Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


13 July 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 14:14:42 14:14:42 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
168aab35a3
NEW
1c3b65d074
NEW
667f0c59f3
NEW		 60b730b97e [0]
9b65f560ef[0]
8fe2be2095[0]		 WinXP 31 of 33 21:43:33 21:43:33 1 none ASM:Graph
none:none
ASM:Graph
 tElock|
none|none
Armadillo|		 0% lines=120
embedded dns
none
lines=91		 trace
trace
trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 11:01:01 21:17:44 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
1fa62445aa
NEW
963d5f92ac
NEW		 1fe0ba5b26 [0]
b851ccde4f[0]		 Win2K-f 32 of 36 14:07:16 14:07:16 1 none none:none
none:none
 tElock|
FASM|		 none
none		 trace
trace
1fa62445aa
NEW		 1fe0ba5b26 [0] Win2K-f 34 of 36 14:07:16 14:07:16 1 none none:none
 tElock| none trace
0658d04f28
NEW		 07f788a60e [0] WinXP 38 of 40 10:29:10 10:29:10 1 none none:none
 PolyEnE| none trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 04:49:52 21:46:12 7 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
a8c1c0e956
NEW		 df796d44f5 [0] Win2K-f 4 of 41 19:07:44 19:07:44 1 none none:none
 StarForce| none trace
289f5b8ec0
NEW
6bb0a5c719
NEW		 f9eb6c381d [0]
022947ce3d[0]		 WinXP 39 of 41 13:04:59 13:04:59 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
34cbe7a593
NEW		 d38cb78003 [0] WinXP 36 of 41 20:22:45 20:22:45 1 none none:none
 Armadillo| none trace
34cbe7a593
NEW
3e83a2d4d7
NEW		 d38cb78003 [0]
b97fd63d29[0]		 WinXP 38 of 41 20:22:45 20:22:45 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 04:49:52 04:49:52 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
986b59708d
NEW		 none[0] WinXP 29 of 29 07:54:40 07:54:40 1 none none:none
 PolyEnE| 100% lines=57 trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 16:16:07 16:16:07 1 none none:none
 PolyEnE| 99% lines=68 trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 21:46:12 21:46:12 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
b46af1d7bc
NEW		 none[3] WinXP 9 of 41 22:50:29 22:50:29 1 none none:none
 none|none none trace
168aab35a3
NEW		 60b730b97e [0] WinXP 31 of 33 21:43:33 21:43:33 1 none ASM:Graph
 tElock| 95% lines=120
embedded dns		 trace
3842e66ff7
NEW		 fc7c8aaf10 [0] WinXP 40 of 41 00:37:51 00:37:51 1 none none:none
 EXECrypto| none trace
289f5b8ec0
NEW		 f9eb6c381d [0] WinXP 37 of 40 13:04:59 13:04:59 1 none none:none
 Armadillo| none trace
1a76ee47c1
NEW		 8ef942208b [0] WinXP 36 of 40 19:13:58 19:13:58 1 none none:none
 Armadillo| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 11:24:22 20:17:24 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
168aab35a3
NEW
1c3b65d074
NEW		 60b730b97e [0]
9b65f560ef[0]		 WinXP 9 of 41 21:43:33 21:43:33 1 none ASM:Graph
none:none
 tElock|
none|none		 lines=120
embedded dns
none		 trace
trace
ab5e47bf8d
NEW		 67fb5eff61 [0] WinXP 29 of 29 10:33:12 10:33:12 1 none none:none
 ASPack| none trace
1a76ee47c1
NEW
78834f5ab6
NEW		 8ef942208b [0]
2e416b0e36[0]		 WinXP 37 of 40 19:13:58 19:13:58 1 none none:none
ASM:Graph
 Armadillo|
tElock|		 96% none
lines=64
embedded dns		 trace
trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 16:37:02 16:37:02 1 none ASM:Graph
 none|none 55% lines=59 trace
1fa62445aa
NEW
963d5f92ac
NEW
f839bf64f0
NEW		 1fe0ba5b26 [0]
b851ccde4f[0]
8716afcbbb[0]		 Win2K-f 8 of 41 14:07:16 14:07:16 1 none none:none
none:none
none:none
 tElock|
FASM|
ASProtect|		 none
none
none		 trace
trace
trace
85aa779737
NEW		 ccdaedd45c [0] WinXP 39 of 41 05:25:45 05:25:45 1 none none:none
 PeCompact| none trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 06:08:33 18:02:55 2 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace