Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


19 August 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
46414f5b59
NEW		 93d8800aec [0] WinXP 39 of 41 03:33:57 03:33:57 1 none none:none
 ASPack| none trace
47d76e8dce
NEW		 457779e597 [0] WinXP
Win2K-f		 25 of 41 13:18:24 20:27:12 2 none none:none
 Neolite| none trace
4e94a1a314
NEW		 b34f7d40bd [0] WinXP 40 of 41 07:08:51 07:08:51 1 none none:none
 PolyEnE| none trace
c3be1629e5
NEW		 5b893564fb [0] WinXP 40 of 41 11:35:05 11:35:05 1 none none:none
 PolyEnE| none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 01:46:28 10:29:09 4 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
5354e986cd
NEW
5e35242196
NEW
6d3f17a608
NEW
f1b692ebfc
NEW		 55eb7e6494 [0]
be5536a4a0[0]
8cfa5407d6[0]
9883e831ff[0]		 WinXP 19 of 41 20:29:24 20:29:24 1 none none:none
none:none
none:none
none:none
 PENinja|
none|none
ASPack|
Obsidium|		 none
none
none
none		 trace
trace
trace
trace
47d76e8dce
NEW
524bc0f75c
NEW
820b27d4c6
NEW		 457779e597 [0]
d3e9510bb3[0]
1102de0215[0]		 WinXP 38 of 41 13:18:24 13:18:24 1 none none:none
none:none
none:none
 Neolite|
PENinja S|
Armadillo|		 none
none
none		 trace
trace
trace
9276c8b36b
NEW
a837b5c1fd
NEW		 none[0]
none [3]		 WinXP 18 of 41 19:01:43 19:01:43 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 07:53:43 21:22:08 6 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
9276c8b36b
NEW		 none[0] WinXP 28 of 32 19:01:43 19:01:43 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
b693a4d00a
NEW		 b693a4d00a [1] WinXP 34 of 41 07:20:21 07:20:21 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
bb7681eca8
NEW		 none[3] WinXP 32 of 32 11:47:52 11:47:52 1 none none:none
 tElock| none trace
f54691063f
NEW		 6039c698cd [0] WinXP 37 of 40 18:55:21 18:55:21 1 none ASM:Graph
 none|none 55% lines=59 trace
5354e986cd
NEW
5e35242196
NEW
6d3f17a608
NEW		 55eb7e6494 [0]
be5536a4a0[0]
8cfa5407d6[0]		 WinXP 33 of 41 20:29:24 20:29:24 1 none none:none
none:none
none:none
 PENinja|
none|none
ASPack|		 none
none
none		 trace
trace
trace
de2a8e3f8e
NEW		 032d753367 [0] Win2K-f 27 of 41 15:16:29 15:16:29 1 none none:none
 PENinja S| none trace
53dfd10e91
NEW		 48915ad1fe [0] WinXP 38 of 39 13:12:01 13:12:01 1 none none:none
 PolyEnE| none trace
21aeb3c922
NEW		 93e24e62a9 [0] WinXP 32 of 41 05:11:17 05:11:17 1 none none:none
 ASPack| none trace
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 17:19:08 17:40:31 2 none none:none
 PolyEnE| none trace
5c39773b13
NEW		 c64405f2e9 [0] Win2K-f 38 of 41 15:52:07 15:52:07 1 none none:none
 tElock| none trace
47d3548e36
NEW
d8722af110
NEW		 ab13346633 [0]
ab30a55931[0]		 Win2K-f 36 of 40 07:50:18 07:50:18 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
e8d4d8cde1
NEW		 none[0] WinXP 13 of 31 23:45:58 23:45:58 1 none none:none
 ASProtect| 63% lines=585
embedded dns		 trace
5354e986cd
NEW
5e35242196
NEW		 55eb7e6494 [0]
be5536a4a0[0]		 WinXP 37 of 41 20:29:24 20:29:24 1 none none:none
none:none
 PENinja|
none|none		 none
none		 trace
trace
5c39773b13
NEW
a1acc403a2
NEW		 c64405f2e9 [0]
54ef26c2f9[0]		 Win2K-f 37 of 41 15:52:07 15:52:07 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
74b3d149e8
NEW		 cef0fa2981 [0] WinXP 39 of 40 09:14:21 09:14:21 1 none none:none
 PolyEnE| none trace
03f912899b
NEW		 none[0] WinXP 32 of 32 17:48:33 17:48:33 1 none none:none
 none|none 32% lines=64 trace
154e28f846
NEW		 4d85da80b1 [0] WinXP 40 of 41 14:45:34 14:45:34 1 none none:none
 none|none none trace
9716d7995a
NEW		 c3a5354b6f [0] WinXP 35 of 35 07:58:08 22:32:41 2 none none:none
 PolyEnE| none trace
47d76e8dce
NEW
524bc0f75c
NEW		 457779e597 [0]
d3e9510bb3[0]		 WinXP
Win2K-f		 32 of 38 13:18:24 20:27:12 2 none none:none
none:none
 Neolite|
PENinja S|		 none
none		 trace
trace
36e5a0310e
NEW		 4eda72bd91 [0] Win2K-f 35 of 40 08:35:43 08:35:43 1 none none:none
 StarForce| none trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 06:05:12 09:44:54 2 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
5354e986cd
NEW		 55eb7e6494 [0] WinXP 7 of 41 20:29:24 20:29:24 1 none none:none
 PENinja| none trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 17:06:41 17:06:41 1 none none:none
 none|none 32% lines=61 trace
824d6a706e
NEW		 a66fd13bcb [0] WinXP 40 of 40 18:12:57 18:12:57 1 none none:none
 PolyEnE| none trace
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 06:26:43 06:26:43 1 none ASM:Graph
 none|none 100% lines=61 trace
47d76e8dce
NEW
524bc0f75c
NEW
730bad1b41
NEW		 457779e597 [0]
d3e9510bb3[0]
0986ba3540[0]		 Win2K-f 41 of 41 20:27:12 20:27:12 1 none none:none
none:none
none:none
 Neolite|
PENinja S|
FSG|		 none
none
none		 trace
trace
trace
47d3548e36
NEW		 ab13346633 [0] Win2K-f 37 of 41 07:50:18 07:50:18 1 none none:none
 Armadillo| none trace
cdbb312d0a
NEW		 8050e5ba3e [0] WinXP 38 of 40 19:22:07 21:11:59 2 none none:none
 PolyEnE| none trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 23:52:56 23:52:56 1 none none:none
 PolyEnE| 99% lines=68 trace
14302579d2
NEW		 2d61d0464e [0] WinXP 40 of 41 23:15:27 23:15:27 1 none none:none
 PolyEnE| none trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 07:04:17 20:24:37 2 none none:none
 none|none 33% lines=60 trace
943521a3dd
NEW		 ae2b3cc87e [0] WinXP 40 of 41 16:12:52 16:12:52 1 none none:none
 PolyEnE| none trace
10318ada62
NEW		 a5b9f355da [0] WinXP 37 of 41 19:27:26 19:27:26 1 none none:none
 none|none none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 11:53:40 21:22:08 4 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
7587773eea
NEW		 none[3] Win2K-f 7 of 37 16:23:42 16:23:42 1 none none:none
 StarForce| none trace
5865b09945
NEW		 4d99f4784a [0] WinXP 36 of 38 05:31:10 05:31:10 1 none none:none
 PolyEnE| none trace
b062182bb1
NEW		 1fb7e59bf8 [0] WinXP 41 of 41 15:15:07 15:15:07 1 none none:none
 PolyEnE| none trace
db7ddb4fff
NEW		 dec3399fbb [0] WinXP 41 of 41 17:34:45 17:34:45 1 none none:none
 PENinja S| none trace
e4b069ac64
NEW		 5d97cec8e6 [0] Win2K-f 10 of 41 01:53:14 01:53:14 1 none none:none
 FSG| none trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 12:21:46 21:04:13 3 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace