Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


29 January 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
1c134cba22
NEW
3e6e748549
NEW
4a17b6831b
NEW
82a6b21cae
NEW
99b248336f
NEW
9a14c5c8d8
NEW
9d677c3f70
NEW
a2ce42b73d
NEW		 none[none]
none [none]
none [none]
none [none]
c64bd1a776[0]
none [none]
77e75ff10f[0]
none [none]		 Win2K-f 11 of 41 18:21:27 18:21:27 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
Armadillo|
none|none
tElock|
none|none		 none
none
none
none
none
none
none
none		 none
none
none
none
trace
none
trace
none
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 09:29:45 20:12:39 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 17:10:16 17:16:36 2 none none:none
 UPX| none trace
1c134cba22
NEW		 none[none] Win2K-f 15 of 40 18:21:27 18:21:27 1 none none:none
 none|none none none
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 09:05:56 20:12:39 5 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 09:05:56 09:05:56 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
15953b80a1
NEW		 none[none] Win2K-f 39 of 41 14:19:48 14:19:48 1 none none:none
 none|none none none
42a5385ed4
NEW		 none[none] WinXP 38 of 41 14:36:56 14:36:56 1 none none:none
 none|none none none
5c39773b13
NEW		 c64405f2e9 [0] Win2K-f 38 of 41 02:57:12 02:57:12 1 none none:none
 tElock| none trace
6a6aaa5b73
NEW
8bde6dd126
NEW		 63889c9976 [0]
885c68f500[0]		 Win2K-f 40 of 41 02:36:10 11:45:25 2 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
5c39773b13
NEW
a1acc403a2
NEW		 c64405f2e9 [0]
54ef26c2f9[0]		 Win2K-f 37 of 41 02:57:12 02:57:12 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
38ed850a0e
NEW		 46990f37cd [0] Win2K-f 34 of 38 03:56:59 22:08:04 2 none ASM:Graph
 Armadillo| 0% lines=91 trace
1c134cba22
NEW
3e6e748549
NEW
4a17b6831b
NEW
82a6b21cae
NEW
99b248336f
NEW		 none[none]
none [none]
none [none]
none [none]
c64bd1a776[0]		 Win2K-f 34 of 36 18:21:27 18:21:27 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
Armadillo|		 none
none
none
none
none		 none
none
none
none
trace
6a6aaa5b73
NEW		 63889c9976 [0] Win2K-f 39 of 40 02:36:10 11:45:25 2 none none:none
 tElock| none trace
692f9bb8df
NEW		 2bf6f4e9f0 [0] Win2K-f 37 of 41 02:53:56 02:53:56 1 none none:none
 Armadillo| none trace
1c134cba22
NEW
3e6e748549
NEW		 none[none]
none [none]		 Win2K-f 13 of 41 18:21:27 18:21:27 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
692f9bb8df
NEW
d482a2bec3
NEW		 2bf6f4e9f0 [0]
50a83c6b54[0]		 Win2K-f 38 of 41 02:53:56 02:53:56 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
1c134cba22
NEW
3e6e748549
NEW
4a17b6831b
NEW
82a6b21cae
NEW
99b248336f
NEW
9a14c5c8d8
NEW		 none[none]
none [none]
none [none]
none [none]
c64bd1a776[0]
none [none]		 Win2K-f 14 of 41 18:21:27 18:21:27 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
Armadillo|
none|none		 none
none
none
none
none
none		 none
none
none
none
trace
none
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 07:46:36 07:46:36 1 none ASM:Graph
 none|none 100% lines=61 trace
1c134cba22
NEW
3e6e748549
NEW
4a17b6831b
NEW		 none[none]
none [none]
none [none]		 Win2K-f 6 of 40 18:21:27 18:21:27 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
07cd99a10b
NEW		 f8f0f72da6 [0] WinXP 40 of 41 11:35:24 11:35:24 1 none none:none
 PolyEnE| none trace
e1693609f9
NEW		 none[3] Win2K-f 17 of 41 12:48:25 12:48:25 1 none none:none
 none|none none trace
ab9c4b5f21
NEW
d789c8d157
NEW		 5fe48b2dcc [none]
5f6572479f[0]		 Win2K-f 31 of 33 01:38:28 01:38:28 1 none none:none
none:none
 Armadillo|
PolyEnE|		 none
none		 trace
trace
474acf88e5
NEW		 1f53944b24 [0] WinXP 38 of 40 08:25:24 08:25:24 1 none none:none
 tElock| none trace
15953b80a1
NEW
def7923243
NEW		 none[none]
none [none]		 Win2K-f 14 of 40 14:19:48 14:19:48 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 14:51:16 14:51:16 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
42a5385ed4
NEW
f287d03196
NEW		 none[none]
none [none]		 WinXP 38 of 41 14:36:56 14:36:56 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1c134cba22
NEW
3e6e748549
NEW
4a17b6831b
NEW
82a6b21cae
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 0 of 41 18:21:27 18:21:27 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
2b9bc1463d
NEW		 7978e0f6fb [none] WinXP 40 of 41 10:18:47 10:18:47 1 none none:none
 PolyEnE| none trace
474acf88e5
NEW
68f0c14692
NEW		 1f53944b24 [0]
ccc1b24d53[0]		 WinXP 38 of 40 08:25:24 08:25:24 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
ab9c4b5f21
NEW		 5fe48b2dcc [none] Win2K-f 39 of 41 01:38:28 01:38:28 1 none none:none
 Armadillo| none trace
38ed850a0e
NEW
b9297745a1
NEW		 46990f37cd [0]
4294884d84[0]		 Win2K-f 35 of 38 03:56:59 22:08:04 2 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
1c134cba22
NEW
3e6e748549
NEW
4a17b6831b
NEW
82a6b21cae
NEW
99b248336f
NEW
9a14c5c8d8
NEW
9d677c3f70
NEW		 none[none]
none [none]
none [none]
none [none]
c64bd1a776[0]
none [none]
77e75ff10f[0]		 Win2K-f 29 of 32 18:21:27 18:21:27 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
Armadillo|
none|none
tElock|		 none
none
none
none
none
none
none		 none
none
none
none
trace
none
trace
aab1b56620
NEW		 3b2e1c5b9d [0] WinXP 40 of 41 11:16:15 11:16:15 1 none none:none
 PolyEnE| none trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 17:26:36 23:09:30 5 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace