64 trace
a610006544
NEW		 none[3] Win2K-f 10 of 40 13:17:28 13:17:28 1 none none:none
 none|none none trace
b5359892b4
NEW		 6a21064f1b [0] Win2K-f 12 of 40 02:16:46 02:16:46 1 none none:none
 MingWin32| none trace
05cfbe0bc5
NEW		 6e704f13e9 [0] WinXP 39 of 40 01:10:58 01:10:58 1 none ASM:Graph
 FSG| 89% lines=48 trace
c8063e4424
NEW		 9399e2ac48 [0] WinXP 40 of 41 01:34:23 01:34:23 1 none none:none
 ASPack| none trace
409ef22885
NEW		 none[3] Win2K-f 2 of 37 17:38:20 17:38:20 1 none none:none
 UPX| none trace
3ed16ae12d
NEW		 none[0] Win2K-f 3 of 33 07:35:49 07:35:49 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
367ce61cff
NEW
954a98c971
NEW		 48128671a8 [0]
cdd769f7a4[0]		 Win2K-f 31 of 33 00:14:04 00:14:04 1 none ASM:Graph
none:none
 StarForce|
FSG|		 lines=52
none		 trace
trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 03:22:39 19:56:50 2 none none:none
 none|none 32% lines=61 trace
551e8de6fc
NEW		 ff026fdfc7 [0] WinXP 1 of 40 23:51:03 23:51:03 1 none none:none
 Stranik| none trace
533d15b5ce
NEW
58c343a8d8
NEW		 c67adf46e2 [0]
none [0]		 Win2K-f
WinXP		 28 of 33 12:09:55 21:43:53 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=126
embedded dns
lines=91		 trace
trace
dec47f5887
NEW		 fe019b72b5 [0] WinXP 37 of 40 20:57:09 20:57:09 1 none none:none
 StarForce| none trace
3ed16ae12d
NEW
79c01ec060
NEW		 none[0]
1bfd34056c[0]		 Win2K-f 33 of 33 07:35:49 07:35:49 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=64
embedded dns		 trace
trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 01:26:14 12:33:37 2 none none:none
 PolyEnE| 99% lines=68 trace
1971b97258
NEW		 none[3] WinXP 10 of 41 16:03:42 16:03:42 1 none none:none
 none|none none trace
551e8de6fc
NEW
66863cfb13
NEW
e8dfca0741
NEW
f37b5a8f0c
NEW		 ff026fdfc7 [0]
fca240f318[0]
20dfd2147c[0]
dce19a471e[0]		 Win2K-f
WinXP		 19 of 40 12:09:55 23:51:03 4 none none:none
none:none
none:none
none:none
 Stranik|
Armadillo|
tElock|
none|none		 none
none
none
none		 trace
trace
trace
trace
d816ebae08
NEW		 f978f8c5c6 [0] WinXP 37 of 40 00:56:46 00:56:46 1 none none:none
 ASPack| none trace
2a3036afb7
NEW		 79a17e6e18 [0] WinXP 38 of 41 07:31:26 07:31:26 1 none none:none
 none|none none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 09:39:49 20:21:37 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
551e8de6fc
NEW
66863cfb13
NEW		 ff026fdfc7 [0]
fca240f318[0]		 Win2K-f
WinXP		 38 of 40 21:55:06 23:51:03 2 none none:none
none:none
 Stranik|
Armadillo|		 none
none		 trace
trace
4f88618d4f
NEW		 none[3] Win2K-f 8 of 37 06:32:52 06:32:52 1 none none:none
 UPX| none trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 18:41:54 18:41:54 1 none none:none
 none|none 33% lines=60 trace
2e45ae247e
NEW		 36aa8cd03d [0] WinXP 0 of 33 09:44:23 09:44:23 1 none none:none
 Armadillo| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 01:21:45 23:23:46 6 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
d8e60db98a
NEW		 6991257f56 [0] WinXP 37 of 40 00:32:54 00:32:54 1 none none:none
 pex| none trace
8bdfceaf84
NEW		 8a510bc571 [0] WinXP 40 of 41 00:18:04 00:18:04 1 none none:none
 ASPack| none trace
b27d73bfcb
NEW		 473c6454ce [0] WinXP 35 of 36 08:25:40 11:40:03 3 none ASM:Graph
 PolyEnE| 100% lines=68 trace
7587773eea
NEW		 none[3] Win2K-f 7 of 37 06:47:52 06:56:41 2 none none:none
 StarForce| none trace
d732dd0b4d
NEW		 7fdcb7e309 [0] Win2K-f 31 of 36 03:08:41 03:08:41 1 none none:none
 StarForce| none trace
223d8089f8
NEW		 none[3] Win2K-f 2 of 37 16:53:35 17:02:24 2 none none:none
 StarForce| none trace
9810215e67
NEW		 18ff3687ad [0] Win2K-f 37 of 40 06:28:17 06:28:17 1 none none:none
 ASPack| none trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 01:16:49 01:16:49 1 none ASM:Graph
 none|none 55% lines=59 trace
013a5ba10e
NEW		 1d04d6dc84 [0] Win2K-f 40 of 40 01:27:20 01:27:20 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
053e25e2e4
NEW		 1e4ad6cdb1 [0] Win2K-f 38 of 41 00:29:49 00:29:49 1 none none:none
 ASPack| none trace
367ce61cff
NEW
cb3ed21ccb
NEW		 48128671a8 [0]
967ddff050[0]		 WinXP 38 of 40 00:30:45 00:30:45 1 none ASM:Graph
none:none
 StarForce|
Mew|		 lines=52
none		 trace
trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 00:16:21 22:17:30 17 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace