Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


17 August 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 32 07:37:59 19:33:10 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 07:37:59 20:44:36 5 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
682a384fe9
NEW		 none[3] WinXP 31 of 41 02:02:42 02:02:42 1 none none:none
 none|none none trace
6a4845ca11
NEW		 c23d00870b [0] Win2K-f 0 of 0 05:07:45 05:07:45 1 none none:none
 tElock| none trace
09d6505627
NEW
7b1709ae4c
NEW		 5c860f7b2f [0]
ce1f86bde3[0]		 WinXP 33 of 35 08:53:17 08:53:17 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
f54691063f
NEW		 6039c698cd [0] WinXP 37 of 40 14:30:38 14:30:38 1 none ASM:Graph
 none|none 55% lines=59 trace
0aae26c5c4
NEW
c160425773
NEW		 ec71c253d1 [0]
a4d33c1e98[0]		 WinXP 39 of 41 11:43:19 11:43:19 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
95113ad527
NEW
e8233f9ef5
NEW		 87137f55fc [0]
85f9aa299c[0]		 Win2K-f 39 of 41 07:28:22 07:28:22 1 none none:none
none:none
 Free|
FSG|		 none
none		 trace
trace
c05290bb06
NEW		 dddfe6a7fe [0] WinXP 0 of 0 11:50:14 11:50:14 1 none none:none
 PolyEnE| none trace
8a48e5335b
NEW		 ba3ba6bf86 [0] WinXP 37 of 41 14:16:34 14:16:34 1 none none:none
 Armadillo| none trace
09d6505627
NEW		 5c860f7b2f [0] WinXP 33 of 35 08:53:17 08:53:17 1 none none:none
 tElock| none trace
168aab35a3
NEW		 60b730b97e [0] Win2K-f 31 of 33 05:51:53 05:51:53 1 none ASM:Graph
 tElock| 95% lines=120
embedded dns		 trace
47d3548e36
NEW
d8722af110
NEW		 ab13346633 [0]
ab30a55931[0]		 Win2K-f 36 of 40 22:23:29 22:23:29 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
0178563733
NEW
5354e986cd
NEW
87bd0a062f
NEW		 b5b79679dc [0]
55eb7e6494[0]
dc70d9623a[0]		 WinXP 30 of 33 00:15:28 00:15:28 1 none none:none
none:none
none:none
 ASPack|
PENinja|
Armadillo|		 none
none
none		 trace
trace
trace
533d15b5ce
NEW		 c67adf46e2 [0] WinXP 30 of 33 19:23:20 19:23:20 1 none ASM:Graph
 tElock| 96% lines=126
embedded dns		 trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 18:55:38 18:55:38 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
1bb4b25c0e
NEW		 9293a2c3db [0] WinXP 28 of 41 15:56:06 15:56:06 1 none none:none
 StarForce| none trace
5df4dc0652
NEW		 0a3c9b3b52 [0] WinXP 39 of 41 10:43:16 10:43:16 1 none none:none
 PolyEnE| none trace
524bc0f75c
NEW
a1684ab682
NEW		 d3e9510bb3 [0]
6d883c8d11[0]		 WinXP 27 of 32 04:50:33 04:50:33 1 none none:none
none:none
 PENinja S|
eXPressor|		 none
none		 trace
trace
6a4845ca11
NEW
ffafd341d9
NEW		 c23d00870b [0]
294fb27545[0]		 Win2K-f 38 of 40 05:07:45 05:07:45 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 0% none
lines=91		 trace
trace
01d5815222
NEW		 9a81965a5c [0] WinXP 39 of 41 17:43:35 17:43:35 1 none none:none
 PolyEnE| none trace
a992a13525
NEW		 none[3] Win2K-f 5 of 41 11:05:00 11:05:00 1 none none:none
 FASM| none trace
74b3d149e8
NEW		 cef0fa2981 [0] WinXP 39 of 40 22:26:39 22:26:39 1 none none:none
 PolyEnE| none trace
0aae26c5c4
NEW		 ec71c253d1 [0] WinXP 40 of 41 11:43:19 11:43:19 1 none none:none
 tElock| none trace
c392067a90
NEW		 d83160e550 [0] WinXP 35 of 36 10:31:02 10:31:02 1 none none:none
 PolyEnE| none trace
4e9fe62355
NEW		 a6117c4a34 [0] WinXP 29 of 38 19:15:13 19:15:13 1 none ASM:Graph
 Mew| 98% lines=425
embedded dns		 trace
361f33c5c4
NEW		 67879d1538 [0] WinXP 37 of 41 17:06:46 17:06:46 1 none none:none
 PolyEnE| none trace
e63f3be55b
NEW		 0a081f4200 [0] WinXP 40 of 41 03:19:48 03:19:48 1 none none:none
 PolyEnE| none trace
4e9fe62355
NEW
524bc0f75c
NEW		 a6117c4a34 [0]
d3e9510bb3[0]		 WinXP 32 of 38 00:12:20 19:15:13 3 none ASM:Graph
none:none
 Mew|
PENinja S|		 lines=425
embedded dns
none		 trace
trace
168aab35a3
NEW
667f0c59f3
NEW		 60b730b97e [0]
8fe2be2095[0]		 Win2K-f 31 of 33 05:51:53 05:51:53 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=120
embedded dns
lines=91		 trace
trace
0178563733
NEW
5354e986cd
NEW		 b5b79679dc [0]
55eb7e6494[0]		 WinXP 7 of 41 00:15:28 00:15:28 1 none none:none
none:none
 ASPack|
PENinja|		 none
none		 trace
trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 11:42:58 11:42:58 1 none none:none
 none|none 32% lines=61 trace
533d15b5ce
NEW
58c343a8d8
NEW		 c67adf46e2 [0]
none [0]		 WinXP 28 of 33 19:23:20 19:23:20 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=126
embedded dns
lines=91		 trace
trace
11e183286c
NEW		 8a7d445a4a [0] WinXP 39 of 41 13:42:55 13:42:55 1 none none:none
 none|none none trace
0178563733
NEW		 b5b79679dc [0] WinXP 26 of 41 00:15:28 00:15:28 1 none none:none
 ASPack| none trace
a0a15f5ebf
NEW		 c506c7cc86 [0] WinXP 37 of 40 00:12:20 12:11:28 2 none none:none
 Mew| none trace
47d3548e36
NEW		 ab13346633 [0] Win2K-f 37 of 41 22:23:29 22:23:29 1 none none:none
 Armadillo| none trace
119ec42aa0
NEW		 fd3c61c261 [0] WinXP 40 of 41 22:40:48 22:40:48 1 none none:none
 PolyEnE| none trace
17028f1eda
NEW		 none[3] WinXP 31 of 32 04:23:13 04:23:13 1 none none:none
 tElock| none trace
95113ad527
NEW		 87137f55fc [0] Win2K-f 1 of 41 07:28:22 07:28:22 1 none none:none
 Free| none trace
9654ee8d3b
NEW		 a746fc417d [0] WinXP 39 of 41 11:32:28 11:32:28 1 none none:none
 ASPack| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 11:40:24 20:44:36 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
0178563733
NEW
5354e986cd
NEW
87bd0a062f
NEW
bd42f36974
NEW
c7d6018f97
NEW		 b5b79679dc [0]
55eb7e6494[0]
dc70d9623a[0]
a7bcc4d8ca[0]
5c1d8bbd5b[0]		 WinXP 31 of 33 00:15:28 00:15:28 1 none none:none
none:none
none:none
none:none
none:none
 ASPack|
PENinja|
Armadillo|
Armadillo|
tElock|		 none
none
none
none
none		 trace
trace
trace
trace
trace
185d0c6d9f
NEW		 d524093add [0] WinXP 40 of 41 04:55:39 09:07:30 2 none none:none
 none|none none trace
0178563733
NEW
5354e986cd
NEW
87bd0a062f
NEW
bd42f36974
NEW		 b5b79679dc [0]
55eb7e6494[0]
dc70d9623a[0]
a7bcc4d8ca[0]		 WinXP 29 of 41 00:15:28 00:15:28 1 none none:none
none:none
none:none
none:none
 ASPack|
PENinja|
Armadillo|
Armadillo|		 none
none
none
none		 trace
trace
trace
trace
5865b09945
NEW		 4d99f4784a [0] WinXP 36 of 38 07:38:03 07:38:03 1 none none:none
 PolyEnE| none trace