Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


13 August 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 04:39:41 14:17:11 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 10:06:21 10:06:21 1 none none:none
 UPX| none trace
18dfbbc85b
NEW
5354e986cd
NEW
574fe82ce3
NEW
6648e7022b
NEW
95d0f82a9b
NEW		 4f6fcecea3 [0]
55eb7e6494[0]
99a500f47b[0]
0ad0f97bcc[0]
4ff81f1a63[0]		 Win2K-f 38 of 41 06:25:45 06:25:45 1 none none:none
none:none
none:none
none:none
none:none
 UPX|
PENinja|
PolyEnE|
UPX|
Armadillo|		 none
none
none
none
none		 trace
trace
trace
trace
trace
07fabc79ef
NEW
53bfe15e91
NEW		 none[0]
1473091351[0]		 Win2K-f
WinXP		 33 of 33 04:20:50 18:30:07 10 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=75
embedded dns		 trace
trace
07fabc79ef
NEW		 none[0] WinXP 0 of 32 18:30:07 18:30:07 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
18dfbbc85b
NEW
5354e986cd
NEW
574fe82ce3
NEW
6648e7022b
NEW
95d0f82a9b
NEW
9857a367e2
NEW		 4f6fcecea3 [0]
55eb7e6494[0]
99a500f47b[0]
0ad0f97bcc[0]
4ff81f1a63[0]
8d4e5ce4de[0]		 Win2K-f 13 of 41 06:25:45 06:25:45 1 none none:none
none:none
none:none
none:none
none:none
none:none
 UPX|
PENinja|
PolyEnE|
UPX|
Armadillo|
ASProtect|		 none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
18dfbbc85b
NEW
2e4a7c4e94
NEW
36b2aae01e
NEW
5354e986cd
NEW
99b248336f
NEW
9d677c3f70
NEW
cfcdd90ac1
NEW		 4f6fcecea3 [0]
9c3a214ff5[0]
a4b7eefc40[0]
55eb7e6494[0]
c64bd1a776[0]
77e75ff10f[0]
2f95782b9b[0]		 Win2K-f 16 of 41 00:51:37 00:51:37 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
 UPX|
ASPack|
StarForce|
PENinja|
Armadillo|
tElock|
StarForce|		 none
none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
trace
5354e986cd
NEW
d28f46aa2b
NEW		 55eb7e6494 [0]
47edcab014[0]		 Win2K-f 1 of 41 06:25:45 06:42:47 2 none none:none
none:none
 PENinja|
StarForce|		 none
none		 trace
trace
18dfbbc85b
NEW
1ead23128e
NEW
4d07ee2598
NEW		 4f6fcecea3 [0]
db9082e878[0]
9c3a214ff5[0]		 WinXP 26 of 41 19:57:13 19:57:13 1 none none:none
none:none
none:none
 UPX|
tElock|
Armadillo|		 none
none
none		 trace
trace
trace
168aab35a3
NEW		 60b730b97e [0] Win2K-f 31 of 33 21:56:14 21:56:14 1 none ASM:Graph
 tElock| 95% lines=120
embedded dns		 trace
168aab35a3
NEW
36b2aae01e
NEW
5354e986cd
NEW
667f0c59f3
NEW
78282818c8
NEW		 60b730b97e [0]
a4b7eefc40[0]
55eb7e6494[0]
8fe2be2095[0]
8ca8103f06[0]		 Win2K-f 20 of 41 21:56:14 21:56:14 1 none ASM:Graph
none:none
none:none
ASM:Graph
none:none
 tElock|
StarForce|
PENinja|
Armadillo|
tElock|		 lines=120
embedded dns
none
none
lines=91
none		 trace
trace
trace
trace
trace
18dfbbc85b
NEW
1ead23128e
NEW		 4f6fcecea3 [0]
db9082e878[0]		 WinXP 20 of 41 19:57:13 19:57:13 1 none none:none
none:none
 UPX|
tElock|		 none
none		 trace
trace
d5921904f9
NEW		 8526f07834 [0] WinXP 40 of 41 16:02:22 16:02:22 1 none none:none
 PolyEnE| none trace
18dfbbc85b
NEW
1ead23128e
NEW
4d07ee2598
NEW
533d15b5ce
NEW		 4f6fcecea3 [0]
db9082e878[0]
9c3a214ff5[0]
c67adf46e2[0]		 WinXP 30 of 33 01:45:50 19:57:13 2 none none:none
none:none
none:none
ASM:Graph
 UPX|
tElock|
Armadillo|
tElock|		 96% none
none
none
lines=126
embedded dns		 trace
trace
trace
trace
325cdc4edb
NEW
533d15b5ce
NEW
5354e986cd
NEW
58c343a8d8
NEW
cf0dff3130
NEW		 8650c0e241 [0]
c67adf46e2[0]
55eb7e6494[0]
none [0]
9c3a214ff5[0]		 WinXP 26 of 41 01:45:50 01:45:50 1 none none:none
ASM:Graph
none:none
none:none
none:none
 StarForce|
tElock|
PENinja|
Armadillo|
ASPack|		 none
lines=126
embedded dns
none
lines=91
none		 trace
trace
trace
trace
trace
18dfbbc85b
NEW
2e4a7c4e94
NEW
36b2aae01e
NEW
5354e986cd
NEW
99b248336f
NEW		 4f6fcecea3 [0]
9c3a214ff5[0]
a4b7eefc40[0]
55eb7e6494[0]
c64bd1a776[0]		 Win2K-f 34 of 36 00:51:37 00:51:37 1 none none:none
none:none
none:none
none:none
none:none
 UPX|
ASPack|
StarForce|
PENinja|
Armadillo|		 none
none
none
none
none		 trace
trace
trace
trace
trace
524bc0f75c
NEW		 d3e9510bb3 [0] WinXP 32 of 38 03:29:39 03:29:39 1 none none:none
 PENinja S| none trace
325cdc4edb
NEW		 8650c0e241 [0] WinXP 16 of 41 01:45:50 01:45:50 1 none none:none
 StarForce| none trace
eaa0c6f82c
NEW
fc493d3732
NEW		 61fd82b754 [0]
16e365df5b[0]		 Win2K-f 39 of 40 03:10:38 03:10:38 1 none none:none
none:none
 Armadillo|
PolyEnE|		 none
none		 trace
trace
3ed16ae12d
NEW		 none[0] Win2K-f 3 of 33 02:24:59 02:24:59 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 08:21:21 18:59:15 2 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
168aab35a3
NEW
36b2aae01e
NEW
5354e986cd
NEW
667f0c59f3
NEW		 60b730b97e [0]
a4b7eefc40[0]
55eb7e6494[0]
8fe2be2095[0]		 Win2K-f 31 of 33 21:56:14 21:56:14 1 none ASM:Graph
none:none
none:none
ASM:Graph
 tElock|
StarForce|
PENinja|
Armadillo|		 0% lines=120
embedded dns
none
none
lines=91		 trace
trace
trace
trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 22:40:19 22:40:19 1 none none:none
 none|none 32% lines=61 trace
168aab35a3
NEW
36b2aae01e
NEW
5354e986cd
NEW		 60b730b97e [0]
a4b7eefc40[0]
55eb7e6494[0]		 Win2K-f
WinXP		 7 of 41 00:51:37 21:56:14 6 none ASM:Graph
none:none
none:none
 tElock|
StarForce|
PENinja|		 lines=120
embedded dns
none
none		 trace
trace
trace
18dfbbc85b
NEW
2e4a7c4e94
NEW		 4f6fcecea3 [0]
9c3a214ff5[0]		 Win2K-f 26 of 41 00:51:37 00:51:37 1 none none:none
none:none
 UPX|
ASPack|		 none
none		 trace
trace
168aab35a3
NEW
36b2aae01e
NEW		 60b730b97e [0]
a4b7eefc40[0]		 Win2K-f 17 of 41 00:51:37 21:56:14 2 none ASM:Graph
none:none
 tElock|
StarForce|		 lines=120
embedded dns
none		 trace
trace
18dfbbc85b
NEW		 4f6fcecea3 [0] Win2K-f
WinXP		 7 of 41 00:51:37 19:57:13 3 none none:none
 UPX| none trace
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 02:51:38 02:51:38 1 none ASM:Graph
 none|none 100% lines=61 trace
18dfbbc85b
NEW
1ead23128e
NEW
4d07ee2598
NEW
533d15b5ce
NEW
5354e986cd
NEW
58c343a8d8
NEW		 4f6fcecea3 [0]
db9082e878[0]
9c3a214ff5[0]
c67adf46e2[0]
55eb7e6494[0]
none [0]		 WinXP 28 of 33 01:45:50 19:57:13 2 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
 UPX|
tElock|
Armadillo|
tElock|
PENinja|
Armadillo|		 0% none
none
none
lines=126
embedded dns
none
lines=91		 trace
trace
trace
trace
trace
trace
eaa0c6f82c
NEW		 61fd82b754 [0] Win2K-f 32 of 41 03:10:38 03:10:38 1 none none:none
 Armadillo| none trace
524bc0f75c
NEW
a0a15f5ebf
NEW		 d3e9510bb3 [0]
c506c7cc86[0]		 WinXP 37 of 40 03:29:39 03:29:39 1 none none:none
none:none
 PENinja S|
Mew|		 none
none		 trace
trace
18dfbbc85b
NEW
5354e986cd
NEW
574fe82ce3
NEW
6648e7022b
NEW		 4f6fcecea3 [0]
55eb7e6494[0]
99a500f47b[0]
0ad0f97bcc[0]		 Win2K-f 28 of 41 06:25:45 06:25:45 1 none none:none
none:none
none:none
none:none
 UPX|
PENinja|
PolyEnE|
UPX|		 none
none
none
none		 trace
trace
trace
trace
18dfbbc85b
NEW
5354e986cd
NEW
574fe82ce3
NEW		 4f6fcecea3 [0]
55eb7e6494[0]
99a500f47b[0]		 Win2K-f 37 of 41 06:25:45 06:25:45 1 none none:none
none:none
none:none
 UPX|
PENinja|
PolyEnE|		 none
none
none		 trace
trace
trace
17028f1eda
NEW		 none[3] WinXP 31 of 32 10:35:26 10:35:26 1 none none:none
 tElock| none trace
3ed16ae12d
NEW
79c01ec060
NEW		 none[0]
1bfd34056c[0]		 Win2K-f 33 of 33 02:24:59 02:24:59 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=64
embedded dns		 trace
trace
2a3036afb7
NEW		 79a17e6e18 [0] WinXP 38 of 41 17:52:09 17:52:09 1 none none:none
 none|none none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 07:26:58 07:26:58 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
18dfbbc85b
NEW
5354e986cd
NEW
574fe82ce3
NEW
6648e7022b
NEW
95d0f82a9b
NEW
9857a367e2
NEW
cd88b89d5e
NEW		 4f6fcecea3 [0]
55eb7e6494[0]
99a500f47b[0]
0ad0f97bcc[0]
4ff81f1a63[0]
8d4e5ce4de[0]
150e365b1e[0]		 Win2K-f 19 of 41 06:25:45 06:25:45 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
 UPX|
PENinja|
PolyEnE|
UPX|
Armadillo|
ASProtect|
UPX|		 none
none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
trace
168aab35a3
NEW
36b2aae01e
NEW
5354e986cd
NEW
667f0c59f3
NEW
78282818c8
NEW
97fed26b5c
NEW		 60b730b97e [0]
a4b7eefc40[0]
55eb7e6494[0]
8fe2be2095[0]
8ca8103f06[0]
9c3a214ff5[0]		 Win2K-f 25 of 40 21:56:14 21:56:14 1 none ASM:Graph
none:none
none:none
ASM:Graph
none:none
none:none
 tElock|
StarForce|
PENinja|
Armadillo|
tElock|
Armadillo|		 lines=120
embedded dns
none
none
lines=91
none
none		 trace
trace
trace
trace
trace
trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 18:55:33 18:55:33 1 none none:none
 none|none 33% lines=60 trace
2e45ae247e
NEW		 36aa8cd03d [0] Win2K-f 0 of 33 06:00:14 06:00:14 1 none none:none
 Armadillo| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 04:20:50 17:23:03 4 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
b8076e37ae
NEW		 52953fed05 [0] WinXP 28 of 41 20:44:31 20:44:31 1 none none:none
 StarForce| none trace
a92e3f8fc8
NEW		 none[0] WinXP 26 of 28 11:30:46 11:30:46 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 03:46:24 03:46:24 1 none ASM:Graph
 none|none 55% lines=59 trace
a0139d7ad8
NEW		 none[0] WinXP 29 of 29 19:39:07 19:39:07 1 none none:none
 PolyEnE| 99% lines=68 trace
18dfbbc85b
NEW
2e4a7c4e94
NEW
36b2aae01e
NEW
5354e986cd
NEW
99b248336f
NEW
9d677c3f70
NEW		 4f6fcecea3 [0]
9c3a214ff5[0]
a4b7eefc40[0]
55eb7e6494[0]
c64bd1a776[0]
77e75ff10f[0]		 Win2K-f 29 of 32 00:51:37 00:51:37 1 none none:none
none:none
none:none
none:none
none:none
none:none
 UPX|
ASPack|
StarForce|
PENinja|
Armadillo|
tElock|		 none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace