Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


09 July 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
3862324588
NEW		 none[3] Win2K-f 7 of 37 12:42:58 12:42:58 1 none none:none
 UPX| none trace
1772d47c4c
NEW
298243013a
NEW
4faab4a9f5
NEW		 8bd43a2dce [0]
b8c969e769[0]
4faab4a9f5[1]		 WinXP 0 of 0 10:18:54 10:18:54 1 none none:none
none:none
ASM:Graph
 Stranik|
PEQuake|
Armadillo|		 48% none
none
lines=608		 trace
trace
trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 18:06:12 18:25:26 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
526615a393
NEW		 63943ff544 [0] WinXP 0 of 0 10:04:22 10:04:22 1 none none:none
 StarForce| none trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 02:38:47 02:38:47 1 none none:none
 UPX| none trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 00:35:24 23:37:18 13 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
67a66839f7
NEW		 7b1fc808a3 [0] Win2K-f 37 of 41 11:14:26 11:14:26 1 none none:none
 none|none none trace
c0f08def5e
NEW		 c64727de72 [0] Win2K-f
WinXP		 0 of 0 07:44:36 09:53:08 9 none none:none
 StarForce| none trace
07fabc79ef
NEW		 none[0] Win2K-f 0 of 32 23:27:54 23:27:54 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
a52f10d936
NEW		 8252b99ecb [0] Win2K-f 0 of 0 01:01:57 01:01:57 1 none none:none
 PENinja S| none trace
f54691063f
NEW		 6039c698cd [0] WinXP 37 of 40 15:52:17 15:52:17 1 none ASM:Graph
 none|none 55% lines=59 trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f
WinXP		 8 of 33 00:35:24 20:24:40 3 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
372580ac1d
NEW		 4d82137ab0 [0] Win2K-f 0 of 0 06:36:10 06:36:10 1 none none:none
 Armadillo| none trace
2d16d63f91
NEW		 27cb26ee14 [0] WinXP 38 of 41 20:35:25 20:35:25 1 none none:none
 PolyEnE| none trace
d0e7723e9b
NEW		 6c9f33ae69 [0] Win2K-f 0 of 0 07:41:20 07:41:20 1 none none:none
 StarForce| none trace
176fe26a6e
NEW
1772d47c4c
NEW
298243013a
NEW
2ef9098242
NEW
863428a979
NEW		 none[4]
8bd43a2dce[0]
b8c969e769[0]
de91d8b5d0[0]
a6fe83396d[0]		 WinXP 0 of 0 20:43:13 20:43:13 1 none none:none
none:none
none:none
none:none
none:none
 PolyEnE|
Stranik|
PEQuake|
Armadillo|
none|none		 none
none
none
none
none		 trace
trace
trace
trace
trace
2a09bf2f60
NEW		 none[3] Win2K-f 0 of 0 16:44:25 16:44:25 1 none none:none
 none|none none trace
6b796d4152
NEW		 4ceb4e4e5a [0] WinXP 38 of 41 10:35:55 10:35:55 1 none none:none
 pex| none trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 09:06:49 15:25:36 2 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
d60e538e72
NEW		 none[3] Win2K-f 2 of 37 16:48:03 16:48:03 1 none none:none
 UPX| none trace
f502585714
NEW		 none[0] WinXP 29 of 29 03:37:03 03:37:03 1 none none:none
 PolyEnE| 100% lines=63 trace
b625cc283c
NEW		 cd3e986e95 [0] Win2K-f 0 of 0 09:29:45 09:29:45 1 none none:none
 StarForce| none trace
a4dde6f9e4
NEW		 none[4] Win2K-f 35 of 41 08:46:55 08:46:55 1 none none:none
 none|none none trace
13e15a653e
NEW		 none[3] Win2K-f 6 of 37 22:30:16 22:30:16 1 none none:none
 UPX| none trace
176fe26a6e
NEW		 none[4] WinXP 0 of 0 20:43:13 20:43:13 1 none none:none
 PolyEnE| none trace
372580ac1d
NEW
fc493d3732
NEW		 4d82137ab0 [0]
16e365df5b[0]		 Win2K-f 0 of 0 06:36:10 06:36:10 1 none none:none
none:none
 Armadillo|
PolyEnE|		 none
none		 trace
trace
1b3feab839
NEW		 6c9f33ae69 [0] WinXP 0 of 0 07:49:50 10:00:01 2 none none:none
 StarForce| none trace
e6666eeeda
NEW		 067414a093 [0] WinXP 0 of 0 07:50:06 07:50:06 1 none none:none
 StarForce| none trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 17:40:54 17:40:54 1 none none:none
 none|none 32% lines=61 trace
824d6a706e
NEW		 a66fd13bcb [0] WinXP 40 of 40 06:35:49 06:35:49 1 none none:none
 PolyEnE| none trace
176fe26a6e
NEW
1772d47c4c
NEW		 none[4]
8bd43a2dce[0]		 WinXP 18 of 41 10:18:54 20:43:13 2 none none:none
none:none
 PolyEnE|
Stranik|		 none
none		 trace
trace
f19387f40e
NEW		 ab37c11b34 [0] Win2K-f 0 of 0 22:07:05 22:07:05 1 none none:none
 ASProtect| none trace
47c7e9af76
NEW		 22bcd9c8fe [0] WinXP 0 of 0 07:40:26 07:40:26 1 none none:none
 StarForce| none trace
1772d47c4c
NEW
298243013a
NEW
4faab4a9f5
NEW
898e8c400b
NEW
c61078e573
NEW		 8bd43a2dce [0]
b8c969e769[0]
4faab4a9f5[1]
b2ed41db60[0]
670955f966[0]		 WinXP 31 of 41 10:18:54 10:18:54 1 none none:none
none:none
ASM:Graph
none:none
none:none
 Stranik|
PEQuake|
Armadillo|
Armadillo|
Armadillo|		 none
none
lines=608
none
none		 trace
trace
trace
trace
trace
176fe26a6e
NEW
1772d47c4c
NEW
298243013a
NEW		 none[4]
8bd43a2dce[0]
b8c969e769[0]		 WinXP 15 of 41 10:18:54 20:43:13 2 none none:none
none:none
none:none
 PolyEnE|
Stranik|
PEQuake|		 none
none
none		 trace
trace
trace
db4b4d507c
NEW		 1f2fc1a994 [0] Win2K-f 0 of 0 10:28:03 10:28:03 1 none none:none
 none|none none trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 20:17:25 20:17:25 1 none none:none
 PolyEnE| 99% lines=68 trace
17028f1eda
NEW		 none[3] WinXP 31 of 32 19:08:21 19:15:48 2 none none:none
 tElock| none trace
1772d47c4c
NEW
298243013a
NEW
4faab4a9f5
NEW
898e8c400b
NEW		 8bd43a2dce [0]
b8c969e769[0]
4faab4a9f5[1]
b2ed41db60[0]		 WinXP 0 of 0 10:18:54 10:18:54 1 none none:none
none:none
ASM:Graph
none:none
 Stranik|
PEQuake|
Armadillo|
Armadillo|		 none
none
lines=608
none		 trace
trace
trace
trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 00:44:58 00:44:58 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
474acf88e5
NEW		 1f53944b24 [0] WinXP 0 of 0 16:41:09 16:41:09 1 none none:none
 tElock| none trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 19:19:38 19:19:38 1 none none:none
 none|none 33% lines=60 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 33 01:14:44 23:37:18 6 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
b27d73bfcb
NEW		 473c6454ce [0] WinXP 35 of 36 11:41:11 11:41:11 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
041b82a1ae
NEW		 041b82a1ae [1] Win2K-f 0 of 0 08:15:45 08:15:45 1 none ASM:Graph
 StarForce| 25% lines=88 trace
7587773eea
NEW		 none[3] Win2K-f 7 of 37 08:39:48 08:39:48 1 none none:none
 StarForce| none trace
452313e1c7
NEW		 a6402924ba [0] WinXP 28 of 35 11:54:29 11:54:29 1 none none:none
 ASPack| none trace
474acf88e5
NEW
68f0c14692
NEW		 1f53944b24 [0]
ccc1b24d53[0]		 WinXP 0 of 0 16:41:09 16:41:09 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
b8076e37ae
NEW		 52953fed05 [0] Win2K-f 0 of 0 07:54:29 07:54:29 1 none none:none
 StarForce| none trace
d4c829bd4b
NEW		 c64727de72 [0] WinXP 0 of 0 09:49:20 09:49:20 1 none none:none
 StarForce| none trace
1772d47c4c
NEW
298243013a
NEW
4faab4a9f5
NEW
898e8c400b
NEW
c61078e573
NEW
d80521c9d9
NEW		 8bd43a2dce [0]
b8c969e769[0]
4faab4a9f5[1]
b2ed41db60[0]
670955f966[0]
6d39f1a62e[0]		 WinXP 38 of 41 10:18:54 10:18:54 1 none none:none
none:none
ASM:Graph
none:none
none:none
none:none
 Stranik|
PEQuake|
Armadillo|
Armadillo|
Armadillo|
tElock|		 none
none
lines=608
none
none
none		 trace
trace
trace
trace
trace
trace
bd81d71c06
NEW		 1993ba73cd [0] WinXP 39 of 40 07:36:58 08:05:26 2 none none:none
 PolyEnE| none trace
176fe26a6e
NEW
1772d47c4c
NEW
298243013a
NEW
2ef9098242
NEW		 none[4]
8bd43a2dce[0]
b8c969e769[0]
de91d8b5d0[0]		 WinXP 30 of 33 20:43:13 20:43:13 1 none none:none
none:none
none:none
none:none
 PolyEnE|
Stranik|
PEQuake|
Armadillo|		 none
none
none
none		 trace
trace
trace
trace
88b3b7a353
NEW		 e8769ee902 [0] WinXP 0 of 0 07:44:06 07:44:06 1 none none:none
 StarForce| none trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 02:24:17 02:24:17 1 none ASM:Graph
 none|none 55% lines=59 trace
1e4f8f9259
NEW		 e73db583fd [0] WinXP 0 of 0 16:39:02 16:39:02 1 none none:none
 none|none none trace
2f6afffda4
NEW		 ede9ae4e6d [0] WinXP 0 of 0 19:51:42 19:51:42 1 none none:none
 PolyEnE| none trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 05:59:49 22:21:01 3 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace