Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



24 September 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
ecfbf321d3
NEW
none[none] WinXP 38 of 41 21:44:41 21:44:41 1 none none:none
none|none none none
178b0be402
NEW
none[none] Win2K-f 41 of 43 04:12:44 04:12:44 1 none none:none
none|none none none
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
Win2K-f
WinXP
0 of 32 05:58:36 14:00:19 4 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
34d6e95d5b
NEW
519ddb74fa
NEW
5a6ae63b41
NEW
bea8cb1865
NEW
c9ce78ee55
NEW
f34ba103d5
NEW
fac78fde16
NEW
none[none]
none [none]
none [none]
154de51a66[0]
none [none]
none [none]
882896ab05[0]
Win2K-f 35 of 36 14:15:43 14:15:43 1 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
ASM:Graph
none|none
none|none
none|none
Armadillo|
none|none
none|none
tElock|
96% none
none
none
lines=91
none
none
lines=126
embedded dns
none
none
none
trace
none
none
trace
a1fac31325
NEW
0fd057b5e2 [0] Win2K-f 39 of 42 11:56:15 11:56:15 1 none none:none
Armadillo| none trace
53bfe15e91
NEW
1473091351 [0] Win2K-f
WinXP
33 of 33 05:58:36 22:50:48 7 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
6619e9b2b4
NEW
none[none] Win2K-f 41 of 43 07:41:53 07:41:53 1 none none:none
none|none none none
168aab35a3
NEW
3a894ba0c8
NEW
aa6d257461
NEW
60b730b97e [0]
none [none]
6aca567868[0]
WinXP 39 of 41 04:12:27 04:12:27 1 none ASM:Graph
none:none
ASM:Graph
tElock|
none|none
Armadillo|
0% lines=120
embedded dns
none
lines=91
trace
none
trace
a1fac31325
NEW
c018e17b5b
NEW
0fd057b5e2 [0]
8caee80d88[0]
Win2K-f 39 of 42 11:56:15 11:56:15 1 none none:none
none:none
Armadillo|
StarForce|
none
none
trace
trace
8d6ca7ac6d
NEW
none[none] WinXP 39 of 41 20:08:26 20:08:26 1 none none:none
none|none none none
0b21965b60
NEW
none[none] Win2K-f 0 of 43 19:59:08 19:59:08 1 none none:none
none|none none none
34d6e95d5b
NEW
36bb7118f0
NEW
36ea92775a
NEW
50d08d2188
NEW
519ddb74fa
NEW
54ea83d248
NEW
5a6ae63b41
NEW
b4afa1df1d
NEW
f34ba103d5
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 4 of 42 14:15:43 19:16:33 2 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
0b21965b60
NEW
36ea92775a
NEW
c69512a223
NEW
none[none]
none [none]
none [none]
WinXP
Win2K-f
36 of 43 04:12:27 19:59:08 2 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
761a66b891
NEW
b469dac5dc [0] WinXP 38 of 41 00:14:53 01:58:02 2 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
34d6e95d5b
NEW
none[none] Win2K-f 28 of 43 14:15:43 19:16:33 2 none none:none
none|none none none
53bfe15e91
NEW
b7082104e4
NEW
1473091351 [0]
c5b49e7b82[0]
Win2K-f 8 of 33 10:49:49 10:49:49 1 none ASM:Graph
ASM:Graph
tElock|
tElock|
100% lines=75
embedded dns
lines=41
trace
trace
986b59708d
NEW
none[0] WinXP 29 of 29 05:02:39 05:02:39 1 none none:none
PolyEnE| 100% lines=57 trace
168aab35a3
NEW
3a894ba0c8
NEW
aa6d257461
NEW
c69512a223
NEW
c814a3fa5c
NEW
60b730b97e [0]
none [none]
6aca567868[0]
none [none]
none [none]
WinXP 1 of 43 04:12:27 04:12:27 1 none ASM:Graph
none:none
ASM:Graph
none:none
none:none
tElock|
none|none
Armadillo|
none|none
none|none
lines=120
embedded dns
none
lines=91
none
none
trace
none
trace
none
none
c7810eeed9
NEW
none[none] Win2K-f 42 of 42 21:55:43 21:55:43 1 none none:none
none|none none none
6b315f5dbc
NEW
7938865f8c
NEW
7604b94520 [0]
a9b9e4904b[0]
WinXP 39 of 41 10:03:39 10:03:39 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
168aab35a3
NEW
60b730b97e [0] WinXP 31 of 33 04:12:27 04:12:27 1 none ASM:Graph
tElock| 95% lines=120
embedded dns
trace
5c39773b13
NEW
c64405f2e9 [0] Win2K-f 38 of 41 12:46:57 12:46:57 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
1cc884727f
NEW
none[none] WinXP 37 of 42 04:19:26 04:19:26 1 none none:none
none|none none none
5c39773b13
NEW
a1acc403a2
NEW
c64405f2e9 [0]
54ef26c2f9[0]
Win2K-f 37 of 41 12:46:57 12:46:57 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
c19c8a2776
NEW
none[none] WinXP 42 of 43 05:37:49 05:37:49 1 none none:none
none|none none none
6a6aaa5b73
NEW
8bde6dd126
NEW
63889c9976 [0]
885c68f500[0]
Win2K-f 40 of 41 00:51:37 00:51:37 1 none ASM:Graph
ASM:Graph
tElock|
tElock|
96% lines=42
lines=64
embedded dns
trace
trace
b76c839fa8
NEW
none[none] Win2K-f 7 of 43 19:47:18 19:47:18 1 none none:none
none|none none none
168aab35a3
NEW
3a894ba0c8
NEW
60b730b97e [0]
none [none]
WinXP 31 of 43 04:12:27 04:12:27 1 none ASM:Graph
none:none
tElock|
none|none
lines=120
embedded dns
none
trace
none
6a6aaa5b73
NEW
63889c9976 [0] Win2K-f 39 of 40 00:51:37 00:51:37 1 none ASM:Graph
tElock| 100% lines=42 trace
6b315f5dbc
NEW
7604b94520 [0] WinXP 39 of 41 10:03:39 10:03:39 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
34d6e95d5b
NEW
36bb7118f0
NEW
36ea92775a
NEW
50d08d2188
NEW
none[none]
none [none]
none [none]
none [none]
Win2K-f 24 of 43 19:16:33 19:16:33 1 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
6619e9b2b4
NEW
cfde4d2eec
NEW
none[none]
none [none]
Win2K-f 41 of 43 07:41:53 07:41:53 1 none none:none
none:none
none|none
none|none
none
none
none
none
761a66b891
NEW
98d05c039b
NEW
b469dac5dc [0]
none [none]
WinXP 38 of 41 00:14:53 01:58:02 2 none ASM:Graph
none:none
tElock|
none|none
lines=64
embedded dns
none
trace
none
741df48030
NEW
none[none] WinXP 37 of 43 04:30:55 14:42:01 3 none none:none
none|none none none
e498202948
NEW
none[none] WinXP 39 of 42 07:04:25 07:04:25 1 none none:none
none|none none none
7f60162c2c
NEW
none[0] WinXP 25 of 25 10:10:36 16:52:32 2 none none:none
PolyEnE| 100% lines=93
embedded dns
trace
43b8f21924
NEW
none[3] Win2K-f 32 of 41 15:04:36 15:04:36 1 none none:none
none|none none trace
34d6e95d5b
NEW
519ddb74fa
NEW
5a6ae63b41
NEW
bea8cb1865
NEW
c9ce78ee55
NEW
none[none]
none [none]
none [none]
154de51a66[0]
none [none]
Win2K-f 22 of 43 14:15:43 14:15:43 1 none none:none
none:none
none:none
ASM:Graph
none:none
none|none
none|none
none|none
Armadillo|
none|none
none
none
none
lines=91
none
none
none
none
trace
none
ba1a7eaa9a
NEW
none[none] WinXP 41 of 42 05:15:40 05:15:40 1 none none:none
none|none none none
178b0be402
NEW
c4be4e4a28
NEW
none[none]
none [none]
Win2K-f 41 of 43 04:12:44 04:12:44 1 none none:none
none:none
none|none
none|none
none
none
none
none
34d6e95d5b
NEW
519ddb74fa
NEW
5a6ae63b41
NEW
bea8cb1865
NEW
none[none]
none [none]
none [none]
154de51a66[0]
Win2K-f 32 of 36 14:15:43 14:15:43 1 none none:none
none:none
none:none
ASM:Graph
none|none
none|none
none|none
Armadillo|
0% none
none
none
lines=91
none
none
none
trace
4180c19d91
NEW
b6e91e001c
NEW
9f3f2de385 [0]
d2275a6cf5[0]
Win2K-f 38 of 41 15:59:00 15:59:00 1 none ASM:Graph
ASM:Graph
Armadillo|
PolyEnE|
96% lines=91
lines=64
embedded dns
trace
trace
7d7da21a34
NEW
none[none] WinXP 41 of 43 05:48:08 08:43:11 2 none none:none
none|none none none
780aaf9cfa
NEW
none[none] WinXP 41 of 42 08:52:02 08:52:02 1 none none:none
none|none none none
34d6e95d5b
NEW
36bb7118f0
NEW
36ea92775a
NEW
50d08d2188
NEW
519ddb74fa
NEW
54ea83d248
NEW
5a6ae63b41
NEW
b4afa1df1d
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 41 of 43 19:16:33 19:16:33 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
e1693609f9
NEW
none[3] WinXP 17 of 41 12:36:18 12:36:18 1 none none:none
none|none none trace
7d99b0e910
NEW
none[0] WinXP 26 of 28 01:24:10 12:18:18 4 none none:none
PolyEnE| 99% lines=68 trace
db03c02347
NEW
none[none] WinXP 40 of 41 17:50:45 17:50:45 1 none none:none
none|none none none
ea08813f54
NEW
none[none] WinXP 40 of 41 03:48:16 03:48:16 1 none none:none
none|none none none
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
Win2K-f 0 of 33 22:01:07 22:50:48 2 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
92e29a98bd
NEW
57d7791117 [0] Win2K-f 35 of 38 04:04:57 04:04:57 1 none ASM:Graph
none|none 98% lines=546 trace
34d6e95d5b
NEW
36bb7118f0
NEW
none[none]
none [none]
Win2K-f 25 of 41 19:16:33 19:16:33 1 none none:none
none:none
none|none
none|none
none
none
none
none
0b21965b60
NEW
36ea92775a
NEW
none[none]
none [none]
Win2K-f 16 of 43 19:16:33 19:59:08 2 none none:none
none:none
none|none
none|none
none
none
none
none
34d6e95d5b
NEW
36bb7118f0
NEW
36ea92775a
NEW
50d08d2188
NEW
519ddb74fa
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 20 of 42 14:15:43 19:16:33 2 none none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
none
none
34d6e95d5b
NEW
36bb7118f0
NEW
36ea92775a
NEW
50d08d2188
NEW
519ddb74fa
NEW
54ea83d248
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 40 of 43 19:16:33 19:16:33 1 none none:none
none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
none
none
none
none
8d6ca7ac6d
NEW
fdc64deaa5
NEW
none[none]
none [none]
WinXP 40 of 42 20:08:26 20:08:26 1 none none:none
none:none
none|none
none|none
none
none
none
none
4180c19d91
NEW
9f3f2de385 [0] Win2K-f 37 of 41 15:59:00 15:59:00 1 none ASM:Graph
Armadillo| 0% lines=91 trace
6c7f20a91f
NEW
none[none] WinXP 41 of 43 13:56:05 13:56:05 1 none none:none
none|none none none
9783554cde
NEW
none[none] Win2K-f 43 of 43 06:32:38 06:32:38 1 none none:none
none|none none none
34d6e95d5b
NEW
36bb7118f0
NEW
36ea92775a
NEW
50d08d2188
NEW
519ddb74fa
NEW
54ea83d248
NEW
5a6ae63b41
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 2 of 43 14:15:43 19:16:33 2 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
d9cb288f31
NEW
45603a001c [0] Win2K-f 3 of 37 00:57:35 01:06:17 2 none ASM:Graph
UPX| 92% lines=174
embedded dns
trace