Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


05 January 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
c13a6c3da5
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 01:05:16 06:00:17 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
1a6c7da535
NEW		 1d04d6dc84 [0] Win2K-f 30 of 39 03:46:02 03:46:02 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
0448650359
NEW		 none[none] Win2K-f 34 of 40 00:43:20 00:43:20 1 none none:none
 none|none none none
10759405e0
NEW		 292d343248 [0] Win2K-f 38 of 41 08:49:26 08:49:26 1 none none:none
 Armadillo| none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 16:04:09 20:36:49 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
19f9cb1f21
NEW
a9d40bc96b
NEW		 8b1482be5d [0]
b07fa6d434[0]		 Win2K-f 40 of 41 13:42:14 16:10:47 2 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
379a6daa0d
NEW		 1d04d6dc84 [0] WinXP 39 of 40 04:40:46 04:40:46 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
3490e2ea15
NEW		 1d04d6dc84 [0] Win2K-f 38 of 40 01:55:26 01:55:26 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
14f47ffd1e
NEW		 90bf4b99ff [0] Win2K-f 40 of 41 22:15:32 22:15:32 1 none none:none
 tElock| none trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 00:06:49 20:36:49 6 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
9363d60262
NEW		 none[none] WinXP 36 of 40 03:57:39 03:57:39 1 none none:none
 none|none none none
87e1117f2a
NEW		 3ff643aae6 [0] WinXP 32 of 33 13:34:23 13:34:23 1 none none:none
 tElock| none trace
2cf0ba5461
NEW		 none[none] Win2K-f 40 of 41 02:46:52 02:46:52 1 none none:none
 none|none none none
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 00:06:49 00:06:49 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
53bcb942c4
NEW
6d4ed181c0
NEW		 none[none]
none [none]		 Win2K-f 39 of 41 09:25:31 09:25:31 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
c03793a035
NEW		 none[none] Win2K-f 41 of 41 02:14:30 02:14:30 1 none none:none
 none|none none none
18727a186e
NEW		 1ea861ccfa [0] Win2K-f 3 of 41 06:45:35 06:45:35 1 none none:none
 Armadillo| none trace
1b3d8e9fe7
NEW		 1d04d6dc84 [0] Win2K-f 39 of 41 00:27:25 00:27:25 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
47d3548e36
NEW
d8722af110
NEW		 ab13346633 [0]
ab30a55931[0]		 WinXP 36 of 40 22:30:26 22:30:26 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
e0dc02ee4b
NEW		 none[none] Win2K-f 40 of 41 01:44:10 04:40:54 2 none none:none
 none|none none none
73ce2b74da
NEW		 none[0] Win2K-f 3 of 33 14:14:20 14:14:20 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
8887d42f5c
NEW		 afaf06d6cd [0] Win2K-f 38 of 41 01:11:53 01:11:53 1 none none:none
 pex| none trace
d42c1cc7c0
NEW		 none[0] WinXP 29 of 29 15:54:18 15:54:18 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
1bb4b25c0e
NEW		 9293a2c3db [0] Win2K-f 28 of 41 03:23:38 03:23:38 1 none none:none
 StarForce| none trace
e3199ed3a3
NEW		 none[none] Win2K-f 40 of 41 03:31:58 03:31:58 1 none none:none
 none|none none none
7f60162c2c
NEW		 none[0] WinXP 25 of 25 09:21:16 19:59:48 2 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
1fdcad552c
NEW		 none[none] Win2K-f 37 of 40 04:09:32 04:09:32 1 none none:none
 none|none none none
3ae357d17b
NEW		 none[0] WinXP 29 of 29 12:18:43 21:42:10 3 none ASM:Graph
 PolyEnE| 99% lines=73 trace
47d3548e36
NEW		 ab13346633 [0] WinXP 37 of 41 22:30:26 22:30:26 1 none none:none
 Armadillo| none trace
8128405d8c
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 40 of 41 02:01:00 06:33:37 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
73ce2b74da
NEW
79c01ec060
NEW		 none[0]
1bfd34056c[0]		 Win2K-f 33 of 33 14:14:20 14:14:20 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=64
embedded dns		 trace
trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 06:48:21 06:48:21 1 none none:none
 PolyEnE| 99% lines=68 trace
10759405e0
NEW
d08e00dfaf
NEW		 292d343248 [0]
854c49d8c4[0]		 Win2K-f 39 of 41 08:49:26 08:49:26 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
084b71b74d
NEW		 8a425894ca [0] Win2K-f
WinXP		 38 of 41 02:15:13 03:39:33 2 none none:none
 pex| none trace
7ea0317789
NEW		 none[none] Win2K-f 38 of 40 06:13:31 06:13:31 1 none none:none
 none|none none none
14f47ffd1e
NEW
50437008d9
NEW		 90bf4b99ff [0]
c1b09ac5d7[0]		 Win2K-f 5 of 41 22:15:32 22:15:32 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 04:39:47 07:53:27 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
53bcb942c4
NEW		 none[none] Win2K-f 39 of 41 09:25:31 09:25:31 1 none none:none
 none|none none none
ab5e47bf8d
NEW		 67fb5eff61 [0] WinXP 29 of 29 11:36:35 11:36:35 1 none none:none
 ASPack| none trace
19f9cb1f21
NEW		 8b1482be5d [0] Win2K-f 38 of 39 13:42:14 16:10:47 2 none none:none
 Armadillo| none trace
013a5ba10e
NEW		 1d04d6dc84 [0] Win2K-f 40 of 40 05:47:54 05:47:54 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
ef816f1e7c
NEW		 none[none] Win2K-f 32 of 41 00:18:18 00:18:18 1 none none:none
 none|none none none
87e1117f2a
NEW
b4fe4581c3
NEW		 3ff643aae6 [0]
599b835896[0]		 WinXP 29 of 33 13:34:23 13:34:23 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 23:50:50 23:50:50 1 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace