Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


29 June 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
62e5ae233d
NEW		 958d6fa77d [0] WinXP 0 of 0 19:43:57 19:43:57 1 none none:none
 tElock| none trace
1a6c7da535
NEW		 1d04d6dc84 [0] Win2K-f 30 of 39 05:04:25 05:04:25 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
7d7a6d68a6
NEW		 none[3] Win2K-f 0 of 0 02:28:43 02:28:43 1 none none:none
 none|none none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 09:29:14 23:27:02 6 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 12:00:06 17:17:50 4 none none:none
 UPX| none trace
210bc6db73
NEW		 63e94449ae [0] WinXP 0 of 0 06:23:53 06:23:53 1 none none:none
 PolyEnE| none trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 00:20:24 23:27:02 16 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
bd35d4d98f
NEW		 none[3] Win2K-f 7 of 37 03:36:01 04:37:13 2 none none:none
 Armadillo| none trace
f54691063f
NEW		 6039c698cd [0] WinXP 37 of 40 02:53:37 02:53:37 1 none ASM:Graph
 none|none 55% lines=59 trace
986b59708d
NEW		 none[0] WinXP 29 of 29 13:17:50 13:17:50 1 none none:none
 PolyEnE| 100% lines=57 trace
66863cfb13
NEW
e8dfca0741
NEW		 fca240f318 [0]
20dfd2147c[0]		 WinXP 38 of 40 03:06:45 03:06:45 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
62e5ae233d
NEW
a214274930
NEW		 958d6fa77d [0]
a281c0c12a[0]		 WinXP 0 of 0 19:43:57 19:43:57 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
168aab35a3
NEW
18dfbbc85b
NEW
1ff1b53653
NEW		 60b730b97e [0]
4f6fcecea3[0]
none [4]		 Win2K-f 0 of 0 19:02:46 19:02:46 1 none ASM:Graph
none:none
none:none
 tElock|
UPX|
Mew|		 lines=120
embedded dns
none
none		 trace
trace
trace
8ce32ded17
NEW		 none[3] Win2K-f 4 of 37 12:41:32 12:41:32 1 none none:none
 Armadillo| none trace
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 19:38:55 19:38:55 1 none none:none
 PolyEnE| none trace
168aab35a3
NEW		 60b730b97e [0] Win2K-f 31 of 33 19:02:46 19:02:46 1 none ASM:Graph
 tElock| 95% lines=120
embedded dns		 trace
01d37b2208
NEW		 none[3] Win2K-f 0 of 0 18:49:40 18:49:40 1 none none:none
 none|none none trace
27b17a2724
NEW		 a1d5ac965b [0] WinXP 32 of 40 08:58:39 08:58:39 1 none none:none
 tElock| none trace
d60e538e72
NEW		 none[3] Win2K-f 2 of 37 20:10:19 20:10:19 1 none none:none
 UPX| none trace
f502585714
NEW		 none[0] WinXP 29 of 29 17:14:14 17:14:14 1 none none:none
 PolyEnE| 100% lines=63 trace
b62de46f7d
NEW		 1d4ab3c709 [0] WinXP 0 of 0 19:00:25 19:00:25 1 none none:none
 none|none none trace
36791e4496
NEW		 376ab302ff [0] Win2K-f 37 of 41 08:04:52 08:04:52 1 none none:none
 Armadillo| none trace
218ce30f5c
NEW		 none[3] WinXP 18 of 35 23:53:36 23:53:36 1 none none:none
 none|none none trace
03f912899b
NEW		 none[0] WinXP 32 of 32 22:43:46 22:43:46 1 none none:none
 none|none 32% lines=64 trace
9e6d2e9693
NEW
e8e0baaf38
NEW		 89411d91e8 [0]
a5c2c22024[0]		 WinXP 0 of 0 15:46:14 15:46:14 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
36791e4496
NEW
53a2030ec4
NEW		 376ab302ff [0]
cbbd4c41af[0]		 Win2K-f 38 of 41 08:04:52 08:04:52 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
168aab35a3
NEW
18dfbbc85b
NEW
1ff1b53653
NEW
4c3df24b32
NEW		 60b730b97e [0]
4f6fcecea3[0]
none [4]
none [0]		 WinXP
Win2K-f		 0 of 33 01:33:45 19:02:46 2 none ASM:Graph
none:none
none:none
ASM:Graph
 tElock|
UPX|
Mew|
Armadillo|		 47% lines=120
embedded dns
none
none
lines=81		 trace
trace
trace
trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 14:13:42 16:49:36 2 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 20:02:00 20:02:00 1 none none:none
 none|none 32% lines=61 trace
50cdd5c6cf
NEW		 1d04d6dc84 [0] Win2K-f 37 of 40 08:18:53 08:18:53 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
a894e6640a
NEW		 2a62540340 [0] Win2K-f 38 of 41 01:22:31 01:22:31 1 none none:none
 PolyEnE| none trace
168aab35a3
NEW
18dfbbc85b
NEW		 60b730b97e [0]
4f6fcecea3[0]		 Win2K-f 0 of 0 19:02:46 19:02:46 1 none ASM:Graph
none:none
 tElock|
UPX|		 lines=120
embedded dns
none		 trace
trace
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 03:27:43 03:48:52 2 none ASM:Graph
 none|none 100% lines=61 trace
507252387e
NEW		 none[3] Win2K-f 7 of 37 14:31:59 14:31:59 1 none none:none
 UPX| none trace
9e6d2e9693
NEW		 89411d91e8 [0] WinXP 0 of 0 15:46:14 15:46:14 1 none none:none
 Armadillo| none trace
2b0689f857
NEW		 9be2d539d0 [0] WinXP 0 of 0 05:38:56 05:38:56 1 none none:none
 PolyEnE| none trace
5213395833
NEW		 515eacbc36 [0] Win2K-f 0 of 0 06:29:09 06:29:09 1 none none:none
 tElock| none trace
168aab35a3
NEW
18dfbbc85b
NEW
1ff1b53653
NEW
4c3df24b32
NEW
f37b5a8f0c
NEW		 60b730b97e [0]
4f6fcecea3[0]
none [4]
none [0]
dce19a471e[0]		 Win2K-f 19 of 40 19:02:46 19:02:46 1 none ASM:Graph
none:none
none:none
ASM:Graph
none:none
 tElock|
UPX|
Mew|
Armadillo|
none|none		 lines=120
embedded dns
none
none
lines=81
none		 trace
trace
trace
trace
trace
ae6c45c2b3
NEW		 e196ebb167 [0] WinXP 0 of 0 16:06:42 16:06:42 1 none none:none
 StarForce| none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 00:20:24 00:20:24 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
66863cfb13
NEW		 fca240f318 [0] WinXP 38 of 40 03:06:45 03:06:45 1 none none:none
 Armadillo| none trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 21:23:43 21:23:43 1 none none:none
 none|none 33% lines=60 trace
218ce30f5c
NEW
a08f3b74a4
NEW		 none[3]
none [0]		 Win2K-f
WinXP		 0 of 33 05:31:43 23:53:36 8 none none:none
none:none
 none|none
Armadillo|		 0% none
lines=90		 trace
trace
5213395833
NEW
9fdf6de4a9
NEW		 515eacbc36 [0]
794f9a1087[0]		 Win2K-f 0 of 0 06:29:09 06:29:09 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
ea71d9bd68
NEW		 none[4] WinXP 0 of 0 08:37:25 08:37:25 1 none none:none
 ASPack| none trace
624d43be60
NEW		 3caff61b75 [0] WinXP 38 of 40 12:38:37 12:38:37 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
9bb68450cd
NEW		 c2d5ac2315 [0] WinXP 34 of 36 05:50:13 05:50:13 1 none ASM:Graph
 PolyEnE| 100% lines=73
embedded dns		 trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 02:22:51 20:07:13 11 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace