Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


28 July 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
176f4e0237
NEW
1ced373622
NEW
6648e7022b
NEW
6f8772fb4c
NEW		 971b66b4c6 [0]
f7062938a9[0]
0ad0f97bcc[0]
72c4861af2[0]		 Win2K-f 27 of 41 20:44:39 20:44:39 1 none none:none
none:none
none:none
none:none
 none|none
Armadillo|
UPX|
UPX|		 none
none
none
none		 trace
trace
trace
trace
1e5df7ba74
NEW		 none[0] WinXP 31 of 32 13:00:38 13:00:38 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 03:00:55 12:26:14 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 20:14:54 20:14:54 1 none none:none
 UPX| none trace
bea8cb1865
NEW
fac78fde16
NEW		 154de51a66 [0]
882896ab05[0]		 WinXP 35 of 36 03:54:19 03:54:19 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=91
none		 trace
trace
2ef9098242
NEW
d789c8d157
NEW
e5176f95e0
NEW		 de91d8b5d0 [0]
5f6572479f[0]
none [4]		 WinXP 0 of 0 03:33:26 03:33:26 1 none none:none
none:none
none:none
 Armadillo|
PolyEnE|
StarForce|		 none
none
none		 trace
trace
trace
176f4e0237
NEW
1ced373622
NEW
6648e7022b
NEW
6f8772fb4c
NEW
852eec7620
NEW		 971b66b4c6 [0]
f7062938a9[0]
0ad0f97bcc[0]
72c4861af2[0]
af9f5e5446[0]		 Win2K-f 12 of 40 20:44:39 20:44:39 1 none none:none
none:none
none:none
none:none
none:none
 none|none
Armadillo|
UPX|
UPX|
none|none		 none
none
none
none
none		 trace
trace
trace
trace
trace
1fcc146d70
NEW		 none[0] WinXP 29 of 29 16:41:11 16:41:11 1 none none:none
 PolyEnE| 99% lines=68 trace
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 01:12:30 22:17:25 8 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
176f4e0237
NEW
1ced373622
NEW		 971b66b4c6 [0]
f7062938a9[0]		 Win2K-f 0 of 0 20:44:39 20:44:39 1 none none:none
none:none
 none|none
Armadillo|		 none
none		 trace
trace
0a0e2568a1
NEW
4e9277347e
NEW		 2ef6df3b9d [0]
4e9277347e[1]		 WinXP 0 of 0 07:24:45 07:24:45 1 none none:none
ASM:Graph
 Armadillo|
Armadillo|		 39% none
lines=80		 trace
trace
06a5e31b47
NEW		 25e6e52787 [0] WinXP 35 of 36 07:34:34 07:34:34 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
924746aba0
NEW		 629aee0783 [0] WinXP 39 of 41 06:56:52 06:56:52 1 none none:none
 PolyEnE| none trace
5c39773b13
NEW		 c64405f2e9 [0] WinXP 38 of 41 20:40:12 20:40:12 1 none none:none
 tElock| none trace
176f4e0237
NEW
1ced373622
NEW
6648e7022b
NEW
6f8772fb4c
NEW
852eec7620
NEW
87bd0a062f
NEW		 971b66b4c6 [0]
f7062938a9[0]
0ad0f97bcc[0]
72c4861af2[0]
af9f5e5446[0]
dc70d9623a[0]		 Win2K-f 30 of 33 20:44:39 20:44:39 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
Armadillo|
UPX|
UPX|
none|none
Armadillo|		 none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
38ed850a0e
NEW		 46990f37cd [0] Win2K-f 34 of 38 23:59:20 23:59:20 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
5c39773b13
NEW
a1acc403a2
NEW		 c64405f2e9 [0]
54ef26c2f9[0]		 WinXP 37 of 41 20:40:12 20:40:12 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
18dfbbc85b
NEW
533d15b5ce
NEW		 4f6fcecea3 [0]
c67adf46e2[0]		 Win2K-f 30 of 33 01:10:01 01:10:01 1 none none:none
ASM:Graph
 UPX|
tElock|		 96% none
lines=126
embedded dns		 trace
trace
5818023061
NEW		 none[0] WinXP 32 of 32 18:33:42 18:33:42 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 14:17:39 14:17:39 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
18dfbbc85b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
ce04925ba7
NEW		 4f6fcecea3 [0]
c67adf46e2[0]
none [0]
45ddd64f22[0]		 Win2K-f 0 of 0 01:10:01 01:10:01 1 none none:none
ASM:Graph
none:none
none:none
 UPX|
tElock|
Armadillo|
UPX|		 none
lines=126
embedded dns
lines=91
none		 trace
trace
trace
trace
4c696b083f
NEW		 5c0a6cbd1c [0] Win2K-f 0 of 0 09:44:55 09:44:55 1 none none:none
 tElock| none trace
176f4e0237
NEW
1ced373622
NEW
6648e7022b
NEW
6f8772fb4c
NEW
852eec7620
NEW
87bd0a062f
NEW
b6d8c740ba
NEW		 971b66b4c6 [0]
f7062938a9[0]
0ad0f97bcc[0]
72c4861af2[0]
af9f5e5446[0]
dc70d9623a[0]
2f4bf683ce[0]		 Win2K-f 26 of 40 20:44:39 20:44:39 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
Armadillo|
UPX|
UPX|
none|none
Armadillo|
Crypto-Lo|		 none
none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
trace
4c3df24b32
NEW		 none[0] WinXP 0 of 33 01:12:30 01:12:30 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 10:14:50 15:18:04 2 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 05:31:12 05:31:12 1 none none:none
 none|none 32% lines=61 trace
0a0e2568a1
NEW		 2ef6df3b9d [0] WinXP 0 of 0 07:24:45 07:24:45 1 none none:none
 Armadillo| none trace
176f4e0237
NEW		 971b66b4c6 [0] Win2K-f 19 of 41 20:44:39 20:44:39 1 none none:none
 none|none none trace
18dfbbc85b
NEW		 4f6fcecea3 [0] Win2K-f 7 of 41 01:10:01 01:10:01 1 none none:none
 UPX| none trace
bea8cb1865
NEW		 154de51a66 [0] WinXP 32 of 36 03:54:19 03:54:19 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 08:43:04 08:43:04 1 none ASM:Graph
 none|none 100% lines=61 trace
18dfbbc85b
NEW
533d15b5ce
NEW
58c343a8d8
NEW		 4f6fcecea3 [0]
c67adf46e2[0]
none [0]		 Win2K-f 28 of 33 01:10:01 01:10:01 1 none none:none
ASM:Graph
none:none
 UPX|
tElock|
Armadillo|		 0% none
lines=126
embedded dns
lines=91		 trace
trace
trace
176f4e0237
NEW
1ced373622
NEW
6648e7022b
NEW		 971b66b4c6 [0]
f7062938a9[0]
0ad0f97bcc[0]		 Win2K-f 28 of 41 20:44:39 20:44:39 1 none none:none
none:none
none:none
 none|none
Armadillo|
UPX|		 none
none
none		 trace
trace
trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 12:27:18 12:27:18 1 none none:none
 PolyEnE| 99% lines=68 trace
7c7d5bd68d
NEW		 25c505d17c [0] WinXP 0 of 0 06:51:20 06:51:20 1 none none:none
 StarForce| none trace
2ef9098242
NEW
d789c8d157
NEW		 de91d8b5d0 [0]
5f6572479f[0]		 WinXP 31 of 33 03:33:26 03:33:26 1 none none:none
none:none
 Armadillo|
PolyEnE|		 none
none		 trace
trace
c2a9450f0c
NEW		 650d1166d8 [0] Win2K-f 0 of 0 20:31:27 20:31:27 1 none none:none
 none|none none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 33 04:37:03 16:41:16 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 09:45:01 09:45:01 1 none none:none
 none|none 33% lines=60 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 01:53:50 22:17:25 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
10318ada62
NEW		 a5b9f355da [0] WinXP 37 of 41 00:06:19 00:06:19 1 none none:none
 none|none none trace
b27d73bfcb
NEW		 473c6454ce [0] WinXP 35 of 36 12:32:57 12:32:57 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
176f4e0237
NEW
1ced373622
NEW
6648e7022b
NEW
6f8772fb4c
NEW
852eec7620
NEW
87bd0a062f
NEW
b6d8c740ba
NEW
c7d6018f97
NEW		 971b66b4c6 [0]
f7062938a9[0]
0ad0f97bcc[0]
72c4861af2[0]
af9f5e5446[0]
dc70d9623a[0]
2f4bf683ce[0]
5c1d8bbd5b[0]		 Win2K-f 31 of 33 20:44:39 20:44:39 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
Armadillo|
UPX|
UPX|
none|none
Armadillo|
Crypto-Lo|
tElock|		 none
none
none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
trace
trace
b8076e37ae
NEW		 52953fed05 [0] WinXP 28 of 41 11:39:56 14:32:49 2 none none:none
 StarForce| none trace
38ed850a0e
NEW
b9297745a1
NEW		 46990f37cd [0]
4294884d84[0]		 Win2K-f 35 of 38 23:59:20 23:59:20 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
5865b09945
NEW		 4d99f4784a [0] WinXP 36 of 38 19:27:53 19:27:53 1 none none:none
 PolyEnE| none trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 21:30:46 21:30:46 1 none ASM:Graph
 none|none 55% lines=59 trace
2ef9098242
NEW		 de91d8b5d0 [0] WinXP 30 of 33 03:33:26 03:33:26 1 none none:none
 Armadillo| none trace
2f6afffda4
NEW		 ede9ae4e6d [0] WinXP 39 of 41 18:12:17 18:12:17 1 none none:none
 PolyEnE| none trace
9bb68450cd
NEW		 c2d5ac2315 [0] WinXP 34 of 36 12:20:50 12:20:50 1 none ASM:Graph
 PolyEnE| 100% lines=73
embedded dns		 trace