Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


02 August 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
c13a6c3da5
NEW		 1d04d6dc84 [0] WinXP 40 of 41 08:11:23 08:11:23 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
1a6c7da535
NEW		 1d04d6dc84 [0] Win2K-f 30 of 39 07:38:07 07:38:07 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
ffbb6cbe61
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 16:43:42 16:43:42 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
0629d7fc42
NEW		 none[none] Win2K-f 40 of 40 14:40:10 14:40:10 1 none none:none
 none|none none none
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 32 09:53:10 09:53:10 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
379a6daa0d
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 39 of 40 08:32:12 14:54:47 4 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
3490e2ea15
NEW		 1d04d6dc84 [0] WinXP 38 of 40 09:54:23 09:54:23 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
31ae779411
NEW
bea8cb1865
NEW
fac78fde16
NEW		 none[none]
154de51a66[0]
882896ab05[0]		 Win2K-f 35 of 36 07:03:11 07:03:11 1 none none:none
ASM:Graph
ASM:Graph
 none|none
Armadillo|
tElock|		 96% none
lines=91
lines=126
embedded dns		 none
trace
trace
53bfe15e91
NEW		 1473091351 [0] WinXP 33 of 33 09:53:10 22:33:05 2 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
682a384fe9
NEW		 none[3] Win2K-f 31 of 41 14:41:01 14:41:01 1 none none:none
 none|none none trace
067d2ab57e
NEW		 none[none] Win2K-f 41 of 42 07:35:29 07:35:29 1 none none:none
 none|none none none
9363d60262
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 36 of 40 07:34:25 11:30:04 3 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
250e546031
NEW		 none[none] WinXP 41 of 42 07:41:27 07:41:27 1 none none:none
 none|none none none
f534041536
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 11:29:55 11:29:55 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
7960f6113b
NEW		 none[none] WinXP 40 of 42 08:03:09 08:03:09 1 none none:none
 none|none none none
6a4845ca11
NEW		 c23d00870b [0] WinXP 0 of 0 07:46:00 07:46:00 1 none ASM:Graph
 tElock| 95% lines=120
embedded dns		 trace
8b41cb7a41
NEW		 ef18d720f3 [0] WinXP 3 of 41 07:22:31 07:22:31 1 none ASM:Graph
 Armadillo| 0% lines=90 trace
761a66b891
NEW		 b469dac5dc [0] WinXP 38 of 41 05:11:13 05:11:13 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
ae7a5cd8b1
NEW		 18ff3687ad [0] Win2K-f 40 of 41 13:43:50 13:43:50 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
ae80523c0e
NEW		 none[none] Win2K-f
WinXP		 39 of 42 08:35:14 09:36:10 2 none none:none
 none|none none none
c4f4cf6afa
NEW		 none[none] Win2K-f 40 of 41 08:16:14 12:21:39 2 none none:none
 none|none none none
8583b476c4
NEW
b6a8e96230
NEW		 none[none]
none [none]		 WinXP 38 of 41 14:51:02 14:51:02 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
88f39e2bbf
NEW		 none[none] Win2K-f 40 of 42 08:18:09 08:18:09 1 none none:none
 none|none none none
5ed2885224
NEW		 none[none] Win2K-f 41 of 41 12:09:27 12:09:27 1 none none:none
 none|none none none
1b3d8e9fe7
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 39 of 41 07:35:48 09:02:28 3 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
96a0cbeb88
NEW		 none[none] Win2K-f 31 of 42 10:51:07 10:51:07 1 none none:none
 none|none none none
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 00:06:28 00:06:28 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
f16fcee967
NEW		 none[none] WinXP 41 of 41 10:31:09 10:31:09 1 none none:none
 none|none none none
5c6df5141d
NEW		 none[none] WinXP 41 of 41 04:55:50 04:55:50 1 none none:none
 none|none none none
8b41cb7a41
NEW
97fef473b9
NEW		 ef18d720f3 [0]
ff4e7d6992[0]		 WinXP 33 of 33 07:22:31 07:22:31 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=90
lines=64
embedded dns		 trace
trace
f3932b94a6
NEW		 910494cc45 [0] WinXP 40 of 41 13:14:36 13:14:36 1 none ASM:Graph
 none|none 98% lines=546 trace
fe87c62b51
NEW		 fe87c62b51 [1] Win2K-f 38 of 41 08:58:27 10:04:07 2 none ASM:Graph
 pex| 42% lines=19 trace
f45285574e
NEW		 d984958bf9 [0] WinXP 40 of 41 21:51:47 21:51:47 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
6a4845ca11
NEW
ffafd341d9
NEW		 c23d00870b [0]
294fb27545[0]		 WinXP 38 of 40 07:46:00 07:46:00 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=120
embedded dns
lines=91		 trace
trace
6f89425f8a
NEW		 6480c2f949 [0] WinXP 30 of 32 03:03:39 03:03:39 1 none ASM:Graph
 PolyEnE| 100% lines=73 trace
8583b476c4
NEW		 none[none] WinXP 38 of 41 14:51:02 14:51:02 1 none none:none
 none|none none none
4dd4197eb4
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 37 of 40 08:18:40 09:21:47 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
fe4eef18e1
NEW		 none[none] WinXP 40 of 42 06:29:52 06:29:52 1 none none:none
 none|none none none
409ef22885
NEW		 none[3] Win2K-f 2 of 37 18:02:52 18:02:52 1 none none:none
 UPX| none trace
598fd8ba00
NEW		 none[none] WinXP 35 of 42 09:34:49 09:34:49 1 none none:none
 none|none none none
761a66b891
NEW
98d05c039b
NEW		 b469dac5dc [0]
none [none]		 WinXP 38 of 41 05:11:13 05:11:13 1 none ASM:Graph
none:none
 tElock|
none|none		 lines=64
embedded dns
none		 trace
none
7f60162c2c
NEW		 none[0] WinXP 25 of 25 12:32:19 20:50:19 4 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
e25842bcd6
NEW		 none[none] Win2K-f 41 of 41 09:47:56 13:06:51 3 none none:none
 none|none none none
741e3b03b3
NEW		 none[0] WinXP 31 of 32 10:00:59 10:00:59 1 none none:none
 none|none 32% lines=61 trace
6e4e6297a0
NEW		 none[none] Win2K-f 17 of 42 11:01:09 11:01:09 1 none none:none
 none|none none none
50cdd5c6cf
NEW		 1d04d6dc84 [0] Win2K-f 37 of 40 10:11:26 10:11:26 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
b68d420d61
NEW		 1d04d6dc84 [0] WinXP 40 of 41 08:07:40 08:07:40 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
17f476ffd5
NEW		 none[none] Win2K-f 40 of 41 06:12:36 06:12:36 1 none none:none
 none|none none none
31ae779411
NEW
bea8cb1865
NEW		 none[none]
154de51a66[0]		 Win2K-f 32 of 36 07:03:11 07:03:11 1 none none:none
ASM:Graph
 none|none
Armadillo|		 0% none
lines=91		 none
trace
1b1db1c992
NEW
8a50345c2f
NEW		 a8036b5105 [0]
585123125f[0]		 Win2K-f 40 of 41 07:56:50 22:54:12 2 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
46223f7d9a
NEW		 none[none] WinXP 39 of 42 13:22:51 13:22:51 1 none none:none
 none|none none none
1b1db1c992
NEW		 a8036b5105 [0] Win2K-f 39 of 41 07:56:50 22:54:12 2 none ASM:Graph
 Armadillo| 0% lines=91 trace
8128405d8c
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 12:55:11 12:55:11 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 11:37:39 12:27:39 2 none none:none
 PolyEnE| 99% lines=68 trace
ab9c4b5f21
NEW
d789c8d157
NEW		 5fe48b2dcc [0]
5f6572479f[0]		 Win2K-f 31 of 33 02:14:58 02:14:58 1 none ASM:Graph
ASM:Graph
 Armadillo|
PolyEnE|		 95% lines=42
lines=113
embedded dns		 trace
trace
598fd8ba00
NEW
b3bf8ce518
NEW		 none[none]
none [none]		 WinXP 39 of 41 09:34:49 09:34:49 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
c9aed378f1
NEW		 4fadf3fb74 [0] Win2K-f 40 of 41 07:50:05 07:50:05 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 23:51:49 23:51:49 1 none none:none
 none|none 33% lines=60 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 22:33:05 22:33:05 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
ab9c4b5f21
NEW		 5fe48b2dcc [0] Win2K-f 39 of 41 02:14:58 02:14:58 1 none ASM:Graph
 Armadillo| 0% lines=42 trace
e3faefa56a
NEW		 1d04d6dc84 [0] WinXP 40 of 41 08:53:33 10:24:46 3 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
31ae779411
NEW		 none[none] Win2K-f 31 of 41 02:41:56 07:03:11 3 none none:none
 none|none none none
17f476ffd5
NEW
85025082b4
NEW		 none[none]
none [none]		 Win2K-f 32 of 42 02:41:56 06:12:36 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
957eacda80
NEW		 none[none] Win2K-f 29 of 42 12:36:09 12:36:09 1 none none:none
 none|none none none
013a5ba10e
NEW		 1d04d6dc84 [0] Win2K-f 40 of 40 10:04:34 10:04:34 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 00:11:56 00:11:56 1 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace