Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


30 October 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
7b313206a2
NEW		 0c866c8cce [0] WinXP 38 of 41 16:54:52 16:54:52 1 none none:none
 none|none none trace
77656a2953
NEW		 13296a6198 [0] Win2K-f 40 of 41 14:20:38 14:20:38 1 none none:none
 tElock| none trace
2c6d4171e6
NEW		 4197bf0c86 [0] WinXP 40 of 41 06:19:04 06:19:04 1 none none:none
 StarForce| none trace
1c5e79f5f4
NEW
1c881c13c6
NEW
1fa783c4d6
NEW
83192a6119
NEW
ba3f1640d4
NEW
bea8cb1865
NEW
f725e57065
NEW		 none[4]
none [4]
ce23deb1d1[0]
fdc95e1fab[0]
9aa28e4745[0]
154de51a66[0]
3f11911aa9[0]		 Win2K-f
WinXP		 13 of 41 03:42:58 11:58:23 3 none none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
 FSG|
none|none
Neolite|
none|none
StarForce|
Armadillo|
tElock|		 none
none
none
none
none
lines=91
none		 trace
trace
trace
trace
trace
trace
trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 32 08:51:02 17:39:22 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
0bf694b0fd
NEW		 bcdaec12b6 [0] Win2K-f 11 of 41 03:42:58 03:42:58 1 none none:none
 none|none none trace
1c5e79f5f4
NEW
1c881c13c6
NEW
1fa783c4d6
NEW
83192a6119
NEW
ba3f1640d4
NEW
bea8cb1865
NEW
f725e57065
NEW
fac78fde16
NEW		 none[4]
none [4]
ce23deb1d1[0]
fdc95e1fab[0]
9aa28e4745[0]
154de51a66[0]
3f11911aa9[0]
882896ab05[0]		 WinXP 35 of 36 11:58:23 11:58:23 1 none none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
none:none
 FSG|
none|none
Neolite|
none|none
StarForce|
Armadillo|
tElock|
tElock|		 none
none
none
none
none
lines=91
none
none		 trace
trace
trace
trace
trace
trace
trace
trace
1c5e79f5f4
NEW
1c881c13c6
NEW
1fa783c4d6
NEW		 none[4]
none [4]
ce23deb1d1[0]		 WinXP 9 of 41 07:04:33 11:58:23 2 none none:none
none:none
none:none
 FSG|
none|none
Neolite|		 none
none
none		 trace
trace
trace
1c5e79f5f4
NEW
1c881c13c6
NEW
1fa783c4d6
NEW
83192a6119
NEW		 none[4]
none [4]
ce23deb1d1[0]
fdc95e1fab[0]		 Win2K-f
WinXP		 15 of 41 03:42:58 11:58:23 2 none none:none
none:none
none:none
none:none
 FSG|
none|none
Neolite|
none|none		 none
none
none
none		 trace
trace
trace
trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 08:51:02 19:24:55 9 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
77656a2953
NEW
a77e51636f
NEW		 13296a6198 [0]
c5e16ba6b7[0]		 Win2K-f 39 of 41 14:20:38 14:20:38 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
df17a625ee
NEW		 none[0] WinXP 29 of 29 06:07:40 06:07:40 1 none none:none
 ASPack| 72% lines=298
embedded dns		 trace
38624f25cd
NEW		 642a2cc6f2 [0] WinXP 40 of 41 16:10:37 16:10:37 1 none none:none
 PolyEnE| none trace
1c5e79f5f4
NEW
1c881c13c6
NEW
1fa783c4d6
NEW
83192a6119
NEW
ba3f1640d4
NEW		 none[4]
none [4]
ce23deb1d1[0]
fdc95e1fab[0]
9aa28e4745[0]		 WinXP 7 of 41 11:58:23 11:58:23 1 none none:none
none:none
none:none
none:none
none:none
 FSG|
none|none
Neolite|
none|none
StarForce|		 none
none
none
none
none		 trace
trace
trace
trace
trace
1c5e79f5f4
NEW
1c881c13c6
NEW		 none[4]
none [4]		 WinXP 0 of 41 11:58:23 11:58:23 1 none none:none
none:none
 FSG|
none|none		 none
none		 trace
trace
73ce2b74da
NEW		 none[0] Win2K-f 3 of 33 10:46:55 10:46:55 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
644c58fee9
NEW		 22a350de78 [0] WinXP 38 of 41 08:35:16 08:35:16 1 none none:none
 Armadillo| none trace
1fa783c4d6
NEW
39ef7eae36
NEW
533d15b5ce
NEW		 ce23deb1d1 [0]
f16483aeef[0]
c67adf46e2[0]		 WinXP 30 of 33 07:04:33 07:04:33 1 none none:none
none:none
ASM:Graph
 Neolite|
Armadillo|
tElock|		 96% none
none
lines=126
embedded dns		 trace
trace
trace
03f912899b
NEW		 none[0] WinXP 32 of 32 04:59:06 04:59:06 1 none none:none
 none|none 32% lines=64 trace
baf381c459
NEW		 84c5ca466d [0] WinXP 40 of 41 06:45:58 06:45:58 1 none none:none
 none|none none trace
55138aeacf
NEW		 9782d5ed48 [0] WinXP 39 of 41 16:19:56 16:19:56 1 none none:none
 Armadillo| none trace
f63e70fa11
NEW		 4f3f7ff5ac [0] WinXP 34 of 35 08:56:04 08:56:04 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
96511f48b8
NEW		 none[3] Win2K-f 33 of 41 03:25:29 03:25:29 1 none none:none
 none|none none trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 06:23:01 06:23:01 1 none none:none
 none|none 32% lines=61 trace
1fa783c4d6
NEW
39ef7eae36
NEW
533d15b5ce
NEW
58c343a8d8
NEW
b715292e04
NEW		 ce23deb1d1 [0]
f16483aeef[0]
c67adf46e2[0]
none [0]
569c05a15f[0]		 Win2K-f
WinXP		 14 of 41 03:42:58 07:04:33 2 none none:none
none:none
ASM:Graph
none:none
none:none
 Neolite|
Armadillo|
tElock|
Armadillo|
PE-PACK|		 none
none
lines=126
embedded dns
lines=91
none		 trace
trace
trace
trace
trace
a894e6640a
NEW		 2a62540340 [0] Win2K-f 38 of 41 19:51:04 19:51:04 1 none none:none
 PolyEnE| none trace
1fa783c4d6
NEW
39ef7eae36
NEW		 ce23deb1d1 [0]
f16483aeef[0]		 WinXP 8 of 41 07:04:33 07:04:33 1 none none:none
none:none
 Neolite|
Armadillo|		 none
none		 trace
trace
1c5e79f5f4
NEW
1c881c13c6
NEW
1fa783c4d6
NEW
83192a6119
NEW
ba3f1640d4
NEW
bea8cb1865
NEW		 none[4]
none [4]
ce23deb1d1[0]
fdc95e1fab[0]
9aa28e4745[0]
154de51a66[0]		 WinXP 32 of 36 11:58:23 11:58:23 1 none none:none
none:none
none:none
none:none
none:none
ASM:Graph
 FSG|
none|none
Neolite|
none|none
StarForce|
Armadillo|		 0% none
none
none
none
none
lines=91		 trace
trace
trace
trace
trace
trace
1fa783c4d6
NEW
39ef7eae36
NEW
533d15b5ce
NEW
58c343a8d8
NEW		 ce23deb1d1 [0]
f16483aeef[0]
c67adf46e2[0]
none [0]		 WinXP 28 of 33 07:04:33 07:04:33 1 none none:none
none:none
ASM:Graph
none:none
 Neolite|
Armadillo|
tElock|
Armadillo|		 0% none
none
lines=126
embedded dns
lines=91		 trace
trace
trace
trace
a0e262b14d
NEW		 4ae21c0514 [0] Win2K-f 23 of 41 09:07:08 09:07:08 1 none none:none
 StarForce| none trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 09:13:24 09:13:24 1 none none:none
 PolyEnE| 99% lines=68 trace
73ce2b74da
NEW
79c01ec060
NEW		 none[0]
1bfd34056c[0]		 Win2K-f 33 of 33 10:46:55 10:46:55 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=64
embedded dns		 trace
trace
17028f1eda
NEW		 none[3] WinXP 31 of 32 11:31:26 17:46:42 2 none none:none
 tElock| none trace
1fa783c4d6
NEW
39ef7eae36
NEW
533d15b5ce
NEW
58c343a8d8
NEW
b715292e04
NEW
b9bb8aed2c
NEW		 ce23deb1d1 [0]
f16483aeef[0]
c67adf46e2[0]
none [0]
569c05a15f[0]
afab6f51b9[0]		 WinXP 6 of 41 07:04:33 07:04:33 1 none none:none
none:none
ASM:Graph
none:none
none:none
none:none
 Neolite|
Armadillo|
tElock|
Armadillo|
PE-PACK|
StarForce|		 none
none
lines=126
embedded dns
lines=91
none
none		 trace
trace
trace
trace
trace
trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 33 12:12:22 17:43:05 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
474acf88e5
NEW		 1f53944b24 [0] Win2K-f 38 of 40 21:10:38 21:10:38 1 none none:none
 tElock| none trace
1c5e79f5f4
NEW		 none[4] Win2K-f
WinXP		 17 of 41 03:42:58 11:58:23 2 none none:none
 FSG| none trace
c6f9cc8dd0
NEW		 bf53dec126 [0] WinXP 39 of 40 07:27:32 07:27:32 1 none none:none
 none|none none trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 12:03:48 12:03:48 1 none none:none
 none|none 33% lines=60 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 33 14:42:07 19:24:55 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
474acf88e5
NEW
68f0c14692
NEW		 1f53944b24 [0]
ccc1b24d53[0]		 Win2K-f 38 of 40 21:10:38 21:10:38 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
b8076e37ae
NEW		 52953fed05 [0] WinXP 28 of 41 15:51:35 15:51:35 1 none none:none
 StarForce| none trace
70ec5c4b3f
NEW		 f697adabdd [0] Win2K-f 39 of 40 04:43:48 04:43:48 1 none none:none
 StarForce| none trace
b41ac85a53
NEW		 3e23c7ba7b [0] WinXP 40 of 40 10:54:24 10:54:24 1 none none:none
 PolyEnE| none trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 21:23:53 21:23:53 1 none ASM:Graph
 none|none 55% lines=59 trace
6152c54fc2
NEW		 ccc8b54f0a [0] WinXP 41 of 41 14:42:18 14:42:18 1 none none:none
 ASPack| none trace