Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


11 July 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
3862324588
NEW		 none[3] Win2K-f 7 of 37 20:59:46 20:59:46 1 none none:none
 UPX| none trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
a50c054e50
NEW
f28964bd2f
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
d5f51c70ad[0]
a85e4a26c3[0]		 Win2K-f 39 of 40 10:08:32 10:08:32 1 none none:none
none:none
none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
none|none
tElock|
Armadillo|		 none
none
none
none
none		 trace
trace
trace
trace
trace
905fce8225
NEW		 none[4] WinXP 0 of 40 04:12:35 04:12:35 1 none none:none
 none|none none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 02:14:52 18:45:40 5 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 22:25:35 22:34:49 2 none none:none
 UPX| none trace
0658d04f28
NEW
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
624ac030e2
NEW		 07f788a60e [0]
8bd43a2dce[0]
none [4]
209464113c[0]
34a67bb407[0]		 WinXP 26 of 41 14:36:04 14:36:04 1 none none:none
none:none
none:none
none:none
none:none
 PolyEnE|
Stranik|
Xtreme-Pr|
none|none
tElock|		 none
none
none
none
none		 trace
trace
trace
trace
trace
0658d04f28
NEW		 07f788a60e [0] WinXP 38 of 40 14:36:04 14:36:04 1 none none:none
 PolyEnE| none trace
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 02:14:52 23:40:29 13 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
8a75955033
NEW
9276c8b36b
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
2bf3e548b9[0]
none [0]		 WinXP 28 of 32 11:24:42 11:24:42 1 none none:none
none:none
none:none
ASM:Graph
ASM:Graph
 Stranik|
Xtreme-Pr|
none|none
tElock|
Armadillo|		 47% none
none
none
lines=126
embedded dns
lines=81		 trace
trace
trace
trace
trace
b18e98061e
NEW		 cd3e986e95 [0] WinXP 5 of 41 22:04:28 22:04:28 1 none none:none
 StarForce| none trace
c0f08def5e
NEW		 c64727de72 [0] WinXP
Win2K-f		 0 of 41 21:35:34 22:46:46 5 none none:none
 StarForce| none trace
07fabc79ef
NEW		 none[0] Win2K-f 0 of 32 19:14:12 19:14:12 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
905fce8225
NEW
df17a625ee
NEW		 none[4]
none [0]		 WinXP 29 of 29 04:12:35 04:12:35 1 none none:none
none:none
 none|none
ASPack|		 72% none
lines=298
embedded dns		 trace
trace
06a5e31b47
NEW		 25e6e52787 [0] WinXP 35 of 36 05:06:50 05:06:50 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f
WinXP		 8 of 33 08:27:39 18:31:58 2 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
66863cfb13
NEW
e8dfca0741
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
fca240f318[0]
20dfd2147c[0]		 WinXP 38 of 40 08:50:29 08:50:29 1 none none:none
none:none
none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
none|none
Armadillo|
tElock|		 none
none
none
none
none		 trace
trace
trace
trace
trace
3a7b76a7cb
NEW
a249d609b4
NEW		 e6e0573464 [0]
b92719554f[0]		 WinXP 38 of 41 13:40:49 13:40:49 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
0658d04f28
NEW
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW		 07f788a60e [0]
8bd43a2dce[0]
none [4]
209464113c[0]		 WinXP
Win2K-f		 11 of 41 08:50:29 14:36:04 4 none none:none
none:none
none:none
none:none
 PolyEnE|
Stranik|
Xtreme-Pr|
none|none		 none
none
none
none		 trace
trace
trace
trace
96d089e522
NEW		 b9dd25bdfb [0] WinXP 34 of 36 18:00:08 18:00:08 1 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
3ce8dd4359
NEW		 cb80a979e8 [0] WinXP 20 of 29 12:26:50 12:26:50 1 none ASM:Graph
 ASPack| 0% lines=2 trace
0658d04f28
NEW
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
624ac030e2
NEW
91a724a238
NEW		 07f788a60e [0]
8bd43a2dce[0]
none [4]
209464113c[0]
34a67bb407[0]
504c125f39[0]		 WinXP 21 of 41 12:34:16 14:36:04 2 none none:none
none:none
none:none
none:none
none:none
none:none
 PolyEnE|
Stranik|
Xtreme-Pr|
none|none
tElock|
StarForce|		 none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
fc30b25c46
NEW		 fc30b25c46 [1] Win2K-f 4 of 41 04:57:52 04:57:52 1 none ASM:Graph
 FASM| 0% lines=40 trace
b625cc283c
NEW		 cd3e986e95 [0] WinXP 3 of 41 21:51:58 21:51:58 1 none none:none
 StarForce| none trace
1772d47c4c
NEW
244f946118
NEW
298243013a
NEW
6e2eaa0359
NEW
740e3bffe0
NEW		 8bd43a2dce [0]
none [4]
b8c969e769[0]
none [4]
421938c984[0]		 WinXP 24 of 33 12:34:16 12:34:16 1 none none:none
none:none
none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
PEQuake|
PolyEnE|
Armadillo|		 none
none
none
none
none		 trace
trace
trace
trace
trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
8a75955033
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
2bf3e548b9[0]		 WinXP 29 of 32 11:24:42 11:24:42 1 none none:none
none:none
none:none
ASM:Graph
 Stranik|
Xtreme-Pr|
none|none
tElock|		 96% none
none
none
lines=126
embedded dns		 trace
trace
trace
trace
73e6ee933b
NEW		 711b1f9e71 [0] Win2K-f 2 of 41 01:08:51 01:08:51 1 none none:none
 MingWin32| none trace
0658d04f28
NEW
1772d47c4c
NEW
244f946118
NEW		 07f788a60e [0]
8bd43a2dce[0]
none [4]		 WinXP
Win2K-f		 10 of 41 08:50:29 14:36:04 5 none none:none
none:none
none:none
 PolyEnE|
Stranik|
Xtreme-Pr|		 none
none
none		 trace
trace
trace
4c3df24b32
NEW		 none[0] WinXP 0 of 33 02:56:04 02:56:04 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
1b3feab839
NEW		 6c9f33ae69 [0] Win2K-f 4 of 41 21:33:18 21:33:18 1 none none:none
 StarForce| none trace
4ab228985c
NEW		 4ef788e7d5 [0] WinXP 35 of 40 19:43:20 19:43:20 1 none none:none
 PolyEnE| none trace
1772d47c4c
NEW
244f946118
NEW
298243013a
NEW
6e2eaa0359
NEW		 8bd43a2dce [0]
none [4]
b8c969e769[0]
none [4]		 WinXP 31 of 33 12:34:16 12:34:16 1 none none:none
none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
PEQuake|
PolyEnE|		 none
none
none
none		 trace
trace
trace
trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
a50c054e50
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
d5f51c70ad[0]		 Win2K-f 40 of 41 10:08:32 10:08:32 1 none none:none
none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
none|none
tElock|		 none
none
none
none		 trace
trace
trace
trace
b8e39f84c2
NEW		 51276fb869 [0] WinXP 37 of 39 14:15:58 14:15:58 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
0658d04f28
NEW
1772d47c4c
NEW		 07f788a60e [0]
8bd43a2dce[0]		 WinXP
Win2K-f		 18 of 41 08:50:29 14:36:04 5 none none:none
none:none
 PolyEnE|
Stranik|		 none
none		 trace
trace
1772d47c4c
NEW
244f946118
NEW
298243013a
NEW		 8bd43a2dce [0]
none [4]
b8c969e769[0]		 WinXP 15 of 41 12:34:16 12:34:16 1 none none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
PEQuake|		 none
none
none		 trace
trace
trace
17028f1eda
NEW		 none[3] WinXP 31 of 32 17:20:10 17:20:10 1 none none:none
 tElock| none trace
53bfe15e91
NEW
78db854b5b
NEW		 1473091351 [0]
209f80de5b[0]		 Win2K-f 0 of 41 23:34:15 23:34:15 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 lines=75
embedded dns
none		 trace
trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
66863cfb13
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
fca240f318[0]		 WinXP 38 of 40 08:50:29 08:50:29 1 none none:none
none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
none|none
Armadillo|		 none
none
none
none		 trace
trace
trace
trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 12:15:58 17:45:22 3 none none:none
 none|none 33% lines=60 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 04:38:52 23:40:29 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
3a7b76a7cb
NEW		 e6e0573464 [0] WinXP 39 of 40 13:40:49 13:40:49 1 none none:none
 tElock| none trace
041b82a1ae
NEW		 041b82a1ae [1] WinXP 7 of 41 22:31:37 22:31:37 1 none ASM:Graph
 StarForce| 25% lines=88 trace
ab5e47bf8d
NEW		 67fb5eff61 [0] WinXP 29 of 29 16:37:12 16:37:12 1 none none:none
 ASPack| none trace
b8076e37ae
NEW		 52953fed05 [0] Win2K-f 28 of 41 22:08:07 22:08:07 1 none none:none
 StarForce| none trace
bac17fb3bc
NEW		 fc2c78c658 [0] Win2K-f 27 of 40 21:36:03 21:36:03 1 none none:none
 PENinja S| none trace
b146ebb992
NEW		 cd3e986e95 [0] Win2K-f 4 of 41 22:07:12 22:07:12 1 none none:none
 StarForce| none trace
1772d47c4c
NEW
244f946118
NEW
298243013a
NEW
6e2eaa0359
NEW
740e3bffe0
NEW
91a724a238
NEW
c7781579ae
NEW		 8bd43a2dce [0]
none [4]
b8c969e769[0]
none [4]
421938c984[0]
504c125f39[0]
34a67bb407[0]		 WinXP 26 of 41 12:34:16 12:34:16 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
PEQuake|
PolyEnE|
Armadillo|
StarForce|
tElock|		 none
none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
trace
25377c183b
NEW		 86f99a7a67 [0] Win2K-f 36 of 40 22:54:05 22:54:05 1 none none:none
 StarForce| none trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 15:34:30 18:43:53 4 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace