Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


31 July 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
372b880eb1
NEW		 164314a8cc [0] WinXP 4 of 41 01:24:40 01:24:40 1 none none:none
 Armadillo| none trace
3ddfc7d4ba
NEW
d6d77f2c4c
NEW		 4545ccdc62 [0]
none [3]		 WinXP 13 of 41 10:17:58 10:17:58 1 none none:none
none:none
 StarForce|
StarForce|		 none
none		 trace
trace
73f1082158
NEW		 none[0] Win2K-f
WinXP		 0 of 32 03:13:49 22:22:59 6 none none:none
 Armadillo| 0% lines=90 trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 01:18:51 01:18:51 1 none none:none
 UPX| none trace
176f4e0237
NEW
25ffad6dae
NEW
852eec7620
NEW		 971b66b4c6 [0]
f7dee51c7c[0]
af9f5e5446[0]		 Win2K-f 12 of 40 03:23:50 03:23:50 1 none none:none
none:none
none:none
 none|none
FSG|
none|none		 none
none
none		 trace
trace
trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 03:13:49 23:14:28 16 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
176f4e0237
NEW
25ffad6dae
NEW
852eec7620
NEW
8a75955033
NEW
9276c8b36b
NEW		 971b66b4c6 [0]
f7dee51c7c[0]
af9f5e5446[0]
2bf3e548b9[0]
none [0]		 Win2K-f 28 of 32 03:23:50 03:23:50 1 none none:none
none:none
none:none
ASM:Graph
ASM:Graph
 none|none
FSG|
none|none
tElock|
Armadillo|		 47% none
none
none
lines=126
embedded dns
lines=81		 trace
trace
trace
trace
trace
67a66839f7
NEW		 7b1fc808a3 [0] WinXP
Win2K-f		 37 of 41 00:45:46 04:43:33 4 none none:none
 none|none none trace
5ba3d03fb4
NEW		 28efd36ea0 [0] Win2K-f 40 of 41 00:51:32 00:51:32 1 none none:none
 none|none none trace
18dfbbc85b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
6648e7022b
NEW
9857a367e2
NEW		 4f6fcecea3 [0]
c67adf46e2[0]
none [0]
0ad0f97bcc[0]
8d4e5ce4de[0]		 WinXP 13 of 41 06:47:22 06:47:22 1 none none:none
ASM:Graph
none:none
none:none
none:none
 UPX|
tElock|
Armadillo|
UPX|
ASProtect|		 none
lines=126
embedded dns
lines=91
none
none		 trace
trace
trace
trace
trace
ab0aea9e20
NEW		 67b22a134e [0] WinXP 38 of 41 00:56:04 00:56:04 1 none none:none
 none|none none trace
145269ffd8
NEW		 2f43eac0d3 [0] Win2K-f 38 of 41 02:17:44 02:17:44 1 none none:none
 none|none none trace
35673382d9
NEW		 none[4] WinXP 0 of 41 15:30:18 15:30:18 1 none none:none
 none|none none trace
986b59708d
NEW		 none[0] WinXP 29 of 29 08:32:28 08:32:28 1 none none:none
 PolyEnE| 100% lines=57 trace
66863cfb13
NEW
e8dfca0741
NEW		 fca240f318 [0]
20dfd2147c[0]		 Win2K-f 38 of 40 06:44:09 06:44:09 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
176f4e0237
NEW
25ffad6dae
NEW
852eec7620
NEW
8a75955033
NEW
9276c8b36b
NEW
a036b3aec2
NEW
c85632dd43
NEW		 971b66b4c6 [0]
f7dee51c7c[0]
af9f5e5446[0]
2bf3e548b9[0]
none [0]
none [4]
cc04264c03[0]		 Win2K-f 7 of 41 03:23:50 03:23:50 1 none none:none
none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
 none|none
FSG|
none|none
tElock|
Armadillo|
none|none
FASM|		 none
none
none
lines=126
embedded dns
lines=81
none
none		 trace
trace
trace
trace
trace
trace
trace
5c39773b13
NEW		 c64405f2e9 [0] WinXP 38 of 41 22:11:52 22:11:52 1 none none:none
 tElock| none trace
e8d4d8cde1
NEW		 none[0] WinXP
Win2K-f		 13 of 31 01:47:28 02:52:51 3 none none:none
 ASProtect| 63% lines=585
embedded dns		 trace
5c39773b13
NEW
a1acc403a2
NEW		 c64405f2e9 [0]
54ef26c2f9[0]		 WinXP 37 of 41 22:11:52 22:11:52 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
1a80f07e35
NEW		 48147ac266 [0] WinXP 39 of 41 13:12:25 13:12:25 1 none none:none
 StarForce| none trace
18dfbbc85b
NEW
533d15b5ce
NEW		 4f6fcecea3 [0]
c67adf46e2[0]		 WinXP 30 of 33 06:47:22 06:47:22 1 none none:none
ASM:Graph
 UPX|
tElock|		 96% none
lines=126
embedded dns		 trace
trace
38ed850a0e
NEW		 46990f37cd [0] WinXP 34 of 38 00:15:51 00:15:51 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
74b3d149e8
NEW		 cef0fa2981 [0] WinXP 39 of 40 13:04:00 13:27:50 2 none none:none
 PolyEnE| none trace
176f4e0237
NEW
25ffad6dae
NEW
852eec7620
NEW
8a75955033
NEW		 971b66b4c6 [0]
f7dee51c7c[0]
af9f5e5446[0]
2bf3e548b9[0]		 WinXP
Win2K-f		 29 of 32 01:24:40 03:23:50 2 none none:none
none:none
none:none
ASM:Graph
 none|none
FSG|
none|none
tElock|		 96% none
none
none
lines=126
embedded dns		 trace
trace
trace
trace
e93110b1ff
NEW		 none[3] Win2K-f 7 of 41 11:36:51 11:36:51 1 none none:none
 none|none none trace
9716d7995a
NEW		 c3a5354b6f [0] WinXP 35 of 35 19:51:09 19:51:09 1 none none:none
 PolyEnE| none trace
176f4e0237
NEW
25ffad6dae
NEW
852eec7620
NEW
8a75955033
NEW
9276c8b36b
NEW
a036b3aec2
NEW		 971b66b4c6 [0]
f7dee51c7c[0]
af9f5e5446[0]
2bf3e548b9[0]
none [0]
none [4]		 Win2K-f 14 of 41 03:23:50 03:23:50 1 none none:none
none:none
none:none
ASM:Graph
ASM:Graph
none:none
 none|none
FSG|
none|none
tElock|
Armadillo|
none|none		 none
none
none
lines=126
embedded dns
lines=81
none		 trace
trace
trace
trace
trace
trace
3ed16ae12d
NEW		 none[0] Win2K-f 3 of 33 08:43:50 08:43:50 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
4ce3b4e76c
NEW		 24892d9819 [0] WinXP 38 of 41 02:29:40 02:29:40 1 none none:none
 FSG| none trace
176f4e0237
NEW
25ffad6dae
NEW		 971b66b4c6 [0]
f7dee51c7c[0]		 Win2K-f 26 of 41 03:23:50 03:23:50 1 none none:none
none:none
 none|none
FSG|		 none
none		 trace
trace
176f4e0237
NEW
25ffad6dae
NEW
852eec7620
NEW
8a75955033
NEW
9276c8b36b
NEW
a036b3aec2
NEW
c85632dd43
NEW
cc2f861b1c
NEW		 971b66b4c6 [0]
f7dee51c7c[0]
af9f5e5446[0]
2bf3e548b9[0]
none [0]
none [4]
cc04264c03[0]
cc2f861b1c[1]		 Win2K-f 0 of 36 03:23:50 03:23:50 1 none none:none
none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
ASM:Graph
 none|none
FSG|
none|none
tElock|
Armadillo|
none|none
FASM|
Armadillo|		 24% none
none
none
lines=126
embedded dns
lines=81
none
none
lines=211		 trace
trace
trace
trace
trace
trace
trace
trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 07:51:45 21:29:21 2 none none:none
 none|none 32% lines=61 trace
8906c0b009
NEW		 5c7db646fe [0] WinXP 38 of 41 00:59:27 00:59:27 1 none none:none
 none|none none trace
4cbbc9cdc3
NEW		 9b1bced683 [0] Win2K-f 34 of 39 18:42:37 18:42:37 1 none none:none
 Armadillo| none trace
35673382d9
NEW
38699582a6
NEW		 none[4]
none [4]		 WinXP 0 of 41 15:30:18 15:30:18 1 none none:none
none:none
 none|none
none|none		 none
none		 trace
trace
176f4e0237
NEW
25ffad6dae
NEW
852eec7620
NEW
8a75955033
NEW
9276c8b36b
NEW
a036b3aec2
NEW
c85632dd43
NEW
cc2f861b1c
NEW
d9ac68f184
NEW		 971b66b4c6 [0]
f7dee51c7c[0]
af9f5e5446[0]
2bf3e548b9[0]
none [0]
none [4]
cc04264c03[0]
cc2f861b1c[1]
none [3]		 Win2K-f 0 of 36 03:23:50 03:23:50 1 none none:none
none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
ASM:Graph
none:none
 none|none
FSG|
none|none
tElock|
Armadillo|
none|none
FASM|
Armadillo|
none|none		 none
none
none
lines=126
embedded dns
lines=81
none
none
lines=211
none		 trace
trace
trace
trace
trace
trace
trace
trace
trace
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 13:10:05 13:10:05 1 none ASM:Graph
 none|none 100% lines=61 trace
176f4e0237
NEW		 971b66b4c6 [0] Win2K-f 19 of 41 03:23:50 03:23:50 1 none none:none
 none|none none trace
18dfbbc85b
NEW		 4f6fcecea3 [0] WinXP 7 of 41 06:47:22 06:47:22 1 none none:none
 UPX| none trace
18dfbbc85b
NEW
533d15b5ce
NEW
58c343a8d8
NEW		 4f6fcecea3 [0]
c67adf46e2[0]
none [0]		 WinXP 28 of 33 06:47:22 06:47:22 1 none none:none
ASM:Graph
none:none
 UPX|
tElock|
Armadillo|		 0% none
lines=126
embedded dns
lines=91		 trace
trace
trace
18dfbbc85b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
6648e7022b
NEW		 4f6fcecea3 [0]
c67adf46e2[0]
none [0]
0ad0f97bcc[0]		 WinXP 28 of 41 06:47:22 06:47:22 1 none none:none
ASM:Graph
none:none
none:none
 UPX|
tElock|
Armadillo|
UPX|		 none
lines=126
embedded dns
lines=91
none		 trace
trace
trace
trace
176f4e0237
NEW
25ffad6dae
NEW
852eec7620
NEW
8a75955033
NEW
9276c8b36b
NEW
a036b3aec2
NEW
c85632dd43
NEW
cc2f861b1c
NEW
d9ac68f184
NEW
e66e21cf3e
NEW		 971b66b4c6 [0]
f7dee51c7c[0]
af9f5e5446[0]
2bf3e548b9[0]
none [0]
none [4]
cc04264c03[0]
cc2f861b1c[1]
none [3]
c71932d83a[0]		 Win2K-f 25 of 41 03:23:50 03:23:50 1 none none:none
none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
ASM:Graph
none:none
none:none
 none|none
FSG|
none|none
tElock|
Armadillo|
none|none
FASM|
Armadillo|
none|none
FASM|		 none
none
none
lines=126
embedded dns
lines=81
none
none
lines=211
none
none		 trace
trace
trace
trace
trace
trace
trace
trace
trace
trace
119ec42aa0
NEW		 fd3c61c261 [0] WinXP 40 of 41 12:26:24 12:26:24 1 none none:none
 PolyEnE| none trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 09:36:23 19:43:49 2 none none:none
 PolyEnE| 99% lines=68 trace
3ed16ae12d
NEW
79c01ec060
NEW		 none[0]
1bfd34056c[0]		 Win2K-f 33 of 33 08:43:50 08:43:50 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=64
embedded dns		 trace
trace
380fb4a6c3
NEW		 dbb35f3393 [0] WinXP 38 of 41 00:54:06 00:54:06 1 none none:none
 none|none none trace
4cbbc9cdc3
NEW
86d4950962
NEW		 9b1bced683 [0]
c78e30261c[0]		 Win2K-f 35 of 39 18:42:37 18:42:37 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
35673382d9
NEW
38699582a6
NEW
9654ee8d3b
NEW		 none[4]
none [4]
a746fc417d[0]		 WinXP 39 of 41 15:30:18 15:30:18 1 none none:none
none:none
none:none
 none|none
none|none
ASPack|		 none
none
none		 trace
trace
trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 04:34:19 08:10:08 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
18dfbbc85b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
6648e7022b
NEW
9857a367e2
NEW
cd88b89d5e
NEW		 4f6fcecea3 [0]
c67adf46e2[0]
none [0]
0ad0f97bcc[0]
8d4e5ce4de[0]
150e365b1e[0]		 WinXP 19 of 41 06:47:22 06:47:22 1 none none:none
ASM:Graph
none:none
none:none
none:none
none:none
 UPX|
tElock|
Armadillo|
UPX|
ASProtect|
UPX|		 none
lines=126
embedded dns
lines=91
none
none
none		 trace
trace
trace
trace
trace
trace
66863cfb13
NEW		 fca240f318 [0] Win2K-f 38 of 40 06:44:09 06:44:09 1 none none:none
 Armadillo| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 09:21:20 23:14:28 9 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
b8076e37ae
NEW		 52953fed05 [0] Win2K-f 28 of 41 19:17:48 19:17:48 1 none none:none
 StarForce| none trace
38ed850a0e
NEW
b9297745a1
NEW		 46990f37cd [0]
4294884d84[0]		 WinXP 35 of 38 00:15:51 00:15:51 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
3ddfc7d4ba
NEW		 4545ccdc62 [0] WinXP 40 of 41 10:17:58 10:17:58 1 none none:none
 StarForce| none trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 01:45:26 06:44:45 3 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace