Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


05 February 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
7b313206a2
NEW		 0c866c8cce [0] WinXP 38 of 41 03:16:14 03:16:14 1 none ASM:Graph
 none|none 55% lines=59 trace
1824c59f34
NEW
a2ce42b73d
NEW		 da8a48fc3a [0]
7a3b0aaf43[none]		 Win2K-f
WinXP		 11 of 41 02:01:50 16:48:58 3 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
10759405e0
NEW		 292d343248 [0] Win2K-f 38 of 41 22:18:30 22:18:30 1 none none:none
 Armadillo| none trace
0b5b28162f
NEW
1cb8ccc934
NEW
2f6cbb629b
NEW
3fdd4f3c45
NEW
87e1117f2a
NEW
a2ce42b73d
NEW
b4fe4581c3
NEW
b6cd57d0d4
NEW
c29fdec720
NEW		 4ef82ff329 [none]
3fb6dba4ec[none]
none [none]
7490cd7fa2[none]
3ff643aae6[0]
7a3b0aaf43[none]
599b835896[0]
85badb652a[none]
3d4b2f8037[none]		 Win2K-f 11 of 39 02:01:50 02:01:50 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 Armadillo|
none|none
none|none
PeCompact|
tElock|
none|none
Armadillo|
none|none
tElock|		 none
none
none
none
none
none
none
none
none		 none
none
none
none
trace
none
trace
none
none
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 32 21:28:14 21:28:14 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
1824c59f34
NEW		 da8a48fc3a [0] Win2K-f 40 of 41 16:48:58 16:48:58 1 none none:none
 tElock| none trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 03:53:31 03:59:18 2 none none:none
 UPX| none trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 00:16:46 23:47:47 6 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
0b5b28162f
NEW		 4ef82ff329 [none] Win2K-f 7 of 40 02:01:50 02:01:50 1 none none:none
 Armadillo| none none
07fabc79ef
NEW		 none[0] Win2K-f 0 of 32 22:40:41 22:40:41 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
3fdd4f3c45
NEW
50fedbbad0
NEW
87e1117f2a
NEW		 7490cd7fa2 [none]
3af1df6f55[none]
3ff643aae6[0]		 Win2K-f
WinXP		 32 of 33 02:01:50 14:57:02 2 none none:none
none:none
none:none
 PeCompact|
FSG|
tElock|		 none
none
none		 none
none
trace
dcc4d7f9bb
NEW		 f63727b2f4 [0] WinXP 40 of 41 20:28:15 20:28:15 1 none none:none
 PolyEnE| none trace
34cbe7a593
NEW
3e83a2d4d7
NEW		 d38cb78003 [0]
b97fd63d29[0]		 Win2K-f 38 of 41 15:02:54 15:02:54 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 WinXP
Win2K-f		 8 of 33 03:11:16 18:12:03 2 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
559acaa271
NEW		 none[3] Win2K-f 35 of 41 23:40:18 23:40:18 1 none none:none
 none|none none trace
0b5b28162f
NEW
1cb8ccc934
NEW
2f6cbb629b
NEW
3fdd4f3c45
NEW
87e1117f2a
NEW
a2ce42b73d
NEW
b4fe4581c3
NEW
b6cd57d0d4
NEW
c29fdec720
NEW
e38b22bbb2
NEW		 4ef82ff329 [none]
3fb6dba4ec[none]
none [none]
7490cd7fa2[none]
3ff643aae6[0]
7a3b0aaf43[none]
599b835896[0]
85badb652a[none]
3d4b2f8037[none]
52540c8a15[none]		 Win2K-f 13 of 40 02:01:50 02:01:50 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 Armadillo|
none|none
none|none
PeCompact|
tElock|
none|none
Armadillo|
none|none
tElock|
StarForce|		 none
none
none
none
none
none
none
none
none
none		 none
none
none
none
trace
none
trace
none
none
none
d42c1cc7c0
NEW		 none[0] WinXP 29 of 29 14:14:11 14:14:11 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 14:33:10 14:33:10 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
0b5b28162f
NEW
1cb8ccc934
NEW		 4ef82ff329 [none]
3fb6dba4ec[none]		 Win2K-f 12 of 38 02:01:50 02:01:50 1 none none:none
none:none
 Armadillo|
none|none		 none
none		 none
none
216ec67841
NEW		 none[3] Win2K-f 2 of 37 11:32:44 11:42:28 2 none none:none
 StarForce| none trace
f502585714
NEW		 none[0] WinXP 29 of 29 12:56:17 12:56:17 1 none none:none
 PolyEnE| 100% lines=63 trace
218ce30f5c
NEW		 none[3] WinXP 18 of 35 23:50:40 23:50:40 1 none none:none
 none|none none trace
eb33ccfff8
NEW		 e732a43be0 [none] WinXP 40 of 41 15:56:11 15:56:11 1 none none:none
 none|none none none
3fdd4f3c45
NEW		 7490cd7fa2 [none] Win2K-f
WinXP		 12 of 39 02:01:50 14:57:02 2 none none:none
 PeCompact| none none
3d004f8b75
NEW		 none[none] Win2K-f 38 of 40 19:15:01 19:15:01 1 none none:none
 none|none none none
741e3b03b3
NEW		 none[0] WinXP 31 of 32 05:13:31 05:13:31 1 none none:none
 none|none 32% lines=61 trace
3fdd4f3c45
NEW
50fedbbad0
NEW
87e1117f2a
NEW
a2ce42b73d
NEW
b4fe4581c3
NEW
b6cd57d0d4
NEW
bdcb743f88
NEW
e88caeb330
NEW		 7490cd7fa2 [none]
3af1df6f55[none]
3ff643aae6[0]
7a3b0aaf43[none]
599b835896[0]
85badb652a[none]
none [none]
none [none]		 WinXP 14 of 40 14:57:02 14:57:02 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 PeCompact|
FSG|
tElock|
none|none
Armadillo|
none|none
none|none
none|none		 none
none
none
none
none
none
none
none		 none
none
trace
none
trace
none
none
none
3fdd4f3c45
NEW
50fedbbad0
NEW		 7490cd7fa2 [none]
3af1df6f55[none]		 WinXP 9 of 40 14:57:02 14:57:02 1 none none:none
none:none
 PeCompact|
FSG|		 none
none		 none
none
34cbe7a593
NEW		 d38cb78003 [0] Win2K-f 36 of 41 15:02:54 15:02:54 1 none none:none
 Armadillo| none trace
4180c19d91
NEW
b6e91e001c
NEW		 9f3f2de385 [0]
d2275a6cf5[0]		 Win2K-f 38 of 41 14:05:30 14:05:30 1 none none:none
none:none
 Armadillo|
PolyEnE|		 none
none		 trace
trace
0cfab99612
NEW		 none[0] WinXP 29 of 29 15:24:40 15:24:40 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 01:55:42 23:11:02 4 none none:none
 PolyEnE| 99% lines=68 trace
10759405e0
NEW
d08e00dfaf
NEW		 292d343248 [0]
854c49d8c4[0]		 Win2K-f 39 of 41 22:18:30 22:18:30 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
3fdd4f3c45
NEW
50fedbbad0
NEW
87e1117f2a
NEW
a2ce42b73d
NEW
b4fe4581c3
NEW
b6cd57d0d4
NEW		 7490cd7fa2 [none]
3af1df6f55[none]
3ff643aae6[0]
7a3b0aaf43[none]
599b835896[0]
85badb652a[none]		 Win2K-f
WinXP		 5 of 41 02:01:50 14:57:02 2 none none:none
none:none
none:none
none:none
none:none
none:none
 PeCompact|
FSG|
tElock|
none|none
Armadillo|
none|none		 none
none
none
none
none
none		 none
none
trace
none
trace
none
0b5b28162f
NEW
1cb8ccc934
NEW
2f6cbb629b
NEW		 4ef82ff329 [none]
3fb6dba4ec[none]
none [none]		 Win2K-f 0 of 40 02:01:50 02:01:50 1 none none:none
none:none
none:none
 Armadillo|
none|none
none|none		 none
none
none		 none
none
none
218ce30f5c
NEW
a08f3b74a4
NEW		 none[3]
none [0]		 Win2K-f
WinXP		 0 of 33 00:16:46 23:50:40 3 none none:none
none:none
 none|none
Armadillo|		 0% none
lines=90		 trace
trace
2b9bc1463d
NEW		 7978e0f6fb [0] WinXP 40 of 41 06:33:46 06:33:46 1 none none:none
 PolyEnE| none trace
1824c59f34
NEW
a2ce42b73d
NEW
bdcb743f88
NEW		 da8a48fc3a [0]
7a3b0aaf43[none]
none [none]		 WinXP
Win2K-f		 10 of 39 14:57:02 16:48:58 2 none none:none
none:none
none:none
 tElock|
none|none
none|none		 none
none
none		 trace
none
none
d8040f84d4
NEW		 d683995e84 [0] WinXP 39 of 41 12:23:31 12:23:31 1 none none:none
 PolyEnE| none trace
1824c59f34
NEW
a2ce42b73d
NEW
bdcb743f88
NEW
caaeb70f9f
NEW		 da8a48fc3a [0]
7a3b0aaf43[none]
none [none]
fdabb272e7[0]		 Win2K-f 39 of 41 16:48:58 16:48:58 1 none none:none
none:none
none:none
none:none
 tElock|
none|none
none|none
Armadillo|		 none
none
none
none		 trace
none
none
trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 08:35:32 08:35:32 1 none ASM:Graph
 none|none 55% lines=59 trace
4180c19d91
NEW		 9f3f2de385 [0] Win2K-f 37 of 41 14:05:30 14:05:30 1 none none:none
 Armadillo| none trace
3fdd4f3c45
NEW
50fedbbad0
NEW
87e1117f2a
NEW
a2ce42b73d
NEW
b4fe4581c3
NEW		 7490cd7fa2 [none]
3af1df6f55[none]
3ff643aae6[0]
7a3b0aaf43[none]
599b835896[0]		 Win2K-f
WinXP		 29 of 33 02:01:50 14:57:02 2 none none:none
none:none
none:none
none:none
none:none
 PeCompact|
FSG|
tElock|
none|none
Armadillo|		 none
none
none
none
none		 none
none
trace
none
trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 03:08:51 16:48:03 4 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace