Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


08 December 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
10759405e0
NEW		 292d343248 [0] Win2K-f 38 of 41 22:34:17 22:34:17 1 none none:none
 Armadillo| none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 06:14:12 19:42:28 4 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
19f9cb1f21
NEW
a9d40bc96b
NEW		 8b1482be5d [0]
b07fa6d434[0]		 WinXP 40 of 41 00:32:20 00:32:20 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
97e402001a
NEW		 none[none] WinXP 39 of 41 23:58:17 23:58:17 1 none none:none
 none|none none none
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 03:13:55 19:42:28 9 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
5e3a9c2d9d
NEW		 dbc48b815a [0] Win2K-f 40 of 41 14:07:17 14:07:17 1 none none:none
 tElock| none trace
973b7d1bee
NEW		 922ddaf1ee [0] WinXP 40 of 41 13:36:17 13:36:17 1 none none:none
 PolyEnE| none trace
abf4572c47
NEW
cf5eca7bf7
NEW		 none[none]
none [none]		 WinXP 38 of 41 15:20:34 15:20:34 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
785e86954f
NEW
827d304221
NEW
87e1117f2a
NEW		 c6edee8e8b [0]
none [none]
3ff643aae6[0]		 WinXP 32 of 33 05:53:16 05:53:16 1 none none:none
none:none
none:none
 PeStubOEP|
none|none
tElock|		 none
none
none		 trace
none
trace
e30fb27bda
NEW		 90ee26f451 [0] WinXP 33 of 33 23:13:27 23:13:27 1 none ASM:Graph
 MEW| 21% lines=185
embedded dns		 trace
abf4572c47
NEW		 none[none] WinXP 38 of 40 15:20:34 15:20:34 1 none none:none
 none|none none none
73ce2b74da
NEW		 none[0] Win2K-f 3 of 33 12:22:11 12:22:11 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
5818023061
NEW		 none[0] WinXP 32 of 32 10:24:58 10:24:58 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
26f56abb1e
NEW
99b248336f
NEW		 none[none]
c64bd1a776[0]		 Win2K-f 34 of 36 03:17:46 03:17:46 1 none none:none
none:none
 none|none
Armadillo|		 none
none		 none
trace
74b3d149e8
NEW		 cef0fa2981 [0] WinXP 39 of 40 06:11:23 06:11:23 1 none none:none
 PolyEnE| none trace
166484192b
NEW
2a1e547005
NEW		 0c886fcb7b [0]
5c75fa020a[0]		 WinXP 37 of 39 15:23:37 15:23:37 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
c40e0af1a7
NEW
ca24bacb31
NEW		 none[none]
none [none]		 Win2K-f 39 of 41 17:37:46 17:37:46 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
26f56abb1e
NEW		 none[none] Win2K-f 22 of 41 03:17:46 03:17:46 1 none none:none
 none|none none none
785e86954f
NEW
827d304221
NEW		 c6edee8e8b [0]
none [none]		 WinXP 32 of 41 05:53:16 05:53:16 1 none none:none
none:none
 PeStubOEP|
none|none		 none
none		 trace
none
5396ad0b54
NEW		 none[none] WinXP 39 of 40 07:55:52 07:55:52 1 none none:none
 none|none none none
024410ad21
NEW
b0cedd71bb
NEW		 96d0267b80 [0]
f6e156bdca[0]		 WinXP 38 of 40 15:14:20 15:14:20 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 22:58:53 22:58:53 1 none ASM:Graph
 none|none 100% lines=61 trace
785e86954f
NEW
827d304221
NEW
87e1117f2a
NEW
b4fe4581c3
NEW
dece7e8313
NEW
fd5d639b8d
NEW		 c6edee8e8b [0]
none [none]
3ff643aae6[0]
599b835896[0]
none [none]
none [none]		 WinXP 23 of 40 05:53:16 05:53:16 1 none none:none
none:none
none:none
none:none
none:none
none:none
 PeStubOEP|
none|none
tElock|
Armadillo|
none|none
none|none		 none
none
none
none
none
none		 trace
none
trace
trace
none
none
379f4b1d78
NEW		 none[none] WinXP 39 of 40 15:04:28 15:04:28 1 none none:none
 none|none none none
1cc5b253e9
NEW		 none[none] Win2K-f 34 of 41 03:42:03 03:42:03 1 none none:none
 none|none none none
5e3a9c2d9d
NEW
630308d06b
NEW		 dbc48b815a [0]
847d302e37[0]		 Win2K-f 39 of 41 14:07:17 14:07:17 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
166484192b
NEW		 0c886fcb7b [0] WinXP 37 of 39 15:23:37 15:23:37 1 none none:none
 tElock| none trace
26f56abb1e
NEW
99b248336f
NEW
9b6ea363eb
NEW		 none[none]
c64bd1a776[0]
none [none]		 Win2K-f 23 of 41 03:17:46 03:17:46 1 none none:none
none:none
none:none
 none|none
Armadillo|
none|none		 none
none
none		 none
trace
none
7d99b0e910
NEW		 none[0] WinXP 26 of 28 11:16:14 11:16:14 1 none none:none
 PolyEnE| 99% lines=68 trace
73ce2b74da
NEW
79c01ec060
NEW		 none[0]
1bfd34056c[0]		 Win2K-f 33 of 33 12:22:11 12:22:11 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=64
embedded dns		 trace
trace
10759405e0
NEW
d08e00dfaf
NEW		 292d343248 [0]
854c49d8c4[0]		 Win2K-f 39 of 41 22:34:17 22:34:17 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
785e86954f
NEW		 c6edee8e8b [0] WinXP 29 of 41 05:53:16 05:53:16 1 none none:none
 PeStubOEP| none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 03:13:55 03:13:55 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
024410ad21
NEW		 96d0267b80 [0] WinXP 40 of 41 15:14:20 15:14:20 1 none none:none
 tElock| none trace
c40e0af1a7
NEW		 none[none] Win2K-f 38 of 41 17:37:46 17:37:46 1 none none:none
 none|none none none
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 05:43:45 05:43:45 1 none none:none
 none|none 33% lines=60 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 15:37:11 16:41:43 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
d8040f84d4
NEW		 none[none] WinXP 39 of 41 21:35:19 21:35:19 1 none none:none
 none|none none none
b8076e37ae
NEW		 52953fed05 [0] Win2K-f 28 of 41 18:24:26 18:24:26 1 none none:none
 StarForce| none trace
785e86954f
NEW
827d304221
NEW
87e1117f2a
NEW
b4fe4581c3
NEW
dece7e8313
NEW		 c6edee8e8b [0]
none [none]
3ff643aae6[0]
599b835896[0]
none [none]		 WinXP 41 of 41 05:53:16 05:53:16 1 none none:none
none:none
none:none
none:none
none:none
 PeStubOEP|
none|none
tElock|
Armadillo|
none|none		 none
none
none
none
none		 trace
none
trace
trace
none
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 15:49:26 15:49:26 1 none ASM:Graph
 none|none 55% lines=59 trace
19f9cb1f21
NEW		 8b1482be5d [0] WinXP 38 of 39 00:32:20 00:32:20 1 none none:none
 Armadillo| none trace
26f56abb1e
NEW
99b248336f
NEW
9b6ea363eb
NEW
9d677c3f70
NEW		 none[none]
c64bd1a776[0]
none [none]
77e75ff10f[0]		 Win2K-f 29 of 32 03:17:46 03:17:46 1 none none:none
none:none
none:none
none:none
 none|none
Armadillo|
none|none
tElock|		 none
none
none
none		 none
trace
none
trace
785e86954f
NEW
827d304221
NEW
87e1117f2a
NEW
b4fe4581c3
NEW		 c6edee8e8b [0]
none [none]
3ff643aae6[0]
599b835896[0]		 WinXP 29 of 33 05:53:16 05:53:16 1 none none:none
none:none
none:none
none:none
 PeStubOEP|
none|none
tElock|
Armadillo|		 none
none
none
none		 trace
none
trace
trace
6152c54fc2
NEW		 ccc8b54f0a [0] WinXP 41 of 41 13:18:25 13:18:25 1 none none:none
 ASPack| none trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 21:18:15 21:18:15 1 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace