Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


01 July 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
3601ea08dd
NEW		 none[3] Win2K-f 7 of 40 18:16:32 18:16:32 1 none none:none
 none|none none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 09:35:07 20:10:14 6 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 01:17:47 21:54:21 7 none none:none
 UPX| none trace
07fabc79ef
NEW
53bfe15e91
NEW		 none[0]
1473091351[0]		 WinXP
Win2K-f		 33 of 33 05:56:59 22:35:32 13 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=75
embedded dns		 trace
trace
1ff1b53653
NEW
8a75955033
NEW
9276c8b36b
NEW		 none[4]
2bf3e548b9[0]
none [0]		 Win2K-f 28 of 32 00:43:26 00:43:26 1 none none:none
ASM:Graph
ASM:Graph
 Mew|
tElock|
Armadillo|		 47% none
lines=126
embedded dns
lines=81		 trace
trace
trace
07fabc79ef
NEW		 none[0] Win2K-f 0 of 32 22:35:32 22:35:32 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
917c085aca
NEW		 none[3] Win2K-f 3 of 37 07:22:58 16:23:06 4 none none:none
 Armadillo| none trace
df17a625ee
NEW		 none[0] WinXP 29 of 29 02:32:10 02:32:10 1 none none:none
 ASPack| 72% lines=298
embedded dns		 trace
bb7681eca8
NEW		 none[3] WinXP 32 of 32 18:52:58 18:52:58 1 none none:none
 tElock| none trace
f54691063f
NEW		 6039c698cd [0] WinXP 37 of 40 15:46:04 15:46:04 1 none ASM:Graph
 none|none 55% lines=59 trace
986b59708d
NEW		 none[0] WinXP 29 of 29 22:23:23 22:23:23 1 none none:none
 PolyEnE| 100% lines=57 trace
0ab3e584c7
NEW		 9e7dff694f [0] Win2K-f 22 of 41 19:09:37 19:09:37 1 none none:none
 none|none none trace
5813aed30c
NEW		 cb95cab496 [0] WinXP 19 of 39 11:58:56 11:58:56 1 none none:none
 StarForce| none trace
c05290bb06
NEW		 dddfe6a7fe [0] WinXP 0 of 0 08:47:00 08:47:00 1 none none:none
 PolyEnE| none trace
1ff1b53653
NEW		 none[4] Win2K-f
WinXP		 9 of 41 00:43:26 07:16:11 3 none none:none
 Mew| none trace
14c118316b
NEW
2821b50178
NEW		 none[4]
3b5bc0d44a[0]		 WinXP 27 of 41 22:23:38 22:23:38 1 none none:none
none:none
 FSG|
Armadillo|		 none
none		 trace
trace
73ce2b74da
NEW		 none[0] WinXP 3 of 33 13:10:02 13:10:02 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
0ab3e584c7
NEW
18dfbbc85b
NEW
533d15b5ce
NEW		 9e7dff694f [0]
4f6fcecea3[0]
c67adf46e2[0]		 WinXP
Win2K-f		 30 of 33 11:07:38 19:09:37 2 none none:none
none:none
ASM:Graph
 none|none
UPX|
tElock|		 96% none
none
lines=126
embedded dns		 trace
trace
trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 08:57:13 08:57:13 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
18dfbbc85b
NEW
3a253b2ef0
NEW		 4f6fcecea3 [0]
c42f25ae28[0]		 WinXP 20 of 41 11:07:38 11:07:38 1 none none:none
none:none
 UPX|
StarForce|		 none
none		 trace
trace
d60e538e72
NEW		 none[3] Win2K-f 2 of 37 06:54:17 11:29:34 3 none none:none
 UPX| none trace
1ff1b53653
NEW
8a75955033
NEW		 none[4]
2bf3e548b9[0]		 Win2K-f 29 of 32 00:43:26 00:43:26 1 none none:none
ASM:Graph
 Mew|
tElock|		 96% none
lines=126
embedded dns		 trace
trace
7552be3fb7
NEW		 none[3] Win2K-f 30 of 41 18:14:07 18:14:07 1 none none:none
 none|none none trace
1e07abae19
NEW
1ff1b53653
NEW
dab4da4e21
NEW		 1136f27263 [0]
none [4]
e63b813015[0]		 WinXP 37 of 39 06:57:36 06:57:36 1 none none:none
none:none
ASM:Graph
 StarForce|
Mew|
PolyEnE|		 100% none
none
lines=134		 trace
trace
trace
1e07abae19
NEW		 1136f27263 [0] WinXP 4 of 41 06:57:36 06:57:36 1 none none:none
 StarForce| none trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 04:14:01 04:14:01 1 none none:none
 none|none 32% lines=61 trace
1ff1b53653
NEW
824d6a706e
NEW		 none[4]
a66fd13bcb[0]		 WinXP 40 of 40 03:04:58 07:16:11 2 none none:none
none:none
 Mew|
PolyEnE|		 none
none		 trace
trace
14c118316b
NEW
2821b50178
NEW
656bdd06ff
NEW		 none[4]
3b5bc0d44a[0]
93760fe37a[0]		 WinXP 6 of 41 22:23:38 22:23:38 1 none none:none
none:none
none:none
 FSG|
Armadillo|
StarForce|		 none
none
none		 trace
trace
trace
d8b652221d
NEW		 edfa4116ba [0] Win2K-f 39 of 40 16:36:40 16:36:40 1 none none:none
 ASPack| none trace
18dfbbc85b
NEW		 4f6fcecea3 [0] WinXP
Win2K-f		 7 of 41 11:07:38 21:24:39 3 none none:none
 UPX| none trace
0ab3e584c7
NEW
18dfbbc85b
NEW
533d15b5ce
NEW
58c343a8d8
NEW		 9e7dff694f [0]
4f6fcecea3[0]
c67adf46e2[0]
none [0]		 WinXP
Win2K-f		 28 of 33 11:07:38 19:09:37 2 none none:none
none:none
ASM:Graph
none:none
 none|none
UPX|
tElock|
Armadillo|		 0% none
none
lines=126
embedded dns
lines=91		 trace
trace
trace
trace
a0a15f5ebf
NEW		 c506c7cc86 [0] Win2K-f 37 of 40 20:52:05 20:52:05 1 none none:none
 Mew| none trace
2b0689f857
NEW		 9be2d539d0 [0] WinXP 38 of 40 16:41:36 16:41:36 1 none none:none
 PolyEnE| none trace
17028f1eda
NEW		 none[3] WinXP 31 of 32 06:48:36 14:14:38 2 none none:none
 tElock| none trace
73ce2b74da
NEW
79c01ec060
NEW		 none[0]
1bfd34056c[0]		 WinXP 33 of 33 13:10:02 13:10:02 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=64
embedded dns		 trace
trace
a832f357e8
NEW		 bfdffc6bb4 [0] Win2K-f 35 of 39 03:38:18 03:38:18 1 none none:none
 Mew| none trace
0ab3e584c7
NEW
18dfbbc85b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
f37b5a8f0c
NEW		 9e7dff694f [0]
4f6fcecea3[0]
c67adf46e2[0]
none [0]
dce19a471e[0]		 Win2K-f
WinXP		 19 of 40 00:43:26 19:09:37 6 none none:none
none:none
ASM:Graph
none:none
none:none
 none|none
UPX|
tElock|
Armadillo|
none|none		 none
none
lines=126
embedded dns
lines=91
none		 trace
trace
trace
trace
trace
2a3036afb7
NEW		 79a17e6e18 [0] Win2K-f 38 of 41 09:48:21 09:48:21 1 none none:none
 none|none none trace
ea23d4c1f9
NEW		 8f4c3a8da3 [0] Win2K-f 11 of 40 23:40:56 23:40:56 1 none none:none
 MingWin32| none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 19:14:34 19:14:34 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
14c118316b
NEW		 none[4] WinXP 40 of 41 22:23:38 22:23:38 1 none none:none
 FSG| none trace
4f88618d4f
NEW		 none[3] Win2K-f 8 of 37 20:50:52 20:50:52 1 none none:none
 UPX| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 33 05:56:59 21:11:37 6 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
7587773eea
NEW		 none[3] Win2K-f 7 of 37 16:30:55 16:39:37 2 none none:none
 StarForce| none trace
b27d73bfcb
NEW		 473c6454ce [0] WinXP 35 of 36 08:29:34 08:29:34 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
18dfbbc85b
NEW
4853c92103
NEW		 4f6fcecea3 [0]
94f3a3a540[0]		 WinXP 38 of 41 21:24:39 21:24:39 1 none none:none
none:none
 UPX|
PolyEnE|		 none
none		 trace
trace
223d8089f8
NEW		 none[3] Win2K-f 2 of 37 12:59:09 13:07:50 2 none none:none
 StarForce| none trace
ce28648035
NEW		 126d2f4655 [0] WinXP 34 of 39 09:27:42 09:27:42 1 none ASM:Graph
 none|none 98% lines=546 trace
6529257178
NEW		 71e290f942 [0] WinXP 38 of 39 14:35:23 14:35:23 1 none none:none
 none|none none trace
69f8ccc92e
NEW		 e9613e6868 [0] WinXP 38 of 41 14:33:54 14:33:54 1 none none:none
 StarForce| none trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 05:19:29 05:19:29 1 none ASM:Graph
 none|none 55% lines=59 trace
18dfbbc85b
NEW
4853c92103
NEW
d9f973e718
NEW		 4f6fcecea3 [0]
94f3a3a540[0]
789856fe84[0]		 WinXP 37 of 41 21:24:39 21:24:39 1 none none:none
none:none
none:none
 UPX|
PolyEnE|
Armadillo|		 none
none
none		 trace
trace
trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 00:52:48 18:45:24 3 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace