Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


05 November 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
f725e57065
NEW		 3f11911aa9 [0] Win2K-f 13 of 41 20:03:46 23:40:22 5 none none:none
 tElock| none trace
088c8ea72a
NEW
47280d3256
NEW		 7ccfe164f3 [0]
none [4]		 Win2K-f 40 of 41 09:52:20 09:52:20 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 02:36:25 17:27:35 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
007aa1a2f9
NEW		 396306e500 [0] Win2K-f 10 of 40 20:46:42 20:46:42 1 none none:none
 Neolite| none trace
067917e07b
NEW
d764c1dcb2
NEW		 dae35b319c [0]
3d2bc60c5d[0]		 Win2K-f 38 of 40 07:05:40 07:05:40 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 02:36:25 20:57:52 8 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
682a384fe9
NEW		 none[3] Win2K-f 31 of 41 15:34:07 15:34:07 1 none none:none
 none|none none trace
d82349e3d4
NEW		 61ea52e328 [0] Win2K-f 38 of 40 03:29:54 03:29:54 1 none none:none
 none|none none trace
07fabc79ef
NEW		 none[0] WinXP 0 of 32 10:11:06 10:11:06 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
1c5e79f5f4
NEW
1eafd24c64
NEW		 none[4]
91efa90c65[0]		 Win2K-f 40 of 41 23:23:38 23:23:38 1 none none:none
none:none
 FSG|
StarForce|		 none
none		 trace
trace
088c8ea72a
NEW		 7ccfe164f3 [0] Win2K-f 39 of 41 09:52:20 09:52:20 1 none none:none
 Armadillo| none trace
168aab35a3
NEW		 60b730b97e [0] Win2K-f 31 of 33 20:03:46 20:03:46 1 none ASM:Graph
 tElock| 95% lines=120
embedded dns		 trace
b12412de39
NEW		 7469c546da [0] Win2K-f 38 of 40 13:27:40 13:27:40 1 none none:none
 StarForce| none trace
168aab35a3
NEW
1c5e79f5f4
NEW
667f0c59f3
NEW
a0e59e4658
NEW
e1cdc5a168
NEW		 60b730b97e [0]
none [4]
8fe2be2095[0]
none [4]
none [4]		 Win2K-f 16 of 41 20:03:46 20:03:46 1 none ASM:Graph
none:none
ASM:Graph
none:none
none:none
 tElock|
FSG|
Armadillo|
Obsidium|
ASProtect|		 lines=120
embedded dns
none
lines=91
none
none		 trace
trace
trace
trace
trace
38ed850a0e
NEW		 46990f37cd [0] WinXP 34 of 38 09:06:23 09:06:23 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
1a19c1d029
NEW		 da7e1ed2fa [0] Win2K-f 5 of 40 20:17:44 20:17:44 1 none none:none
 StarForce| none trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 18:46:44 18:46:44 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
1a19c1d029
NEW
a01973751b
NEW		 da7e1ed2fa [0]
ab2b3c46fa[0]		 Win2K-f 8 of 40 20:17:44 20:17:44 1 none none:none
none:none
 StarForce|
Armadillo|		 none
none		 trace
trace
067917e07b
NEW		 dae35b319c [0] Win2K-f 36 of 41 07:05:40 07:05:40 1 none none:none
 Armadillo| none trace
007aa1a2f9
NEW
05b2c6ee2b
NEW		 396306e500 [0]
837da8c998[0]		 Win2K-f 7 of 40 20:46:42 20:46:42 1 none none:none
none:none
 Neolite|
StarForce|		 none
none		 trace
trace
03f912899b
NEW		 none[0] WinXP 32 of 32 10:51:58 10:51:58 1 none none:none
 none|none 32% lines=64 trace
007aa1a2f9
NEW
05b2c6ee2b
NEW
1c5e79f5f4
NEW
2f1c973c21
NEW		 396306e500 [0]
837da8c998[0]
none [4]
none [4]		 Win2K-f 0 of 40 20:46:42 20:46:42 1 none none:none
none:none
none:none
none:none
 Neolite|
StarForce|
FSG|
none|none		 none
none
none
none		 trace
trace
trace
trace
49abc59e37
NEW		 1adfddcbc5 [0] WinXP 37 of 39 14:40:37 14:40:37 1 none none:none
 PolyEnE| none trace
168aab35a3
NEW
1c5e79f5f4
NEW
667f0c59f3
NEW		 60b730b97e [0]
none [4]
8fe2be2095[0]		 Win2K-f 31 of 33 20:03:46 20:03:46 1 none ASM:Graph
none:none
ASM:Graph
 tElock|
FSG|
Armadillo|		 0% lines=120
embedded dns
none
lines=91		 trace
trace
trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 07:51:22 07:51:22 1 none none:none
 none|none 32% lines=61 trace
1c5e79f5f4
NEW
1eafd24c64
NEW
b5edcbfd2a
NEW		 none[4]
91efa90c65[0]
c30d825691[0]		 Win2K-f 39 of 41 23:23:38 23:23:38 1 none none:none
none:none
none:none
 FSG|
StarForce|
Armadillo|		 none
none
none		 trace
trace
trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 07:02:14 07:02:14 1 none none:none
 PolyEnE| 99% lines=68 trace
168aab35a3
NEW
1c5e79f5f4
NEW
667f0c59f3
NEW
a0e59e4658
NEW		 60b730b97e [0]
none [4]
8fe2be2095[0]
none [4]		 Win2K-f 15 of 41 20:03:46 20:03:46 1 none ASM:Graph
none:none
ASM:Graph
none:none
 tElock|
FSG|
Armadillo|
Obsidium|		 lines=120
embedded dns
none
lines=91
none		 trace
trace
trace
trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 09:20:36 09:20:36 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
474acf88e5
NEW		 1f53944b24 [0] Win2K-f 38 of 40 02:48:30 02:48:30 1 none none:none
 tElock| none trace
1c5e79f5f4
NEW		 none[4] Win2K-f 17 of 41 20:03:46 23:23:38 3 none none:none
 FSG| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 15:51:25 20:57:52 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
b27d73bfcb
NEW		 473c6454ce [0] WinXP 35 of 36 20:18:20 20:18:20 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
474acf88e5
NEW
68f0c14692
NEW		 1f53944b24 [0]
ccc1b24d53[0]		 Win2K-f 38 of 40 02:48:30 02:48:30 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
38ed850a0e
NEW
b9297745a1
NEW		 46990f37cd [0]
4294884d84[0]		 WinXP 35 of 38 09:06:23 09:06:23 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
f2a8dafb30
NEW		 1d0f660523 [0] WinXP 39 of 41 06:46:21 06:46:21 1 none none:none
 PolyEnE| none trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 05:49:22 05:49:22 1 none ASM:Graph
 none|none 55% lines=59 trace
9bb68450cd
NEW		 c2d5ac2315 [0] WinXP 34 of 36 10:12:22 10:12:22 1 none ASM:Graph
 PolyEnE| 100% lines=73
embedded dns		 trace