Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


12 July 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
50f473a5fe
NEW		 none[4] WinXP 0 of 41 16:51:27 16:51:27 1 none none:none
 none|none none trace
1772d47c4c
NEW
298243013a
NEW
2fd99ca961
NEW
5df8069b2c
NEW
7bc8d57d8c
NEW
ba587fa75c
NEW		 8bd43a2dce [0]
b8c969e769[0]
1ad221dc34[0]
209464113c[0]
be025ab204[0]
ba587fa75c[1]		 WinXP 19 of 41 11:13:26 11:13:26 1 none none:none
none:none
none:none
none:none
none:none
ASM:Graph
 Stranik|
PEQuake|
StarForce|
none|none
none|none
Stranik|		 9% none
none
none
none
none
lines=0		 trace
trace
trace
trace
trace
trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 01:35:59 16:46:31 4 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
173232485c
NEW		 65a8f41baa [0] WinXP 40 of 41 22:02:18 22:02:18 1 none none:none
 PolyEnE| none trace
0658d04f28
NEW		 07f788a60e [0] WinXP 38 of 40 08:51:06 08:51:06 1 none none:none
 PolyEnE| none trace
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 01:35:59 20:37:10 10 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
8a75955033
NEW
9276c8b36b
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
2bf3e548b9[0]
none [0]		 Win2K-f 28 of 32 10:46:57 10:46:57 1 none none:none
none:none
none:none
ASM:Graph
ASM:Graph
 Stranik|
Xtreme-Pr|
none|none
tElock|
Armadillo|		 47% none
none
none
lines=126
embedded dns
lines=81		 trace
trace
trace
trace
trace
a8c1c0e956
NEW		 df796d44f5 [0] Win2K-f 4 of 41 21:36:04 21:36:04 1 none none:none
 StarForce| none trace
50f473a5fe
NEW
df17a625ee
NEW		 none[4]
none [0]		 WinXP 29 of 29 05:52:08 16:51:27 3 none none:none
none:none
 none|none
ASPack|		 72% none
lines=298
embedded dns		 trace
trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 WinXP 8 of 33 20:37:10 20:37:10 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
c05290bb06
NEW		 dddfe6a7fe [0] WinXP 0 of 0 04:24:02 04:24:02 1 none none:none
 PolyEnE| none trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
6c887ab06d
NEW
c3c69766b2
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
a0d5f064f8[0]
acdd4c83bd[0]		 Win2K-f 36 of 41 00:49:26 00:49:26 1 none none:none
none:none
none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
none|none
tElock|
Armadillo|		 none
none
none
none
none		 trace
trace
trace
trace
trace
0505ea7e51
NEW		 6fde8a0b6c [0] WinXP 39 of 41 01:38:55 01:38:55 1 none none:none
 PolyEnE| none trace
1772d47c4c
NEW
298243013a
NEW
2fd99ca961
NEW
5df8069b2c
NEW		 8bd43a2dce [0]
b8c969e769[0]
1ad221dc34[0]
209464113c[0]		 Win2K-f
WinXP		 11 of 41 00:49:26 11:13:26 6 none none:none
none:none
none:none
none:none
 Stranik|
PEQuake|
StarForce|
none|none		 none
none
none
none		 trace
trace
trace
trace
0ada72d805
NEW		 none[0] WinXP 29 of 29 10:25:01 10:25:01 1 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
32989f917c
NEW		 8772fbc6f6 [0] WinXP 40 of 41 04:40:24 04:40:24 1 none none:none
 PolyEnE| none trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
87bd0a062f
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
dc70d9623a[0]		 WinXP 30 of 33 08:44:57 08:44:57 1 none none:none
none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
none|none
Armadillo|		 none
none
none
none		 trace
trace
trace
trace
298243013a
NEW
7601d29070
NEW
91a724a238
NEW		 b8c969e769 [0]
34a67bb407[0]
504c125f39[0]		 Win2K-f
WinXP		 21 of 41 04:23:39 11:32:36 2 none none:none
none:none
none:none
 PEQuake|
tElock|
StarForce|		 none
none
none		 trace
trace
trace
533d15b5ce
NEW		 c67adf46e2 [0] Win2K-f 30 of 33 04:23:39 22:54:43 2 none ASM:Graph
 tElock| 96% lines=126
embedded dns		 trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 08:19:17 08:19:17 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
8a75955033
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
2bf3e548b9[0]		 Win2K-f 29 of 32 10:46:57 10:46:57 1 none none:none
none:none
none:none
ASM:Graph
 Stranik|
Xtreme-Pr|
none|none
tElock|		 96% none
none
none
lines=126
embedded dns		 trace
trace
trace
trace
1772d47c4c
NEW
244f946118
NEW		 8bd43a2dce [0]
none [4]		 Win2K-f
WinXP		 10 of 41 00:49:26 10:46:57 5 none none:none
none:none
 Stranik|
Xtreme-Pr|		 none
none		 trace
trace
4c3df24b32
NEW		 none[0] Win2K-f 0 of 33 19:36:36 19:36:36 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 11:15:02 11:15:02 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
6c887ab06d
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
a0d5f064f8[0]		 Win2K-f 38 of 41 00:49:26 00:49:26 1 none none:none
none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
none|none
tElock|		 none
none
none
none		 trace
trace
trace
trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 05:51:20 05:51:20 1 none none:none
 none|none 32% lines=61 trace
1772d47c4c
NEW		 8bd43a2dce [0] Win2K-f
WinXP		 18 of 41 00:49:26 11:13:26 6 none none:none
 Stranik| none trace
1772d47c4c
NEW
298243013a
NEW
2fd99ca961
NEW
5df8069b2c
NEW
7bc8d57d8c
NEW		 8bd43a2dce [0]
b8c969e769[0]
1ad221dc34[0]
209464113c[0]
be025ab204[0]		 WinXP 38 of 40 11:13:26 11:13:26 1 none none:none
none:none
none:none
none:none
none:none
 Stranik|
PEQuake|
StarForce|
none|none
none|none		 none
none
none
none
none		 trace
trace
trace
trace
trace
533d15b5ce
NEW
58c343a8d8
NEW		 c67adf46e2 [0]
none [0]		 Win2K-f 28 of 33 04:23:39 22:54:43 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=126
embedded dns
lines=91		 trace
trace
1772d47c4c
NEW
298243013a
NEW
2fd99ca961
NEW		 8bd43a2dce [0]
b8c969e769[0]
1ad221dc34[0]		 WinXP 19 of 41 11:13:26 11:13:26 1 none none:none
none:none
none:none
 Stranik|
PEQuake|
StarForce|		 none
none
none		 trace
trace
trace
298243013a
NEW		 b8c969e769 [0] WinXP 15 of 41 11:13:26 11:32:36 2 none none:none
 PEQuake| none trace
c4466f7a54
NEW		 cb6c5c5ff0 [0] WinXP 38 of 41 13:14:34 13:14:34 1 none none:none
 PolyEnE| none trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 15:57:13 15:57:13 1 none none:none
 PolyEnE| 99% lines=68 trace
29fffb4de5
NEW		 b6fbac850b [0] Win2K-f 35 of 41 05:01:55 05:01:55 1 none none:none
 StarForce| none trace
53bfe15e91
NEW
e1b108bd6d
NEW		 1473091351 [0]
fc828d3918[0]		 Win2K-f 38 of 41 20:18:16 20:18:16 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 lines=75
embedded dns
none		 trace
trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 15:21:12 15:21:12 1 none none:none
 none|none 33% lines=60 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 01:47:39 12:27:27 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
177beeaf73
NEW		 none[3] WinXP 3 of 41 15:22:03 15:22:03 1 none none:none
 StarForce| none trace
7587773eea
NEW		 none[3] Win2K-f 7 of 37 14:20:16 14:20:16 1 none none:none
 StarForce| none trace
298243013a
NEW
7601d29070
NEW		 b8c969e769 [0]
34a67bb407[0]		 WinXP 27 of 41 11:32:36 11:32:36 1 none none:none
none:none
 PEQuake|
tElock|		 none
none		 trace
trace
1772d47c4c
NEW
244f946118
NEW
5df8069b2c
NEW
87bd0a062f
NEW
c7d6018f97
NEW		 8bd43a2dce [0]
none [4]
209464113c[0]
dc70d9623a[0]
5c1d8bbd5b[0]		 WinXP 31 of 33 08:44:57 08:44:57 1 none none:none
none:none
none:none
none:none
none:none
 Stranik|
Xtreme-Pr|
none|none
Armadillo|
tElock|		 none
none
none
none
none		 trace
trace
trace
trace
trace
8fadd74f25
NEW		 none[4] WinXP 0 of 41 09:07:58 09:07:58 1 none none:none
 none|none none trace
4a8c393d7e
NEW		 678c362a37 [0] WinXP 38 of 41 04:55:49 04:55:49 1 none none:none
 StarForce| none trace
6529257178
NEW		 71e290f942 [0] WinXP 38 of 39 16:03:28 16:03:28 1 none none:none
 none|none none trace
69f8ccc92e
NEW		 e9613e6868 [0] WinXP 38 of 41 13:33:52 13:33:52 1 none none:none
 StarForce| none trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 03:16:46 20:19:13 3 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace
9bb68450cd
NEW		 c2d5ac2315 [0] WinXP 34 of 36 09:33:02 09:33:02 1 none ASM:Graph
 PolyEnE| 100% lines=73
embedded dns		 trace