Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


16 January 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
1a6c7da535
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 30 of 39 03:32:24 13:39:53 5 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 32 07:45:30 16:30:47 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
379a6daa0d
NEW		 1d04d6dc84 [0] Win2K-f
WinXP		 39 of 40 02:52:59 11:11:23 4 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
1eb4f9ad5b
NEW
6e36427ade
NEW
7670bfe380
NEW		 none[none]
none [none]
none [none]		 Win2K-f 0 of 0 15:16:29 15:16:29 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 02:33:58 19:40:17 7 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
1eb4f9ad5b
NEW
371ffb2c8b
NEW
6e36427ade
NEW
79383ccc54
NEW
8a75955033
NEW
9276c8b36b
NEW
a2ce42b73d
NEW
b4d75f9c8e
NEW
c077724843
NEW		 none[none]
none [none]
none [none]
none [none]
2bf3e548b9[0]
none [0]
none [none]
none [none]
none [none]		 Win2K-f 0 of 0 15:16:29 17:46:36 2 none none:none
none:none
none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
tElock|
Armadillo|
none|none
none|none
none|none		 none
none
none
none
lines=126
embedded dns
lines=81
none
none
none		 none
none
none
none
trace
trace
none
none
none
1eb4f9ad5b
NEW
6e36427ade
NEW
7670bfe380
NEW
79383ccc54
NEW
87e1117f2a
NEW		 none[none]
none [none]
none [none]
none [none]
3ff643aae6[0]		 Win2K-f 32 of 33 15:16:29 15:16:29 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
tElock|		 none
none
none
none
none		 none
none
none
none
trace
1eb4f9ad5b
NEW
371ffb2c8b
NEW		 none[none]
none [none]		 Win2K-f 16 of 41 17:46:36 17:46:36 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
61a9127875
NEW		 61a9127875 [1] WinXP 38 of 41 08:05:41 08:05:41 1 none ASM:Graph
 pex| 42% lines=19 trace
3f89b1ddee
NEW		 20017af26d [0] Win2K-f 39 of 40 18:27:13 18:27:13 1 none none:none
 tElock| none trace
1b3d8e9fe7
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 39 of 41 03:00:47 07:00:07 3 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
8887d42f5c
NEW		 afaf06d6cd [0] Win2K-f 38 of 41 04:54:12 09:41:16 2 none none:none
 pex| none trace
220053b50c
NEW		 none[none] WinXP 0 of 0 15:45:46 15:45:46 1 none none:none
 none|none none none
80563974df
NEW		 afaf06d6cd [0] Win2K-f 38 of 41 05:35:49 05:35:49 1 none none:none
 pex| none trace
84b1b363a1
NEW		 1e4ad6cdb1 [0] Win2K-f 38 of 40 22:38:42 22:38:42 1 none none:none
 ASPack| none trace
4dd4197eb4
NEW		 1d04d6dc84 [0] Win2K-f 37 of 40 03:33:37 22:47:13 4 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 00:05:42 00:05:42 1 none none:none
 none|none 32% lines=61 trace
4d4b7efca2
NEW		 ec83dac222 [0] Win2K-f 36 of 41 10:53:40 10:53:40 1 none none:none
 Armadillo| none trace
50cdd5c6cf
NEW		 1d04d6dc84 [0] Win2K-f 37 of 40 09:26:49 09:26:49 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
4180c19d91
NEW
b6e91e001c
NEW		 9f3f2de385 [0]
d2275a6cf5[0]		 Win2K-f 38 of 41 08:40:16 08:40:16 1 none none:none
none:none
 Armadillo|
PolyEnE|		 none
none		 trace
trace
5e3a9c2d9d
NEW
630308d06b
NEW		 dbc48b815a [0]
847d302e37[0]		 Win2K-f 39 of 41 20:21:07 20:21:07 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
c473a72583
NEW		 none[none] Win2K-f 0 of 0 11:38:28 11:38:28 1 none none:none
 none|none none none
6704922c65
NEW		 none[none] WinXP 0 of 0 06:29:34 06:29:34 1 none none:none
 none|none none none
1eb4f9ad5b
NEW		 none[none] Win2K-f 0 of 0 15:16:29 17:46:36 2 none none:none
 none|none none none
d8e60db98a
NEW		 6991257f56 [0] Win2K-f 37 of 40 03:44:39 03:44:39 1 none none:none
 pex| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 02:33:58 19:40:17 4 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
844356b69c
NEW		 none[none] Win2K-f 0 of 0 09:14:16 09:14:16 1 none none:none
 none|none none none
c60a9b8b7a
NEW		 none[none] Win2K-f 0 of 0 08:25:08 08:25:08 1 none none:none
 none|none none none
e3faefa56a
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 40 of 41 05:00:03 13:23:50 3 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
820384a62e
NEW		 none[none] Win2K-f 0 of 0 06:58:19 06:58:19 1 none none:none
 none|none none none
4180c19d91
NEW		 9f3f2de385 [0] Win2K-f 37 of 41 08:40:16 08:40:16 1 none none:none
 Armadillo| none trace
013a5ba10e
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 40 of 40 02:57:28 22:43:00 7 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
a0139d7ad8
NEW		 none[0] WinXP 29 of 29 03:27:20 03:27:20 1 none none:none
 PolyEnE| 99% lines=68 trace
1eb4f9ad5b
NEW
6e36427ade
NEW
7670bfe380
NEW
79383ccc54
NEW
87e1117f2a
NEW
b4fe4581c3
NEW		 none[none]
none [none]
none [none]
none [none]
3ff643aae6[0]
599b835896[0]		 Win2K-f 29 of 33 15:16:29 15:16:29 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
tElock|
Armadillo|		 none
none
none
none
none
none		 none
none
none
none
trace
trace
5fa6f2f4f2
NEW		 none[none] Win2K-f 0 of 0 03:13:01 03:13:01 1 none none:none
 none|none none none
c13a6c3da5
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 07:09:05 07:09:05 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
1eb4f9ad5b
NEW
371ffb2c8b
NEW
6e36427ade
NEW
79383ccc54
NEW
8a75955033
NEW
9276c8b36b
NEW
a2ce42b73d
NEW		 none[none]
none [none]
none [none]
none [none]
2bf3e548b9[0]
none [0]
none [none]		 Win2K-f 11 of 41 17:46:36 17:46:36 1 none none:none
none:none
none:none
none:none
ASM:Graph
ASM:Graph
none:none
 none|none
none|none
none|none
none|none
tElock|
Armadillo|
none|none		 none
none
none
none
lines=126
embedded dns
lines=81
none		 none
none
none
none
trace
trace
none
ffbb6cbe61
NEW		 1d04d6dc84 [none] WinXP
Win2K-f		 40 of 41 04:32:03 09:55:51 3 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
db12dac6c7
NEW		 none[none] Win2K-f 0 of 0 02:56:50 02:56:50 1 none none:none
 none|none none none
332ee73652
NEW		 none[none] Win2K-f 0 of 0 21:48:57 21:48:57 1 none none:none
 none|none none none
3490e2ea15
NEW		 1d04d6dc84 [0] Win2K-f 38 of 40 18:36:08 18:36:08 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
c91c60dd02
NEW		 acfce17a48 [0] WinXP 39 of 41 00:52:33 00:52:33 1 none none:none
 PolyEnE| none trace
9363d60262
NEW		 none[none] Win2K-f
WinXP		 36 of 40 05:35:11 10:51:42 3 none none:none
 none|none none none
1eb4f9ad5b
NEW
371ffb2c8b
NEW
6e36427ade
NEW
79383ccc54
NEW
8a75955033
NEW
9276c8b36b
NEW		 none[none]
none [none]
none [none]
none [none]
2bf3e548b9[0]
none [0]		 Win2K-f 28 of 32 17:46:36 17:46:36 1 none none:none
none:none
none:none
none:none
ASM:Graph
ASM:Graph
 none|none
none|none
none|none
none|none
tElock|
Armadillo|		 47% none
none
none
none
lines=126
embedded dns
lines=81		 none
none
none
none
trace
trace
5e3a9c2d9d
NEW		 dbc48b815a [0] Win2K-f 40 of 41 20:21:07 20:21:07 1 none none:none
 tElock| none trace
f534041536
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 03:46:30 10:54:19 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
1eb4f9ad5b
NEW
371ffb2c8b
NEW
6e36427ade
NEW
79383ccc54
NEW
8a75955033
NEW
9276c8b36b
NEW
a2ce42b73d
NEW
b4d75f9c8e
NEW		 none[none]
none [none]
none [none]
none [none]
2bf3e548b9[0]
none [0]
none [none]
none [none]		 Win2K-f 0 of 0 17:46:36 17:46:36 1 none none:none
none:none
none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
 none|none
none|none
none|none
none|none
tElock|
Armadillo|
none|none
none|none		 none
none
none
none
lines=126
embedded dns
lines=81
none
none		 none
none
none
none
trace
trace
none
none
c03793a035
NEW		 none[none] Win2K-f 41 of 41 07:55:09 11:21:35 2 none none:none
 none|none none none
4d4b7efca2
NEW
539d61fc06
NEW		 ec83dac222 [0]
c3af874c93[0]		 Win2K-f 38 of 41 10:53:40 10:53:40 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
97da1e046e
NEW		 none[none] WinXP 0 of 0 07:25:21 07:25:21 1 none none:none
 none|none none none
3e40107c32
NEW		 none[none] WinXP 0 of 0 06:48:05 06:48:05 1 none none:none
 none|none none none
e0dc02ee4b
NEW		 none[none] WinXP
Win2K-f		 40 of 41 04:25:59 09:30:39 3 none none:none
 none|none none none
c45a01fbcc
NEW		 none[none] Win2K-f 0 of 0 16:38:16 16:38:16 1 none none:none
 none|none none none
1eb4f9ad5b
NEW
371ffb2c8b
NEW
6e36427ade
NEW		 none[none]
none [none]
none [none]		 Win2K-f 12 of 41 15:16:29 17:46:36 2 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
29a3030e16
NEW		 1d04d6dc84 [none] Win2K-f
WinXP		 41 of 41 03:56:03 15:49:01 4 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
1eb4f9ad5b
NEW
371ffb2c8b
NEW
6e36427ade
NEW
79383ccc54
NEW
8a75955033
NEW		 none[none]
none [none]
none [none]
none [none]
2bf3e548b9[0]		 Win2K-f 29 of 32 17:46:36 17:46:36 1 none none:none
none:none
none:none
none:none
ASM:Graph
 none|none
none|none
none|none
none|none
tElock|		 96% none
none
none
none
lines=126
embedded dns		 none
none
none
none
trace
e3f7886e3c
NEW		 none[none] WinXP 0 of 0 02:21:09 02:21:09 1 none none:none
 none|none none none
7f60162c2c
NEW		 none[0] WinXP 25 of 25 09:17:10 09:17:10 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
82e755f5d3
NEW		 none[none] Win2K-f 0 of 0 08:07:16 08:07:16 1 none none:none
 none|none none none
3dc7b40786
NEW		 none[none] WinXP 0 of 0 12:01:29 12:01:29 1 none none:none
 none|none none none
3f89b1ddee
NEW
6b887aded4
NEW		 20017af26d [0]
c28c1ffb6f[0]		 Win2K-f 39 of 41 18:27:13 18:27:13 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
b68d420d61
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 08:02:02 10:42:11 3 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
1eb4f9ad5b
NEW
371ffb2c8b
NEW
6e36427ade
NEW
79383ccc54
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 5 of 41 15:16:29 17:46:36 2 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
1b1db1c992
NEW
8a50345c2f
NEW		 a8036b5105 [0]
585123125f[0]		 WinXP 40 of 41 20:06:55 20:06:55 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
f996bf0275
NEW		 none[none] Win2K-f 0 of 0 11:32:26 12:55:54 2 none none:none
 none|none none none
1b1db1c992
NEW		 a8036b5105 [0] WinXP 39 of 41 20:06:55 20:06:55 1 none none:none
 Armadillo| none trace
0274cfa236
NEW		 none[none] Win2K-f 0 of 0 08:12:58 08:12:58 1 none none:none
 none|none none none
8128405d8c
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 03:22:29 10:39:04 4 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
46bf358cc3
NEW		 none[none] Win2K-f 0 of 0 02:56:56 02:56:56 1 none none:none
 none|none none none
7d99b0e910
NEW		 none[0] WinXP 26 of 28 14:49:53 14:49:53 1 none none:none
 PolyEnE| 99% lines=68 trace
1eb4f9ad5b
NEW
371ffb2c8b
NEW
6e36427ade
NEW
79383ccc54
NEW
8a75955033
NEW
9276c8b36b
NEW
a2ce42b73d
NEW
b4d75f9c8e
NEW
c077724843
NEW
dad848734c
NEW		 none[none]
none [none]
none [none]
none [none]
2bf3e548b9[0]
none [0]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 0 of 0 15:16:29 17:46:36 2 none none:none
none:none
none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
tElock|
Armadillo|
none|none
none|none
none|none
none|none		 none
none
none
none
lines=126
embedded dns
lines=81
none
none
none
none		 none
none
none
none
trace
trace
none
none
none
none
c9aed378f1
NEW		 none[none] Win2K-f 0 of 0 06:25:43 06:25:43 1 none none:none
 none|none none none
332ee73652
NEW
a56538ee3d
NEW		 none[none]
none [none]		 Win2K-f 0 of 0 21:48:57 21:48:57 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
9810215e67
NEW		 18ff3687ad [0] Win2K-f 37 of 40 12:14:54 12:14:54 1 none none:none
 ASPack| none trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 18:26:26 18:26:26 1 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace