Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



05 November 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
2deb2753bb
NEW
3fd8ae17fe
NEW
827e44840a
NEW
99e40412c8
NEW
b34e640329
NEW
b6a0b73e41
NEW
b8fb945b41
NEW
ebe6886424
NEW
f2c83ae118
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 1 of 43 08:02:00 08:02:00 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
2deb2753bb
NEW
none[none] Win2K-f 5 of 43 07:50:35 08:02:00 2 none none:none
none|none none none
6eda5f32a0
NEW
none[none] WinXP 42 of 43 11:53:33 11:53:33 1 none none:none
none|none none none
24137d8412
NEW
73a916deb4 [0] WinXP 31 of 32 06:30:03 06:30:03 1 none none:none
PolyEnE| none trace
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
Win2K-f
WinXP
0 of 32 00:53:28 09:30:17 4 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
2cba8ab1d1
NEW
none[none] WinXP 42 of 43 12:19:17 12:19:17 1 none none:none
none|none none none
223aed41c0
NEW
2deb2753bb
NEW
4672286640
NEW
827e44840a
NEW
99e40412c8
NEW
b6a0b73e41
NEW
bea8cb1865
NEW
f21e7c8b7b
NEW
fac78fde16
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
154de51a66[0]
none [none]
882896ab05[0]
Win2K-f 35 of 36 07:50:35 07:50:35 1 none none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
ASM:Graph
none|none
none|none
none|none
none|none
none|none
none|none
Armadillo|
none|none
tElock|
96% none
none
none
none
none
none
lines=91
none
lines=126
embedded dns
none
none
none
none
none
none
trace
none
trace
067917e07b
NEW
d764c1dcb2
NEW
dae35b319c [0]
3d2bc60c5d[0]
Win2K-f 38 of 40 18:21:26 18:21:26 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
1595515522
NEW
none[none] WinXP 34 of 36 10:56:59 10:56:59 1 none none:none
none|none none none
53bfe15e91
NEW
1473091351 [0] Win2K-f
WinXP
33 of 33 00:53:28 22:07:30 11 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
866ac9b262
NEW
none[none] WinXP 39 of 41 07:45:47 07:45:47 1 none none:none
none|none none none
b8e6f4caf7
NEW
fb92b91fe7
NEW
f81eac6379 [0]
fe88ab8768[0]
Win2K-f 39 of 39 06:56:36 06:56:36 1 none none:none
none:none
tElock|
Armadillo|
none
none
trace
trace
de4624560d
NEW
none[none] WinXP 40 of 42 11:10:19 11:10:19 1 none none:none
none|none none none
71e6f60517
NEW
ab4e3226c4
NEW
1ef1781501 [0]
c2d0313e73[0]
Win2K-f 40 of 41 09:07:25 09:07:25 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=91
none
trace
trace
07fabc79ef
NEW
none[0] WinXP 0 of 32 04:48:13 04:48:13 1 none none:none
Armadillo| 0% lines=90 trace
761a66b891
NEW
b469dac5dc [0] Win2K-f 38 of 41 16:18:29 16:18:29 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
8b41cb7a41
NEW
ef18d720f3 [0] Win2K-f 3 of 41 12:43:06 19:13:17 2 none ASM:Graph
Armadillo| 0% lines=90 trace
223aed41c0
NEW
2deb2753bb
NEW
4672286640
NEW
827e44840a
NEW
99e40412c8
NEW
b6a0b73e41
NEW
bea8cb1865
NEW
f21e7c8b7b
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
154de51a66[0]
none [none]
Win2K-f 16 of 41 07:50:35 07:50:35 1 none none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
none|none
none|none
none|none
none|none
none|none
none|none
Armadillo|
none|none
none
none
none
none
none
none
lines=91
none
none
none
none
none
none
none
trace
none
b1e2bf9715
NEW
none[none] WinXP 41 of 43 00:08:20 00:08:20 1 none none:none
none|none none none
a9235bcf32
NEW
none[none] Win2K-f 26 of 42 23:59:07 23:59:07 1 none none:none
none|none none none
6e6fde936f
NEW
none[none] WinXP 41 of 43 06:31:21 06:31:21 1 none none:none
none|none none none
986b59708d
NEW
none[0] WinXP 29 of 29 03:40:46 03:40:46 1 none none:none
PolyEnE| 100% lines=57 trace
b8e6f4caf7
NEW
f81eac6379 [0] Win2K-f 39 of 40 06:56:36 06:56:36 1 none none:none
tElock| none trace
8b41cb7a41
NEW
97fef473b9
NEW
ef18d720f3 [0]
ff4e7d6992[0]
Win2K-f 33 of 33 12:43:06 19:13:17 2 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=90
lines=64
embedded dns
trace
trace
5c6df5141d
NEW
none[none] WinXP 41 of 41 11:11:37 12:09:27 2 none none:none
none|none none none
786e1aafc9
NEW
none[none] Win2K-f 40 of 42 13:05:38 13:05:38 1 none none:none
none|none none none
223aed41c0
NEW
none[none] Win2K-f 8 of 39 07:50:35 07:50:35 1 none none:none
none|none none none
5818023061
NEW
none[0] WinXP 32 of 32 14:30:55 14:30:55 1 none none:none
PolyEnE| 99% lines=68 trace
2deb2753bb
NEW
3fd8ae17fe
NEW
827e44840a
NEW
99e40412c8
NEW
b34e640329
NEW
b6a0b73e41
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 25 of 43 07:50:35 08:02:00 2 none none:none
none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
none
none
none
none
067917e07b
NEW
dae35b319c [0] Win2K-f 36 of 41 18:21:26 18:21:26 1 none ASM:Graph
Armadillo| 0% lines=91 trace
2deb2753bb
NEW
3fd8ae17fe
NEW
827e44840a
NEW
99e40412c8
NEW
b34e640329
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 29 of 43 08:02:00 08:02:00 1 none none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
none
none
2deb2753bb
NEW
3fd8ae17fe
NEW
none[none]
none [none]
Win2K-f 22 of 43 08:02:00 08:02:00 1 none none:none
none:none
none|none
none|none
none
none
none
none
d11b1f56f9
NEW
none[none] WinXP 40 of 41 14:18:00 14:18:00 1 none none:none
none|none none none
9716d7995a
NEW
c3a5354b6f [0] WinXP 35 of 35 00:37:14 10:50:01 3 none ASM:Graph
PolyEnE| 99% lines=68 trace
761a66b891
NEW
98d05c039b
NEW
b469dac5dc [0]
none [none]
Win2K-f 38 of 41 16:18:29 16:18:29 1 none ASM:Graph
none:none
tElock|
none|none
lines=64
embedded dns
none
trace
none
2deb2753bb
NEW
3fd8ae17fe
NEW
827e44840a
NEW
99e40412c8
NEW
b34e640329
NEW
b6a0b73e41
NEW
b8fb945b41
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 17 of 38 08:02:00 08:02:00 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
7f60162c2c
NEW
none[0] WinXP 25 of 25 12:44:01 12:44:01 1 none none:none
PolyEnE| 100% lines=93
embedded dns
trace
2deb2753bb
NEW
3fd8ae17fe
NEW
827e44840a
NEW
99e40412c8
NEW
none[none]
none [none]
none [none]
none [none]
Win2K-f 17 of 42 07:50:35 08:02:00 2 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
2deb2753bb
NEW
3fd8ae17fe
NEW
827e44840a
NEW
none[none]
none [none]
none [none]
Win2K-f 14 of 43 07:50:35 08:02:00 2 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
07fabc79ef
NEW
df6ab00d2f
NEW
none[0]
none [none]
WinXP 41 of 43 04:48:13 04:48:13 1 none none:none
none:none
Armadillo|
none|none
lines=90
none
trace
none
786e1aafc9
NEW
effd4eb45d
NEW
none[none]
none [none]
Win2K-f 42 of 43 13:05:38 13:05:38 1 none none:none
none:none
none|none
none|none
none
none
none
none
223aed41c0
NEW
2deb2753bb
NEW
4672286640
NEW
none[none]
none [none]
none [none]
Win2K-f 21 of 42 07:50:35 07:50:35 1 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
831f4ee0a7
NEW
none[0] WinXP 29 of 29 06:51:46 06:51:46 1 none none:none
none|none 33% lines=60 trace
223aed41c0
NEW
2deb2753bb
NEW
4672286640
NEW
827e44840a
NEW
99e40412c8
NEW
b6a0b73e41
NEW
bea8cb1865
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
154de51a66[0]
Win2K-f 32 of 36 07:50:35 07:50:35 1 none none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
none|none
none|none
none|none
none|none
none|none
none|none
Armadillo|
0% none
none
none
none
none
none
lines=91
none
none
none
none
none
none
trace
0563ea7af7
NEW
7e1532574f
NEW
bc2e11a802 [0]
e6930769d0[0]
WinXP 39 of 41 03:33:10 03:33:10 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=65
embedded dns
lines=91
trace
trace
7d99b0e910
NEW
none[0] WinXP 26 of 28 03:16:55 15:51:53 6 none none:none
PolyEnE| 99% lines=68 trace
53bfe15e91
NEW
57ce4acac2
NEW
1473091351 [0]
none [0]
Win2K-f 0 of 33 22:07:30 22:07:30 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
71e6f60517
NEW
1ef1781501 [0] Win2K-f 40 of 41 09:07:25 09:07:25 1 none ASM:Graph
Armadillo| 0% lines=91 trace
2deb2753bb
NEW
3fd8ae17fe
NEW
827e44840a
NEW
99e40412c8
NEW
b34e640329
NEW
b6a0b73e41
NEW
b8fb945b41
NEW
ebe6886424
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 11 of 42 08:02:00 08:02:00 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
none
c60f1343b5
NEW
none[none] WinXP 37 of 41 23:50:35 23:50:35 1 none none:none
none|none none none
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
WinXP
Win2K-f
0 of 33 01:18:54 22:03:27 6 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
27b8ca6a46
NEW
none[none] Win2K-f 43 of 43 20:12:04 20:12:04 1 none none:none
none|none none none
c3fff4063b
NEW
none[none] WinXP 42 of 43 02:53:46 02:53:46 1 none none:none
none|none none none
b8076e37ae
NEW
52953fed05 [0] Win2K-f 28 of 41 13:57:56 13:57:56 1 none none:none
StarForce| none trace
d8040f84d4
NEW
d683995e84 [0] WinXP 39 of 41 05:29:21 05:29:21 1 none ASM:Graph
PolyEnE| 100% lines=73 trace
6351b1f921
NEW
none[none] WinXP 37 of 42 16:54:33 16:54:33 1 none none:none
none|none none none
97264c7178
NEW
none[none] WinXP 40 of 42 10:57:10 10:57:10 1 none none:none
none|none none none
8a2553433c
NEW
none[none] WinXP 38 of 42 09:01:29 23:23:36 2 none none:none
none|none none none
d9cb288f31
NEW
45603a001c [0] Win2K-f 3 of 37 23:50:19 23:50:19 1 none ASM:Graph
UPX| 92% lines=174
embedded dns
trace
0563ea7af7
NEW
bc2e11a802 [0] WinXP 39 of 41 03:33:10 03:33:10 1 none ASM:Graph
tElock| 96% lines=65
embedded dns
trace