Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


14 August 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 32 21:51:21 21:51:21 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 00:37:48 23:23:08 10 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
5354e986cd
NEW
85ea6d3345
NEW
8a75955033
NEW
9276c8b36b
NEW
92d5918f69
NEW		 55eb7e6494 [0]
dc3e68b034[0]
2bf3e548b9[0]
none [0]
8cfa5407d6[0]		 Win2K-f 34 of 41 21:09:52 21:09:52 1 none none:none
none:none
ASM:Graph
ASM:Graph
none:none
 PENinja|
Armadillo|
tElock|
Armadillo|
Armadillo|		 none
none
lines=126
embedded dns
lines=81
none		 trace
trace
trace
trace
trace
5354e986cd
NEW
85ea6d3345
NEW
8a75955033
NEW
9276c8b36b
NEW		 55eb7e6494 [0]
dc3e68b034[0]
2bf3e548b9[0]
none [0]		 Win2K-f 28 of 32 13:31:51 21:09:52 2 none none:none
none:none
ASM:Graph
ASM:Graph
 PENinja|
Armadillo|
tElock|
Armadillo|		 47% none
none
lines=126
embedded dns
lines=81		 trace
trace
trace
trace
67a66839f7
NEW		 7b1fc808a3 [0] WinXP 37 of 41 06:19:05 06:19:05 1 none none:none
 none|none none trace
5799ab6538
NEW		 2713679411 [0] Win2K-f 40 of 41 19:22:35 19:22:35 1 none none:none
 tElock| none trace
34cbe7a593
NEW
3e83a2d4d7
NEW		 d38cb78003 [0]
b97fd63d29[0]		 Win2K-f 38 of 41 05:16:03 05:16:03 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
5354e986cd
NEW
64f03d5b3e
NEW
66863cfb13
NEW
681e224c47
NEW
e8dfca0741
NEW		 55eb7e6494 [0]
53d5d57130[0]
fca240f318[0]
8cfa5407d6[0]
20dfd2147c[0]		 Win2K-f 38 of 40 23:02:48 23:02:48 1 none none:none
none:none
none:none
none:none
none:none
 PENinja|
Armadillo|
Armadillo|
Armadillo|
tElock|		 none
none
none
none
none		 trace
trace
trace
trace
trace
20152b563f
NEW		 57c9f8b23f [0] Win2K-f 26 of 41 13:31:51 13:31:51 1 none none:none
 Armadillo| none trace
09d6505627
NEW
4a4f3a228a
NEW		 5c860f7b2f [0]
c4a8e6eee5[0]		 WinXP 26 of 41 09:35:57 09:35:57 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
09d6505627
NEW		 5c860f7b2f [0] WinXP 33 of 35 09:35:57 09:35:57 1 none none:none
 tElock| none trace
47d3548e36
NEW
d8722af110
NEW		 ab13346633 [0]
ab30a55931[0]		 WinXP 36 of 40 13:59:58 13:59:58 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
20152b563f
NEW
5354e986cd
NEW
8a75955033
NEW
9276c8b36b
NEW
b921102e9c
NEW		 57c9f8b23f [0]
55eb7e6494[0]
2bf3e548b9[0]
none [0]
c4a8e6eee5[0]		 Win2K-f 26 of 41 13:31:51 13:31:51 1 none none:none
none:none
ASM:Graph
ASM:Graph
none:none
 Armadillo|
PENinja|
tElock|
Armadillo|
Armadillo|		 none
none
lines=126
embedded dns
lines=81
none		 trace
trace
trace
trace
trace
d42c1cc7c0
NEW		 none[0] WinXP 29 of 29 03:18:23 03:18:23 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
38ed850a0e
NEW		 46990f37cd [0] Win2K-f 34 of 38 04:58:19 04:58:19 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
1bb4b25c0e
NEW		 9293a2c3db [0] Win2K-f 28 of 41 02:28:51 02:28:51 1 none none:none
 StarForce| none trace
0393e25f86
NEW		 51aaf10e18 [0] WinXP 40 of 41 11:15:31 11:15:31 1 none none:none
 PolyEnE| none trace
36d16c0a7b
NEW		 5438f81d23 [0] WinXP 38 of 41 08:44:42 08:44:42 1 none none:none
 Armadillo| none trace
5354e986cd
NEW
85ea6d3345
NEW
8a75955033
NEW		 55eb7e6494 [0]
dc3e68b034[0]
2bf3e548b9[0]		 Win2K-f 29 of 32 13:31:51 21:09:52 2 none none:none
none:none
ASM:Graph
 PENinja|
Armadillo|
tElock|		 96% none
none
lines=126
embedded dns		 trace
trace
trace
f5114d3371
NEW		 330af0d74b [0] WinXP 36 of 39 05:12:40 05:12:40 1 none none:none
 StarForce| none trace
9716d7995a
NEW		 c3a5354b6f [0] WinXP 35 of 35 16:45:01 16:45:01 1 none none:none
 PolyEnE| none trace
5354e986cd
NEW
64f03d5b3e
NEW		 55eb7e6494 [0]
53d5d57130[0]		 Win2K-f 24 of 40 23:02:48 23:02:48 1 none none:none
none:none
 PENinja|
Armadillo|		 none
none		 trace
trace
5354e986cd
NEW
85ea6d3345
NEW		 55eb7e6494 [0]
dc3e68b034[0]		 Win2K-f 24 of 40 21:09:52 21:09:52 1 none none:none
none:none
 PENinja|
Armadillo|		 none
none		 trace
trace
ad9dd7baa3
NEW		 cf391299d5 [0] WinXP 41 of 41 23:40:16 23:40:16 1 none none:none
 PolyEnE| none trace
43b8f21924
NEW		 none[3] WinXP 32 of 41 16:35:30 16:35:30 1 none none:none
 none|none none trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 05:23:11 16:10:49 2 none none:none
 none|none 32% lines=61 trace
5354e986cd
NEW		 55eb7e6494 [0] WinXP
Win2K-f		 7 of 41 09:35:57 23:02:48 5 none none:none
 PENinja| none trace
5354e986cd
NEW
d7fed61ba4
NEW		 55eb7e6494 [0]
dc61698982[0]		 Win2K-f 13 of 41 21:49:05 21:49:05 1 none none:none
none:none
 PENinja|
tElock|		 none
none		 trace
trace
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 15:12:06 15:12:06 1 none ASM:Graph
 none|none 100% lines=61 trace
34cbe7a593
NEW		 d38cb78003 [0] Win2K-f 36 of 41 05:16:03 05:16:03 1 none none:none
 Armadillo| none trace
2d5fe9850a
NEW		 2233a191b2 [0] Win2K-f 39 of 41 08:01:23 08:01:23 1 none none:none
 tElock| none trace
09d6505627
NEW
4a4f3a228a
NEW
5354e986cd
NEW
6648e7022b
NEW		 5c860f7b2f [0]
c4a8e6eee5[0]
55eb7e6494[0]
0ad0f97bcc[0]		 WinXP 28 of 41 09:35:57 09:35:57 1 none none:none
none:none
none:none
none:none
 tElock|
Armadillo|
PENinja|
UPX|		 none
none
none
none		 trace
trace
trace
trace
09d6505627
NEW
4a4f3a228a
NEW
5354e986cd
NEW
6648e7022b
NEW
b5a49fc00d
NEW		 5c860f7b2f [0]
c4a8e6eee5[0]
55eb7e6494[0]
0ad0f97bcc[0]
1fa7b0ae52[0]		 WinXP 24 of 40 09:35:57 09:35:57 1 none none:none
none:none
none:none
none:none
none:none
 tElock|
Armadillo|
PENinja|
UPX|
Armadillo|		 none
none
none
none
none		 trace
trace
trace
trace
trace
47d3548e36
NEW		 ab13346633 [0] WinXP 37 of 41 13:59:58 13:59:58 1 none none:none
 Armadillo| none trace
119ec42aa0
NEW		 fd3c61c261 [0] WinXP 40 of 41 05:31:00 14:39:32 2 none none:none
 PolyEnE| none trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 07:56:58 13:10:25 3 none none:none
 PolyEnE| 99% lines=68 trace
eda3b7766c
NEW		 7556343561 [0] WinXP 40 of 41 09:42:52 15:51:44 2 none none:none
 PolyEnE| none trace
17028f1eda
NEW		 none[3] WinXP 31 of 32 09:54:46 09:54:46 1 none none:none
 tElock| none trace
5354e986cd
NEW
64f03d5b3e
NEW
66863cfb13
NEW
681e224c47
NEW		 55eb7e6494 [0]
53d5d57130[0]
fca240f318[0]
8cfa5407d6[0]		 Win2K-f 34 of 41 23:02:48 23:02:48 1 none none:none
none:none
none:none
none:none
 PENinja|
Armadillo|
Armadillo|
Armadillo|		 none
none
none
none		 trace
trace
trace
trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 23:23:08 23:23:08 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
5354e986cd
NEW
64f03d5b3e
NEW
66863cfb13
NEW		 55eb7e6494 [0]
53d5d57130[0]
fca240f318[0]		 Win2K-f 38 of 40 23:02:48 23:02:48 1 none none:none
none:none
none:none
 PENinja|
Armadillo|
Armadillo|		 none
none
none		 trace
trace
trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 33 00:37:48 21:46:42 7 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
7587773eea
NEW		 none[3] Win2K-f 7 of 37 21:50:03 21:50:03 1 none none:none
 StarForce| none trace
09d6505627
NEW
4a4f3a228a
NEW
5354e986cd
NEW
6648e7022b
NEW
b5a49fc00d
NEW
cd4818c3e5
NEW		 5c860f7b2f [0]
c4a8e6eee5[0]
55eb7e6494[0]
0ad0f97bcc[0]
1fa7b0ae52[0]
669739c02a[0]		 WinXP 36 of 41 09:35:57 09:35:57 1 none none:none
none:none
none:none
none:none
none:none
none:none
 tElock|
Armadillo|
PENinja|
UPX|
Armadillo|
Armadillo|		 none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
c4c5a56ffe
NEW		 8bef2f9170 [0] WinXP 11 of 36 02:12:17 02:12:17 1 none none:none
 StarForce| none trace
38ed850a0e
NEW
b9297745a1
NEW		 46990f37cd [0]
4294884d84[0]		 Win2K-f 35 of 38 04:58:19 04:58:19 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 17:39:29 17:39:29 1 none ASM:Graph
 none|none 55% lines=59 trace
2d5fe9850a
NEW
63b64adf8b
NEW		 2233a191b2 [0]
b4e67ccf8a[0]		 Win2K-f 38 of 41 08:01:23 08:01:23 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
5799ab6538
NEW
f38e8d97da
NEW		 2713679411 [0]
83f1400243[0]		 Win2K-f 39 of 41 19:22:35 19:22:35 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 04:52:28 04:52:28 1 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace