Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



17 December 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
01cb81ddab
NEW
c5c8e2c4d2
NEW
d789c8d157
NEW
e5772d7d3f
NEW
none[none]
none [none]
5f6572479f[0]
none [none]
Win2K-f 6 of 41 03:54:29 05:12:27 3 none none:none
none:none
none:none
none:none
none|none
none|none
PolyEnE|
none|none
none
none
none
none
none
none
trace
none
8ed7ea5f60
NEW
none[none] Win2K-f 39 of 41 01:28:50 01:28:50 1 none none:none
none|none none none
1415b0b9e5
NEW
51110a94f0
NEW
none[none]
none [none]
Win2K-f 39 of 41 11:10:13 11:10:13 1 none none:none
none:none
none|none
none|none
none
none
none
none
2355b618e7
NEW
394775de69
NEW
869e3715f5
NEW
bea8cb1865
NEW
dd96e88e03
NEW
e5772d7d3f
NEW
f22223e96e
NEW
fac78fde16
NEW
none[none]
none [none]
none [none]
154de51a66[0]
6f87541765[0]
none [none]
none [none]
882896ab05[0]
Win2K-f 35 of 36 03:54:29 03:54:29 1 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
none:none
none:none
none|none
none|none
none|none
Armadillo|
StarForce|
none|none
none|none
tElock|
none
none
none
lines=91
none
none
none
none
none
none
none
trace
trace
none
none
trace
1fcc146d70
NEW
none[0] WinXP 29 of 29 10:28:59 10:28:59 1 none none:none
PolyEnE| 99% lines=68 trace
53bfe15e91
NEW
1473091351 [0] Win2K-f
WinXP
33 of 33 07:14:08 22:04:24 5 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
07fabc79ef
NEW
none[0] WinXP 0 of 32 18:57:21 18:57:21 1 none ASM:Graph
Armadillo| 47% lines=81 trace
8b28f44ef4
NEW
7234ef5a3c [none] WinXP 38 of 41 15:32:34 15:32:34 1 none none:none
PolyEnE| none trace
24a0785561
NEW
none[none] Win2K-f 39 of 41 06:36:37 06:36:37 1 none none:none
none|none none none
917c085aca
NEW
none[3] Win2K-f 3 of 37 02:03:06 02:11:48 2 none none:none
Armadillo| none trace
75af48afe4
NEW
7a25f9e3cf [0] WinXP 22 of 41 06:09:10 06:09:10 1 none none:none
StarForce| none trace
4d4b7efca2
NEW
539d61fc06
NEW
ec83dac222 [0]
c3af874c93[0]
Win2K-f 38 of 41 04:02:47 04:02:47 1 none none:none
none:none
Armadillo|
tElock|
none
none
trace
trace
47d3548e36
NEW
d8722af110
NEW
ab13346633 [0]
ab30a55931[0]
Win2K-f 36 of 40 20:49:39 20:49:39 1 none none:none
none:none
Armadillo|
tElock|
none
none
trace
trace
4ea751e441
NEW
04524d1332 [0] Win2K-f 40 of 41 22:44:32 22:44:32 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
01cb81ddab
NEW
none[none] Win2K-f 39 of 41 05:12:27 05:12:27 1 none none:none
none|none none none
6a6aaa5b73
NEW
8bde6dd126
NEW
63889c9976 [0]
885c68f500[0]
Win2K-f 40 of 41 00:47:22 00:47:22 1 none none:none
none:none
tElock|
tElock|
none
none
trace
trace
84ace068d1
NEW
c822a7d0e4 [0] Win2K-f 38 of 40 20:46:56 20:46:56 1 none none:none
tElock| none trace
27b17a2724
NEW
a1d5ac965b [0] Win2K-f 32 of 40 13:48:30 13:48:30 1 none none:none
tElock| none trace
05c067661e
NEW
c0ffed1019
NEW
2ce56c9369 [none]
869491794b[none]
Win2K-f 39 of 41 10:41:16 13:04:12 2 none none:none
none:none
tElock|
tElock|
none
none
trace
trace
6a6aaa5b73
NEW
63889c9976 [0] Win2K-f 39 of 40 00:47:22 00:47:22 1 none none:none
tElock| none trace
2355b618e7
NEW
394775de69
NEW
869e3715f5
NEW
bea8cb1865
NEW
dd96e88e03
NEW
e5772d7d3f
NEW
f22223e96e
NEW
none[none]
none [none]
none [none]
154de51a66[0]
6f87541765[0]
none [none]
none [none]
Win2K-f 18 of 41 03:54:29 03:54:29 1 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
none:none
none|none
none|none
none|none
Armadillo|
StarForce|
none|none
none|none
none
none
none
lines=91
none
none
none
none
none
none
trace
trace
none
none
2355b618e7
NEW
none[none] Win2K-f 22 of 41 03:54:29 03:54:29 1 none none:none
none|none none none
a3b217d38a
NEW
e453911822
NEW
none[none]
none [none]
Win2K-f 3 of 41 00:18:42 00:18:42 1 none none:none
none:none
none|none
none|none
none
none
none
none
9edda78fd7
NEW
none[none] Win2K-f 0 of 40 04:22:27 04:22:27 1 none none:none
none|none none none
2d7e6ca199
NEW
none[none] Win2K-f 39 of 41 11:48:55 11:48:55 1 none none:none
none|none none none
a25dfda335
NEW
29d2ef505b [0] WinXP 40 of 41 05:32:42 07:07:51 2 none none:none
PolyEnE| none trace
1415b0b9e5
NEW
none[none] Win2K-f 39 of 41 11:10:13 11:10:13 1 none none:none
none|none none none
01cb81ddab
NEW
c5c8e2c4d2
NEW
none[none]
none [none]
Win2K-f 20 of 41 05:12:27 05:12:27 1 none none:none
none:none
none|none
none|none
none
none
none
none
96511f48b8
NEW
none[3] Win2K-f 33 of 41 23:39:09 23:39:09 1 none none:none
none|none none trace
84ace068d1
NEW
c584af4fcd
NEW
c822a7d0e4 [0]
bdfcf0a930[0]
Win2K-f 36 of 41 20:46:56 20:46:56 1 none none:none
none:none
tElock|
Armadillo|
none
none
trace
trace
2355b618e7
NEW
394775de69
NEW
none[none]
none [none]
Win2K-f 20 of 41 03:54:29 03:54:29 1 none none:none
none:none
none|none
none|none
none
none
none
none
27b17a2724
NEW
f53988b88e
NEW
a1d5ac965b [0]
none [none]
Win2K-f 39 of 41 13:48:30 13:48:30 1 none none:none
none:none
tElock|
none|none
none
none
trace
none
4d4b7efca2
NEW
ec83dac222 [0] Win2K-f 36 of 41 04:02:47 04:02:47 1 none none:none
Armadillo| none trace
831f4ee0a7
NEW
none[0] WinXP 29 of 29 01:27:15 01:27:15 1 none ASM:Graph
none|none 100% lines=61 trace
2355b618e7
NEW
394775de69
NEW
869e3715f5
NEW
bea8cb1865
NEW
none[none]
none [none]
none [none]
154de51a66[0]
Win2K-f 32 of 36 03:54:29 03:54:29 1 none none:none
none:none
none:none
ASM:Graph
none|none
none|none
none|none
Armadillo|
0% none
none
none
lines=91
none
none
none
trace
4ea751e441
NEW
edf686131d
NEW
04524d1332 [0]
7e512b9f7a[0]
Win2K-f 39 of 41 22:44:32 22:44:32 1 none ASM:Graph
none:none
tElock|
Armadillo|
lines=64
embedded dns
none
trace
trace
2355b618e7
NEW
394775de69
NEW
869e3715f5
NEW
bea8cb1865
NEW
dd96e88e03
NEW
none[none]
none [none]
none [none]
154de51a66[0]
6f87541765[0]
Win2K-f 26 of 41 03:54:29 03:54:29 1 none none:none
none:none
none:none
ASM:Graph
none:none
none|none
none|none
none|none
Armadillo|
StarForce|
none
none
none
lines=91
none
none
none
none
trace
trace
42937b90cd
NEW
none[none] Win2K-f 0 of 41 04:32:34 04:32:34 1 none none:none
none|none none none
47d3548e36
NEW
ab13346633 [0] Win2K-f 37 of 41 20:49:39 20:49:39 1 none none:none
Armadillo| none trace
224d20f901
NEW
none[none] Win2K-f 6 of 41 23:28:54 23:28:54 1 none none:none
none|none none none
deffdf68e8
NEW
2b011e15ba [0] Win2K-f 34 of 41 19:07:19 19:07:19 1 none none:none
StarForce| none trace
01cb81ddab
NEW
c5c8e2c4d2
NEW
d789c8d157
NEW
none[none]
none [none]
5f6572479f[0]
Win2K-f 31 of 33 05:12:27 05:12:27 1 none none:none
none:none
none:none
none|none
none|none
PolyEnE|
none
none
none
none
none
trace
474acf88e5
NEW
1f53944b24 [0] Win2K-f 38 of 40 14:50:13 14:50:13 1 none none:none
tElock| none trace
2355b618e7
NEW
394775de69
NEW
869e3715f5
NEW
none[none]
none [none]
none [none]
Win2K-f 15 of 41 03:54:29 03:54:29 1 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
Win2K-f
WinXP
0 of 33 07:14:08 22:04:24 4 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
474acf88e5
NEW
68f0c14692
NEW
1f53944b24 [0]
ccc1b24d53[0]
Win2K-f 38 of 40 14:50:13 14:50:13 1 none none:none
none:none
tElock|
Armadillo|
none
none
trace
trace
a3b217d38a
NEW
none[none] Win2K-f 38 of 41 00:18:42 00:18:42 1 none none:none
none|none none none
ed96c03ca8
NEW
c0028e9e98 [0] WinXP 39 of 41 20:06:58 20:06:58 1 none none:none
PolyEnE| none trace
5865b09945
NEW
4d99f4784a [0] WinXP 36 of 38 16:13:10 16:13:10 1 none none:none
PolyEnE| none trace
2d7e6ca199
NEW
80fcea5417
NEW
none[none]
none [none]
Win2K-f 39 of 40 11:48:55 11:48:55 1 none none:none
none:none
none|none
none|none
none
none
none
none
05c067661e
NEW
2ce56c9369 [none] Win2K-f 39 of 41 10:41:16 13:04:12 2 none none:none
tElock| none trace