Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


25 June 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
1f6e430d3b
NEW		 1d04d6dc84 [0] WinXP 34 of 41 08:33:23 08:33:23 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
1a6c7da535
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 30 of 39 07:09:33 22:46:43 7 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 14:16:21 18:17:42 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
379a6daa0d
NEW		 1d04d6dc84 [0] Win2K-f 39 of 40 10:19:52 10:19:52 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 09:00:29 14:37:53 4 none none:none
 UPX| none trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 02:35:36 20:22:04 8 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
733bfa6caf
NEW		 ea191a79f8 [0] Win2K-f 39 of 41 09:30:05 09:30:05 1 none none:none
 ASPack| none trace
450ad1b683
NEW		 1e4ad6cdb1 [0] Win2K-f 39 of 41 14:05:41 14:05:41 1 none none:none
 ASPack| none trace
b47e522889
NEW		 9399e2ac48 [0] WinXP 40 of 41 10:33:02 10:33:02 1 none none:none
 ASPack| none trace
61a9127875
NEW		 61a9127875 [1] Win2K-f 38 of 41 09:22:46 09:22:46 1 none ASM:Graph
 pex| 42% lines=19 trace
9aaa5d9b81
NEW		 none[3] Win2K-f 10 of 38 02:32:42 02:32:42 1 none none:none
 UPX| none trace
e96823d223
NEW		 none[3] WinXP 28 of 36 18:03:03 18:03:03 1 none none:none
 none|none none trace
82614b1bbc
NEW		 e5a12e2022 [0] Win2K-f 29 of 41 10:36:03 10:36:03 1 none none:none
 ASPack| none trace
1b3d8e9fe7
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 39 of 41 08:00:57 10:40:34 4 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
9087d184e3
NEW		 631ae2f910 [0] Win2K-f 38 of 41 07:08:54 07:08:54 1 none none:none
 ASPack| none trace
9121eddc1a
NEW		 0958827bdb [0] WinXP 38 of 41 07:09:24 07:09:24 1 none none:none
 ASPack| none trace
8887d42f5c
NEW		 afaf06d6cd [0] WinXP 38 of 41 11:32:39 11:32:39 1 none none:none
 pex| none trace
4efa213b79
NEW
533d15b5ce
NEW		 9e7dff694f [0]
c67adf46e2[0]		 Win2K-f 30 of 33 18:10:30 18:10:30 1 none none:none
ASM:Graph
 none|none
tElock|		 96% none
lines=126
embedded dns		 trace
trace
d42c1cc7c0
NEW		 none[0] WinXP 29 of 29 16:55:27 16:55:27 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 06:38:50 06:38:50 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
7d89e4dffc
NEW		 a9315eb14c [0] WinXP 26 of 41 16:59:32 16:59:32 1 none none:none
 FASM| none trace
24bd7b91ab
NEW		 5577c9ffd9 [0] WinXP 38 of 41 15:12:11 15:12:11 1 none none:none
 ASPack| none trace
80563974df
NEW		 afaf06d6cd [0] Win2K-f 38 of 41 17:07:15 17:07:15 1 none none:none
 pex| none trace
03f912899b
NEW		 none[0] WinXP 32 of 32 02:34:34 02:34:34 1 none none:none
 none|none 32% lines=64 trace
0fbd3620c4
NEW		 0d031aab2f [0] Win2K-f 38 of 41 12:42:21 12:42:21 1 none none:none
 tElock| none trace
4dd4197eb4
NEW		 1d04d6dc84 [0] WinXP 37 of 40 09:54:05 09:54:05 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
83f00dca51
NEW		 ffa5d1870c [0] WinXP 40 of 41 08:08:25 08:08:25 1 none none:none
 ASPack| none trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 17:24:34 17:24:34 1 none none:none
 none|none 32% lines=61 trace
824d6a706e
NEW		 a66fd13bcb [0] WinXP 40 of 40 10:29:12 10:29:12 1 none none:none
 PolyEnE| none trace
50cdd5c6cf
NEW		 1d04d6dc84 [0] WinXP 37 of 40 07:10:03 07:10:03 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
741c93f3c1
NEW		 none[3] Win2K-f 5 of 37 20:38:19 20:47:04 2 none none:none
 UPX| none trace
4efa213b79
NEW
533d15b5ce
NEW
58c343a8d8
NEW		 9e7dff694f [0]
c67adf46e2[0]
none [0]		 Win2K-f 28 of 33 18:10:30 18:10:30 1 none none:none
ASM:Graph
none:none
 none|none
tElock|
Armadillo|		 0% none
lines=126
embedded dns
lines=91		 trace
trace
trace
f14fd68756
NEW		 f14fd68756 [1] WinXP 37 of 40 12:47:21 12:47:21 1 none ASM:Graph
 pex| 42% lines=19 trace
29b1147e8c
NEW
45d0b04679
NEW		 cb0cdc25cb [0]
d2d218b6e3[0]		 Win2K-f 38 of 41 16:40:11 16:40:11 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
29b1147e8c
NEW		 cb0cdc25cb [0] Win2K-f 36 of 40 16:40:11 16:40:11 1 none none:none
 Armadillo| none trace
59c104b04a
NEW		 9c0c7f9efa [0] Win2K-f 39 of 41 03:42:09 03:42:09 1 none none:none
 StarForce| none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 02:50:44 02:50:44 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 15:06:42 17:36:37 2 none none:none
 none|none 33% lines=60 trace
acc2931977
NEW		 5c47a9cff5 [0] WinXP 37 of 41 23:14:56 23:14:56 1 none none:none
 none|none none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 02:35:36 20:22:04 4 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
d8e60db98a
NEW		 6991257f56 [0] Win2K-f 37 of 40 08:45:48 08:45:48 1 none none:none
 pex| none trace
7587773eea
NEW		 none[3] Win2K-f 7 of 37 20:48:05 20:48:05 1 none none:none
 StarForce| none trace
38ed850a0e
NEW
b9297745a1
NEW		 46990f37cd [0]
4294884d84[0]		 Win2K-f 35 of 38 23:26:12 23:26:12 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
e3faefa56a
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 11:13:00 11:46:52 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
ccdfac7dab
NEW		 1e4ad6cdb1 [0] Win2K-f 33 of 41 07:22:55 07:22:55 1 none none:none
 ASPack| none trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 01:41:00 01:41:00 1 none ASM:Graph
 none|none 55% lines=59 trace
013a5ba10e
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 40 of 40 08:53:56 16:38:38 6 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
a0139d7ad8
NEW		 none[0] WinXP 29 of 29 15:45:49 15:45:49 1 none none:none
 PolyEnE| 99% lines=68 trace
3ca0933333
NEW		 1ff5b69ba2 [0] Win2K-f 39 of 41 12:01:27 12:01:27 1 none none:none
 ASPack| none trace
e7f3e11cf0
NEW		 d316b1a994 [0] Win2K-f 35 of 41 12:05:07 12:05:07 1 none none:none
 ASPack| none trace
e49bd14db6
NEW		 cd910f4cfa [0] WinXP 38 of 41 13:05:45 13:05:45 1 none none:none
 PolyEnE| none trace
7b313206a2
NEW		 0c866c8cce [0] WinXP 38 of 41 03:22:28 03:22:28 1 none none:none
 none|none none trace
c13a6c3da5
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 15:19:35 15:19:35 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
3490e2ea15
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 38 of 40 08:00:11 15:03:25 3 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
005b382e66
NEW		 e6ae9a9b91 [0] WinXP 38 of 41 08:35:44 08:35:44 1 none none:none
 PolyEnE| none trace
67a66839f7
NEW		 7b1fc808a3 [0] WinXP 37 of 41 15:26:34 15:26:34 1 none none:none
 none|none none trace
06f29527f1
NEW		 01b1457ad7 [0] WinXP 39 of 41 22:47:30 22:47:30 1 none none:none
 PolyEnE| none trace
ae7a5cd8b1
NEW		 18ff3687ad [0] WinXP 40 of 41 14:39:15 14:39:15 1 none none:none
 ASPack| none trace
a15f571a55
NEW		 2c8fba56d0 [0] WinXP 36 of 41 12:27:56 12:27:56 1 none none:none
 PolyEnE| none trace
0fbd3620c4
NEW
9659e9e487
NEW		 0d031aab2f [0]
d19073741a[0]		 Win2K-f 37 of 41 12:42:21 12:42:21 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
537e7076da
NEW		 none[3] Win2K-f 10 of 41 16:04:39 16:04:39 1 none none:none
 StarForce| none trace
d7265c89b6
NEW		 4fadf3fb74 [0] Win2K-f 40 of 40 07:09:31 07:09:31 1 none none:none
 ASPack| none trace
0ce6381a33
NEW		 2670133512 [0] WinXP 37 of 41 17:28:04 17:28:04 1 none none:none
 Armadillo| none trace
8ce32ded17
NEW		 none[3] Win2K-f 4 of 37 09:16:33 09:25:19 2 none none:none
 Armadillo| none trace
f75c895158
NEW		 afaf06d6cd [0] Win2K-f
WinXP		 36 of 41 07:31:15 14:01:21 4 none none:none
 pex| none trace
38ed850a0e
NEW		 46990f37cd [0] Win2K-f 34 of 38 23:26:12 23:26:12 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
7b9a48dc79
NEW		 d76340a7cd [0] Win2K-f 38 of 41 10:14:43 10:14:43 1 none none:none
 ASPack| none trace
d60e538e72
NEW		 none[3] Win2K-f 2 of 37 16:15:59 16:24:42 2 none none:none
 UPX| none trace
4efa213b79
NEW		 9e7dff694f [0] Win2K-f
WinXP		 18 of 41 18:10:30 18:15:55 2 none none:none
 none|none none trace
15d4d85dc0
NEW		 4c95ae4b3d [0] Win2K-f 32 of 32 18:49:00 18:49:00 1 none ASM:Graph
 StarForce| 98% lines=212
embedded dns		 trace
fb4b1960f6
NEW		 1d04d6dc84 [0] WinXP 34 of 41 14:19:54 14:19:54 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
65a0de1f09
NEW		 850cbe49c7 [0] WinXP 39 of 41 15:16:57 15:16:57 1 none none:none
 ASPack| none trace
4efa213b79
NEW
dab4da4e21
NEW		 9e7dff694f [0]
e63b813015[0]		 WinXP 37 of 39 18:15:55 18:15:55 1 none none:none
ASM:Graph
 none|none
PolyEnE|		 100% none
lines=134		 trace
trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 04:13:32 04:13:32 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
954a98c971
NEW		 cdd769f7a4 [0] Win2K-f 31 of 33 08:59:00 08:59:00 1 none none:none
 FSG| none trace
3a1bb83dcd
NEW		 d316b1a994 [0] WinXP 40 of 41 09:24:45 09:24:45 1 none none:none
 ASPack| none trace
4efa213b79
NEW
dab4da4e21
NEW
f1bb8174e3
NEW		 9e7dff694f [0]
e63b813015[0]
ff7d442dd1[0]		 WinXP
Win2K-f		 24 of 40 15:03:46 18:15:55 3 none none:none
ASM:Graph
none:none
 none|none
PolyEnE|
none|none		 none
lines=134
none		 trace
trace
trace
b6a68cb0e8
NEW		 2c7dbb8c1c [0] Win2K-f 5 of 41 00:43:50 00:43:50 1 none none:none
 MingWin32| none trace
8128405d8c
NEW		 1d04d6dc84 [0] Win2K-f
WinXP		 40 of 41 07:51:32 11:55:00 6 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
4efa213b79
NEW
533d15b5ce
NEW
58c343a8d8
NEW
a518b3db58
NEW		 9e7dff694f [0]
c67adf46e2[0]
none [0]
none [4]		 Win2K-f 0 of 41 18:10:30 18:10:30 1 none none:none
ASM:Graph
none:none
none:none
 none|none
tElock|
Armadillo|
none|none		 none
lines=126
embedded dns
lines=91
none		 trace
trace
trace
trace
7d89e4dffc
NEW
7d99b0e910
NEW		 a9315eb14c [0]
none [0]		 WinXP 26 of 28 16:59:32 16:59:32 1 none none:none
none:none
 FASM|
PolyEnE|		 99% none
lines=68		 trace
trace
4d4b114a18
NEW		 2414a15ebd [0] WinXP 40 of 41 18:19:23 18:19:23 1 none none:none
 PolyEnE| none trace
4efa213b79
NEW
dab4da4e21
NEW
f1bb8174e3
NEW
f37b5a8f0c
NEW		 9e7dff694f [0]
e63b813015[0]
ff7d442dd1[0]
dce19a471e[0]		 Win2K-f
WinXP		 19 of 40 18:10:30 18:15:55 2 none none:none
ASM:Graph
none:none
none:none
 none|none
PolyEnE|
none|none
none|none		 none
lines=134
none
none		 trace
trace
trace
trace
9b2c7d1c22
NEW		 1e4ad6cdb1 [0] WinXP
Win2K-f		 39 of 41 16:03:54 17:40:35 2 none none:none
 ASPack| none trace
2bb18aceee
NEW		 none[3] Win2K-f 8 of 37 14:26:26 14:26:26 1 none none:none
 UPX| none trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 04:33:10 23:41:34 15 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace