Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



03 September 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
cd6e300a29
NEW
fba970f3f2 [0] Win2K-f 36 of 36 14:45:36 14:45:36 1 none none:none
StarForce| none trace
8d60c652a3
NEW
d41d8cd98f
NEW
89a3cd3a28 [0]
none [3]
WinXP 0 of 32 10:39:49 10:39:49 1 none none:none
ASM:Graph
ASProtect|
none|none
0% none
lines=0
trace
trace
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
WinXP 0 of 32 07:43:33 17:19:09 2 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
04ed4d2967
NEW
95ca496b37
NEW
e8aa304d1c [0]
none [none]
WinXP 19 of 41 15:56:46 17:28:40 2 none none:none
none:none
PolyEnE|
none|none
none
none
trace
none
53bfe15e91
NEW
1473091351 [0] WinXP
Win2K-f
33 of 33 07:43:33 17:19:09 4 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
8d60c652a3
NEW
89a3cd3a28 [0] WinXP 36 of 40 10:39:49 10:39:49 1 none none:none
ASProtect| none trace
954798cb43
NEW
none[none] WinXP 39 of 41 14:50:40 14:50:40 1 none none:none
none|none none none
b32ad614bc
NEW
none[none] WinXP 38 of 41 09:44:43 09:44:43 1 none none:none
none|none none none
5cb6f28328
NEW
ca4f0f9c18 [none] WinXP 39 of 41 06:45:09 06:45:09 1 none none:none
none|none none none
04ed4d2967
NEW
95ca496b37
NEW
dedb9bcef0
NEW
e8aa304d1c [0]
none [none]
23233d4cd8[0]
Win2K-f
WinXP
8 of 41 07:48:22 17:28:40 6 none none:none
none:none
none:none
PolyEnE|
none|none
Xtreme-Pr|
none
none
none
trace
none
trace
747580a7f5
NEW
none[none] WinXP 39 of 41 01:04:36 01:04:36 1 none none:none
none|none none none
533d15b5ce
NEW
c67adf46e2 [0] Win2K-f 30 of 33 07:48:22 07:48:22 1 none ASM:Graph
tElock| 96% lines=126
embedded dns
trace
6f495c833b
NEW
ffd498f313 [none] WinXP 39 of 41 05:58:10 05:58:10 1 none none:none
none|none none none
6a4845ca11
NEW
9ba2752f0b
NEW
dedb9bcef0
NEW
ffafd341d9
NEW
c23d00870b [0]
none [none]
23233d4cd8[0]
294fb27545[0]
Win2K-f 38 of 40 12:16:41 12:16:41 1 none none:none
none:none
none:none
ASM:Graph
tElock|
UPX|
Xtreme-Pr|
Armadillo|
0% none
none
none
lines=91
trace
none
trace
trace
18cab43993
NEW
9315527570 [0] WinXP 37 of 39 15:59:09 15:59:09 1 none none:none
none|none none trace
ced3a3b992
NEW
none[none] Win2K-f 39 of 41 02:56:04 02:56:04 1 none none:none
none|none none none
409ef22885
NEW
none[3] Win2K-f 2 of 37 06:34:43 06:34:43 1 none none:none
UPX| none trace
046e0eb5f5
NEW
7f89380d95 [0] WinXP 37 of 39 11:48:22 11:48:22 1 none none:none
none|none none trace
3a4b9202e3
NEW
none[none] Win2K-f 39 of 41 10:36:47 10:36:47 1 none none:none
none|none none none
3a80418418
NEW
none[none] Win2K-f 14 of 41 18:14:12 18:14:12 1 none none:none
none|none none none
e25390be6c
NEW
none[none] WinXP 38 of 41 03:27:59 03:27:59 1 none none:none
none|none none none
0cf4c38ae2
NEW
82bf36e112 [0] Win2K-f 36 of 40 06:39:53 06:39:53 1 none none:none
none|none none trace
1baff03987
NEW
14927e172a [0] WinXP 34 of 41 08:29:47 08:29:47 1 none none:none
none|none none trace
533d15b5ce
NEW
58c343a8d8
NEW
c67adf46e2 [0]
none [0]
Win2K-f 28 of 33 07:48:22 07:48:22 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=126
embedded dns
lines=91
trace
trace
97689d16d7
NEW
none[none] WinXP 39 of 41 23:34:10 23:34:10 1 none none:none
none|none none none
fb9a13cb52
NEW
230ea5dfa3 [none] WinXP 38 of 40 12:37:00 12:37:00 1 none none:none
none|none none none
c2375d703b
NEW
none[none] Win2K-f 39 of 41 21:36:49 21:36:49 1 none none:none
none|none none none
53bfe15e91
NEW
57ce4acac2
NEW
1473091351 [0]
none [0]
Win2K-f 0 of 33 11:47:46 11:47:46 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
6abd2f0404
NEW
7bc0367ae2
NEW
d6dee2289f [none]
80367e263e[none]
WinXP 39 of 41 19:11:29 19:11:29 1 none none:none
none:none
Armadillo|
tElock|
none
none
none
none
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
Win2K-f 0 of 33 09:47:16 09:47:16 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
1b7635d92c
NEW
28cf6965a6 [0] WinXP 21 of 41 08:41:08 08:41:08 1 none none:none
MEW| none trace
5285741560
NEW
60590b8b67 [0] WinXP 37 of 40 23:16:40 23:16:40 1 none ASM:Graph
none|none 55% lines=59 trace
bb1a100fac
NEW
none[none] WinXP 37 of 41 11:32:06 12:07:27 2 none none:none
none|none none none
bac2f7273b
NEW
none[none] Win2K-f 40 of 41 05:00:53 05:19:50 2 none none:none
none|none none none
7bdaa6cf11
NEW
none[none] WinXP 39 of 41 12:03:41 12:03:41 1 none none:none
none|none none none
067917e07b
NEW
d764c1dcb2
NEW
dae35b319c [0]
3d2bc60c5d[0]
WinXP 38 of 40 11:06:21 22:07:50 2 none none:none
none:none
Armadillo|
tElock|
none
none
trace
trace
fa8f85c807
NEW
df66a1f256 [none] WinXP 39 of 41 14:10:15 14:10:15 1 none none:none
none|none none none
0ec9f6119e
NEW
none[none] WinXP 38 of 41 04:03:16 04:03:16 1 none none:none
none|none none none
9ba97a874a
NEW
57a4610d3c [0] Win2K-f 39 of 41 10:28:14 10:28:14 1 none none:none
none|none none trace
70500e59f4
NEW
b707db4fff [none] Win2K-f 37 of 41 20:47:23 20:47:23 1 none none:none
none|none none none
67a66839f7
NEW
7b1fc808a3 [0] Win2K-f
WinXP
37 of 41 00:20:36 19:50:57 26 none none:none
none|none none trace
6a4845ca11
NEW
c23d00870b [0] Win2K-f 0 of 0 12:16:41 12:16:41 1 none none:none
tElock| none trace
b90c6b9264
NEW
none[none] WinXP 39 of 41 12:33:21 12:33:21 1 none none:none
none|none none none
df17a625ee
NEW
none[0] WinXP 29 of 29 16:39:09 16:39:09 1 none none:none
ASPack| 72% lines=298
embedded dns
trace
4bab32523d
NEW
none[3] Win2K-f 10 of 41 09:21:23 09:21:23 1 none none:none
none|none none trace
986b59708d
NEW
none[0] WinXP 29 of 29 15:39:19 18:05:27 2 none none:none
PolyEnE| 100% lines=57 trace
a20e564b54
NEW
8034b235b4 [0] Win2K-f 39 of 41 07:58:29 07:58:29 1 none none:none
none|none none trace
95ca496b37
NEW
9ba2752f0b
NEW
dedb9bcef0
NEW
e37403a61b
NEW
none[none]
none [none]
23233d4cd8[0]
none [none]
WinXP 33 of 41 15:56:46 15:56:46 1 none none:none
none:none
none:none
none:none
none|none
UPX|
Xtreme-Pr|
none|none
none
none
none
none
none
none
trace
none
87add836c6
NEW
none[none] WinXP 39 of 41 08:59:37 08:59:37 1 none none:none
none|none none none
fbdf43d028
NEW
none[none] WinXP 39 of 41 02:29:08 02:29:08 1 none none:none
none|none none none
de2a8e3f8e
NEW
032d753367 [0] Win2K-f 27 of 41 02:52:49 02:52:49 1 none none:none
PENinja S| none trace
04ed4d2967
NEW
e8aa304d1c [0] WinXP 35 of 36 17:28:40 17:28:40 1 none none:none
PolyEnE| none trace
2da17c36c9
NEW
1bb111b86b [none] Win2K-f 38 of 41 06:18:06 15:47:01 2 none none:none
none|none none none
64d6d6a6cc
NEW
98c8e821c9 [none] WinXP 39 of 41 05:26:29 05:26:29 1 none none:none
none|none none none
6a350ad847
NEW
none[none] Win2K-f 38 of 41 08:49:13 08:49:13 1 none none:none
none|none none none
067917e07b
NEW
dae35b319c [0] WinXP 36 of 41 11:06:21 22:07:50 2 none none:none
Armadillo| none trace
aa149834b9
NEW
none[none] Win2K-f 39 of 41 11:16:24 11:16:24 1 none none:none
none|none none none
3037a9879a
NEW
none[none] WinXP 40 of 41 03:14:18 03:14:18 1 none none:none
none|none none none
c98b7aa82a
NEW
3fbb550df7 [none] Win2K-f 39 of 41 08:25:43 08:25:43 1 none none:none
none|none none none
95ca496b37
NEW
9ba2752f0b
NEW
none[none]
none [none]
Win2K-f
WinXP
1 of 40 12:16:41 15:56:46 2 none none:none
none:none
none|none
UPX|
none
none
none
none
1290ef7964
NEW
none[none] WinXP
Win2K-f
39 of 41 01:47:44 13:43:20 2 none none:none
none|none none none
5b32d88412
NEW
none[none] Win2K-f 37 of 41 02:09:02 02:09:02 1 none none:none
none|none none none
b4ebb4a24b
NEW
none[none] Win2K-f 39 of 41 12:35:59 12:35:59 1 none none:none
none|none none none
ca75597f85
NEW
none[none] Win2K-f 39 of 41 07:27:53 07:27:53 1 none none:none
none|none none none
8c91a7ccb1
NEW
d91e25afc8 [0] Win2K-f 36 of 41 09:46:49 09:46:49 1 none none:none
none|none none trace
dab4da4e21
NEW
e63b813015 [0] WinXP 37 of 39 07:57:21 07:57:21 1 none ASM:Graph
PolyEnE| 100% lines=134 trace
4ce3b4e76c
NEW
24892d9819 [0] WinXP 38 of 41 14:32:32 14:32:32 1 none none:none
FSG| none trace
042774a2b7
NEW
none[0] WinXP 29 of 29 22:26:19 22:33:46 2 none none:none
PolyEnE| 100% lines=69
embedded dns
trace
a670739fa3
NEW
none[none] Win2K-f 39 of 41 00:41:27 00:41:27 1 none none:none
none|none none none
116733a20e
NEW
none[none] WinXP 38 of 41 03:19:31 03:19:31 1 none none:none
none|none none none
51117df63b
NEW
none[none] WinXP 37 of 41 02:28:17 02:28:17 1 none none:none
none|none none none
997848bd3a
NEW
none[none] WinXP 39 of 41 08:42:54 08:42:54 1 none none:none
none|none none none
93970242a3
NEW
none[none] Win2K-f 39 of 41 06:35:22 06:35:22 1 none none:none
none|none none none
1b7635d92c
NEW
62a1cdd6b4
NEW
28cf6965a6 [0]
none [none]
WinXP 31 of 41 08:41:08 08:41:08 1 none none:none
none:none
MEW|
none|none
none
none
trace
none
3b8b96d0db
NEW
066792f4a4 [0] WinXP 35 of 36 19:05:43 19:05:43 1 none none:none
PolyEnE| none trace
88ae32e138
NEW
5abec5b133 [none] Win2K-f
WinXP
13 of 40 01:56:29 13:30:37 4 none none:none
Armadillo| none none
eda3b7766c
NEW
7556343561 [0] WinXP 40 of 41 01:36:19 01:36:19 1 none none:none
PolyEnE| none trace
bd5434d6d0
NEW
713ce9fc31 [none] Win2K-f 39 of 41 13:59:36 13:59:36 1 none none:none
none|none none none
4e533978e1
NEW
none[3] Win2K-f 3 of 37 13:41:59 13:41:59 1 none none:none
UPX| none trace
770a04a72c
NEW
none[3] Win2K-f 15 of 41 11:55:05 11:55:05 1 none none:none
none|none none trace
6abd2f0404
NEW
d6dee2289f [none] WinXP 38 of 41 19:11:29 19:11:29 1 none none:none
Armadillo| none none
b27d73bfcb
NEW
473c6454ce [0] WinXP 35 of 36 06:51:19 06:51:19 1 none ASM:Graph
PolyEnE| 100% lines=68 trace
2f81f98c10
NEW
none[none] WinXP 38 of 41 14:03:21 14:03:21 1 none none:none
none|none none none
b42dd1b532
NEW
none[none] WinXP 39 of 41 01:59:51 01:59:51 1 none none:none
none|none none none
5e8ccc4190
NEW
none[none] WinXP 39 of 40 22:42:07 22:42:07 1 none none:none
none|none none none
a92e3f8fc8
NEW
none[0] WinXP 26 of 28 15:24:52 15:24:52 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
6ea16d7627
NEW
none[none] WinXP 39 of 41 13:56:33 13:56:33 1 none none:none
none|none none none
74d54b3e54
NEW
none[none] Win2K-f 39 of 41 08:26:15 08:26:15 1 none none:none
none|none none none
0869445e1f
NEW
none[none] Win2K-f 39 of 41 01:29:47 01:29:47 1 none none:none
none|none none none
9bb68450cd
NEW
c2d5ac2315 [0] WinXP 34 of 36 03:02:18 03:02:18 1 none ASM:Graph
PolyEnE| 100% lines=73
embedded dns
trace