Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



03 November 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
f3998fb9cf
NEW
375c9c1688 [0] WinXP 39 of 41 12:23:24 12:23:24 1 none none:none
Armadillo| none trace
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
WinXP 0 of 32 11:34:59 11:34:59 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
dc331fb791
NEW
none[3] Win2K-f 3 of 37 06:58:44 06:58:44 1 none none:none
UPX| none trace
1c5e79f5f4
NEW
1eafd24c64
NEW
26b5c3598c
NEW
389c414a1e
NEW
none[4]
91efa90c65[0]
none [4]
d71ee5f7ac[0]
Win2K-f 4 of 41 19:00:44 19:00:44 1 none none:none
none:none
none:none
none:none
FSG|
StarForce|
none|none
StarForce|
none
none
none
none
trace
trace
trace
trace
b43b5fbcd4
NEW
a8bd73e921 [0] Win2K-f 38 of 41 14:05:15 14:05:15 1 none none:none
none|none none trace
f869540f72
NEW
19b1a84a32 [0] WinXP 38 of 41 13:58:46 13:58:46 1 none none:none
Armadillo| none trace
a205366bef
NEW
efaef2451a
NEW
82bbbe4789 [0]
5382f9a037[0]
Win2K-f 37 of 41 05:35:40 05:35:40 1 none none:none
none:none
tElock|
Armadillo|
none
none
trace
trace
1c5e79f5f4
NEW
7cb40af9a6
NEW
83192a6119
NEW
9c632cd017
NEW
a6821480ec
NEW
bea8cb1865
NEW
f725e57065
NEW
fac78fde16
NEW
none[4]
0ea1eb1053[0]
fdc95e1fab[0]
0ca67a940f[0]
none [4]
154de51a66[0]
3f11911aa9[0]
882896ab05[0]
Win2K-f 35 of 36 02:10:46 02:10:46 1 none none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
none:none
FSG|
StarForce|
none|none
Neolite|
none|none
Armadillo|
tElock|
tElock|
none
none
none
none
none
lines=91
none
none
trace
trace
trace
trace
trace
trace
trace
trace
1c5e79f5f4
NEW
7cb40af9a6
NEW
83192a6119
NEW
none[4]
0ea1eb1053[0]
fdc95e1fab[0]
Win2K-f 15 of 41 02:10:46 02:10:46 1 none none:none
none:none
none:none
FSG|
StarForce|
none|none
none
none
none
trace
trace
trace
53bfe15e91
NEW
1473091351 [0] WinXP
Win2K-f
33 of 33 00:48:55 22:41:57 11 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
e0363ea7bb
NEW
33e5e8fe2a [0] Win2K-f 39 of 41 12:52:07 12:52:07 1 none none:none
Armadillo| none trace
53bfe15e91
NEW
b7082104e4
NEW
1473091351 [0]
c5b49e7b82[0]
Win2K-f 8 of 33 14:26:57 14:26:57 1 none ASM:Graph
ASM:Graph
tElock|
tElock|
100% lines=75
embedded dns
lines=41
trace
trace
50ec88befe
NEW
6654523fa4 [0] WinXP 40 of 41 00:07:15 00:07:15 1 none none:none
PolyEnE| none trace
27b20f06b4
NEW
dba2cd61d9 [0] WinXP 39 of 41 19:13:27 19:13:27 1 none none:none
Armadillo| none trace
b502f83a7c
NEW
28f5be93b0 [0] WinXP 32 of 32 01:21:22 01:21:22 1 none none:none
PolyEnE| none trace
e8d4d8cde1
NEW
none[0] Win2K-f
WinXP
13 of 31 13:07:38 16:06:31 4 none none:none
ASProtect| 63% lines=585
embedded dns
trace
a12cab51ef
NEW
none[0] WinXP 29 of 29 06:44:22 06:44:22 1 none none:none
ASPack| 54% lines=281
embedded dns
trace
a75f610a2c
NEW
1acfb72109 [0] Win2K-f 37 of 41 15:02:07 15:02:07 1 none none:none
none|none none trace
9ddde78524
NEW
7655048fd6 [0] Win2K-f 39 of 41 15:51:28 15:51:28 1 none none:none
none|none none trace
637620f48b
NEW
1c077515c8 [0] Win2K-f 5 of 41 14:47:06 14:47:06 1 none none:none
FSG| none trace
1c5e79f5f4
NEW
1eafd24c64
NEW
26b5c3598c
NEW
389c414a1e
NEW
9c632cd017
NEW
none[4]
91efa90c65[0]
none [4]
d71ee5f7ac[0]
0ca67a940f[0]
Win2K-f 11 of 41 02:10:46 19:00:44 2 none none:none
none:none
none:none
none:none
none:none
FSG|
StarForce|
none|none
StarForce|
Neolite|
none
none
none
none
none
trace
trace
trace
trace
trace
4c3df24b32
NEW
none[0] Win2K-f 0 of 33 04:56:56 04:56:56 1 none ASM:Graph
Armadillo| 47% lines=81 trace
bb335ce40d
NEW
b3bb06faab [0] WinXP 38 of 41 14:31:24 14:31:24 1 none none:none
none|none none trace
1c5e79f5f4
NEW
1eafd24c64
NEW
26b5c3598c
NEW
389c414a1e
NEW
9c632cd017
NEW
b5edcbfd2a
NEW
none[4]
91efa90c65[0]
none [4]
d71ee5f7ac[0]
0ca67a940f[0]
c30d825691[0]
Win2K-f 39 of 41 19:00:44 19:00:44 1 none none:none
none:none
none:none
none:none
none:none
none:none
FSG|
StarForce|
none|none
StarForce|
Neolite|
Armadillo|
none
none
none
none
none
none
trace
trace
trace
trace
trace
trace
13de042416
NEW
f6630e402b [0] WinXP 38 of 41 15:51:33 15:51:33 1 none none:none
Armadillo| none trace
1c5e79f5f4
NEW
7cb40af9a6
NEW
83192a6119
NEW
9c632cd017
NEW
a6821480ec
NEW
bea8cb1865
NEW
none[4]
0ea1eb1053[0]
fdc95e1fab[0]
0ca67a940f[0]
none [4]
154de51a66[0]
Win2K-f 32 of 36 02:10:46 02:10:46 1 none none:none
none:none
none:none
none:none
none:none
ASM:Graph
FSG|
StarForce|
none|none
Neolite|
none|none
Armadillo|
0% none
none
none
none
none
lines=91
trace
trace
trace
trace
trace
trace
abbb0e3bad
NEW
e7124c9b61 [0] Win2K-f 38 of 41 12:33:16 12:33:16 1 none none:none
Stranik| none trace
a0e262b14d
NEW
4ae21c0514 [0] WinXP 23 of 41 12:54:34 12:54:34 1 none none:none
StarForce| none trace
53bfe15e91
NEW
57ce4acac2
NEW
1473091351 [0]
none [0]
WinXP 0 of 33 00:48:55 00:48:55 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
6a95151e5b
NEW
58058ac4a0 [0] Win2K-f 10 of 41 02:23:41 02:23:41 1 none none:none
Neolite| none trace
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
Win2K-f
WinXP
0 of 33 09:19:49 22:41:57 7 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
de37f2fc47
NEW
bac4cc6eec [0] Win2K-f 33 of 41 13:30:08 13:30:08 1 none none:none
Armadillo| none trace
708f64b1b7
NEW
a18ef8ac1f [0] WinXP 40 of 41 10:47:41 10:47:41 1 none none:none
PolyEnE| none trace
2ba090d997
NEW
c49c54e7c8 [0] WinXP 39 of 41 13:32:02 13:32:02 1 none none:none
Armadillo| none trace
637620f48b
NEW
67a66839f7
NEW
b7b8c9175a
NEW
1c077515c8 [0]
7b1fc808a3[0]
1c077515c8[0]
Win2K-f 5 of 41 14:47:06 14:47:06 1 none none:none
none:none
none:none
FSG|
none|none
FSG|
none
none
none
trace
trace
trace
f2a8dafb30
NEW
1d0f660523 [0] WinXP 39 of 41 02:20:30 02:20:30 1 none none:none
PolyEnE| none trace
f80db6b4c1
NEW
0dc71ae7e4 [0] WinXP 39 of 41 14:14:27 14:14:27 1 none none:none
Armadillo| none trace
1c5e79f5f4
NEW
8a75955033
NEW
9276c8b36b
NEW
f725e57065
NEW
none[4]
2bf3e548b9[0]
none [0]
3f11911aa9[0]
Win2K-f
WinXP
13 of 41 02:10:46 23:08:50 4 none none:none
ASM:Graph
ASM:Graph
none:none
FSG|
tElock|
Armadillo|
tElock|
none
lines=126
embedded dns
lines=81
none
trace
trace
trace
trace
1c5e79f5f4
NEW
8a75955033
NEW
9276c8b36b
NEW
none[4]
2bf3e548b9[0]
none [0]
WinXP 28 of 32 23:08:50 23:08:50 1 none none:none
ASM:Graph
ASM:Graph
FSG|
tElock|
Armadillo|
47% none
lines=126
embedded dns
lines=81
trace
trace
trace
67a66839f7
NEW
7b1fc808a3 [0] Win2K-f
WinXP
37 of 41 14:47:06 16:55:03 3 none none:none
none|none none trace
df17a625ee
NEW
none[0] WinXP 29 of 29 00:33:36 09:00:18 2 none none:none
ASPack| 72% lines=298
embedded dns
trace
011bbba2e3
NEW
53f201af2f [0] Win2K-f 39 of 41 17:08:45 17:08:45 1 none none:none
Armadillo| none trace
1c5e79f5f4
NEW
1eafd24c64
NEW
none[4]
91efa90c65[0]
Win2K-f 40 of 41 19:00:44 19:00:44 1 none none:none
none:none
FSG|
StarForce|
none
none
trace
trace
75af48afe4
NEW
7a25f9e3cf [0] Win2K-f 22 of 41 13:21:44 13:21:44 1 none none:none
StarForce| none trace
676ab5e987
NEW
b96815f961 [0] WinXP 40 of 41 06:23:04 06:23:04 1 none none:none
tElock| none trace
a205366bef
NEW
82bbbe4789 [0] Win2K-f 38 of 41 05:35:40 05:35:40 1 none none:none
tElock| none trace
6aae51c10a
NEW
e5bc758bd5 [0] WinXP 37 of 41 16:20:29 16:20:29 1 none none:none
none|none none trace
1c5e79f5f4
NEW
8a75955033
NEW
none[4]
2bf3e548b9[0]
WinXP 29 of 32 23:08:50 23:08:50 1 none none:none
ASM:Graph
FSG|
tElock|
96% none
lines=126
embedded dns
trace
trace
1c5e79f5f4
NEW
7cb40af9a6
NEW
none[4]
0ea1eb1053[0]
Win2K-f 5 of 41 02:10:46 02:10:46 1 none none:none
none:none
FSG|
StarForce|
none
none
trace
trace
49a6c9c194
NEW
23254be803 [0] Win2K-f 39 of 41 16:18:30 16:18:30 1 none none:none
none|none none trace
37054fc56a
NEW
b0f959baa4 [0] Win2K-f 39 of 41 12:54:35 12:54:35 1 none none:none
none|none none trace
526ab46732
NEW
0aaad19886 [0] WinXP 37 of 41 13:50:20 13:50:20 1 none none:none
Armadillo| none trace
9c4727d74f
NEW
1487a0b371 [0] WinXP 39 of 41 16:01:21 16:01:21 1 none none:none
none|none none trace
1c5e79f5f4
NEW
5c2fdf5768
NEW
965c9d9cd0
NEW
none[4]
f29783df8c[0]
1075d80341[0]
Win2K-f 9 of 41 02:45:31 02:45:31 1 none none:none
none:none
none:none
FSG|
none|none
FSG|
none
none
none
trace
trace
trace
ec8ab501b3
NEW
bac4cc6eec [0] WinXP
Win2K-f
40 of 41 12:30:50 14:09:13 2 none none:none
Armadillo| none trace
1c5e79f5f4
NEW
7cb40af9a6
NEW
83192a6119
NEW
9c632cd017
NEW
a6821480ec
NEW
none[4]
0ea1eb1053[0]
fdc95e1fab[0]
0ca67a940f[0]
none [4]
Win2K-f 0 of 41 02:10:46 02:10:46 1 none none:none
none:none
none:none
none:none
none:none
FSG|
StarForce|
none|none
Neolite|
none|none
none
none
none
none
none
trace
trace
trace
trace
trace
1c5e79f5f4
NEW
5c2fdf5768
NEW
none[4]
f29783df8c[0]
Win2K-f 19 of 41 02:45:31 02:45:31 1 none none:none
none:none
FSG|
none|none
none
none
trace
trace
7d99b0e910
NEW
none[0] WinXP 26 of 28 00:17:51 11:02:59 2 none none:none
PolyEnE| 99% lines=68 trace
676ab5e987
NEW
983e7469c3
NEW
b96815f961 [0]
ebc346b04f[0]
WinXP 39 of 41 06:23:04 06:23:04 1 none none:none
none:none
tElock|
Armadillo|
none
none
trace
trace
d165f865c1
NEW
e007e14266 [0] Win2K-f 39 of 41 13:48:37 13:48:37 1 none none:none
none|none none trace
1c5e79f5f4
NEW
none[4] Win2K-f
WinXP
17 of 41 02:10:46 23:08:50 4 none none:none
FSG| none trace
bf4beae362
NEW
45d573d4b5 [0] WinXP 39 of 41 16:28:12 16:28:12 1 none none:none
none|none none trace
1c5e79f5f4
NEW
1eafd24c64
NEW
26b5c3598c
NEW
none[4]
91efa90c65[0]
none [4]
Win2K-f 0 of 41 19:00:44 19:00:44 1 none none:none
none:none
none:none
FSG|
StarForce|
none|none
none
none
none
trace
trace
trace
9f5b49bb41
NEW
e7124c9b61 [0] WinXP 38 of 40 13:22:29 13:22:29 1 none none:none
Stranik| none trace
bc75e26362
NEW
5f81ece7e6 [0] WinXP 38 of 41 15:07:45 15:07:45 1 none none:none
Armadillo| none trace
5865b09945
NEW
4d99f4784a [0] WinXP 36 of 38 16:55:44 16:55:44 1 none none:none
PolyEnE| none trace
a1947c032c
NEW
b4bbfb8759 [0] Win2K-f 39 of 41 12:21:33 12:21:33 1 none none:none
Armadillo| none trace
9bb68450cd
NEW
c2d5ac2315 [0] WinXP 34 of 36 07:32:47 07:32:47 1 none ASM:Graph
PolyEnE| 100% lines=73
embedded dns
trace