Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


15 November 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
ecfbf321d3
NEW		 none[none] WinXP 38 of 41 10:48:21 10:48:21 1 none none:none
 none|none none none
23e02d8dc8
NEW
5ee6911378
NEW
654f6f25df
NEW		 none[none]
none [none]
none [none]		 Win2K-f 26 of 41 11:26:39 11:33:04 2 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
16581ff3a1
NEW
278df56902
NEW		 none[none]
none [none]		 Win2K-f 29 of 43 11:26:39 11:26:39 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 03:17:08 23:39:13 7 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
bf6d8c0115
NEW		 none[none] WinXP 42 of 43 15:59:46 15:59:46 1 none none:none
 none|none none none
1595515522
NEW		 none[none] WinXP 34 of 36 06:47:29 06:47:29 1 none none:none
 none|none none none
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 03:17:08 23:39:13 15 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
866ac9b262
NEW		 none[none] WinXP 39 of 41 15:53:55 15:53:55 1 none none:none
 none|none none none
d1b3b1de91
NEW		 none[none] WinXP 42 of 43 02:26:21 05:24:42 2 none none:none
 none|none none none
07fabc79ef
NEW		 none[0] Win2K-f 0 of 32 04:51:20 04:51:20 1 none none:none
 Armadillo| 0% lines=90 trace
8015c2d45f
NEW		 749cbc2739 [0] WinXP 40 of 41 01:25:23 07:11:10 2 none ASM:Graph
 PolyEnE| 100% lines=68 trace
8b41cb7a41
NEW		 ef18d720f3 [0] WinXP 3 of 41 02:02:30 02:02:30 1 none ASM:Graph
 Armadillo| 0% lines=90 trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 19:24:30 19:24:30 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
b415d4fbfc
NEW		 none[none] WinXP 41 of 43 07:14:04 07:14:04 1 none none:none
 none|none none none
6e6fde936f
NEW		 none[none] WinXP 41 of 43 08:40:00 11:05:54 2 none none:none
 none|none none none
986b59708d
NEW		 none[0] WinXP 29 of 29 04:24:39 04:24:39 1 none none:none
 PolyEnE| 100% lines=57 trace
23e02d8dc8
NEW
5ee6911378
NEW		 none[none]
none [none]		 Win2K-f 26 of 43 11:26:39 11:33:04 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
270559591a
NEW
b3ae886db6
NEW		 none[none]
none [none]		 WinXP 38 of 41 15:28:58 15:28:58 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3ce8dd4359
NEW		 cb80a979e8 [0] WinXP 20 of 29 04:42:49 04:42:49 1 none ASM:Graph
 ASPack| 0% lines=2 trace
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 00:29:56 05:19:53 2 none ASM:Graph
 PolyEnE| 99% lines=73 trace
8971a9b750
NEW		 none[none] Win2K-f 33 of 42 07:42:27 07:42:27 1 none none:none
 none|none none none
8b41cb7a41
NEW
97fef473b9
NEW		 ef18d720f3 [0]
ff4e7d6992[0]		 WinXP 33 of 33 02:02:30 02:02:30 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=90
lines=64
embedded dns		 trace
trace
76bdf840c8
NEW		 none[none] WinXP 42 of 43 06:23:43 06:23:43 1 none none:none
 none|none none none
16581ff3a1
NEW
278df56902
NEW
3e90ae8532
NEW		 none[none]
none [none]
none [none]		 Win2K-f 15 of 43 11:26:39 11:26:39 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
23e02d8dc8
NEW		 none[none] Win2K-f 1 of 43 11:33:04 11:33:04 1 none none:none
 none|none none none
0114824891
NEW		 none[none] WinXP 42 of 43 06:00:32 13:51:42 2 none none:none
 none|none none none
16581ff3a1
NEW		 none[none] Win2K-f 13 of 42 11:26:39 11:26:39 1 none none:none
 none|none none none
9716d7995a
NEW		 c3a5354b6f [0] WinXP 35 of 35 09:25:12 17:38:49 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
420b1a76c4
NEW		 none[none] WinXP 42 of 43 09:22:18 09:22:18 1 none none:none
 none|none none none
4c3df24b32
NEW		 none[0] Win2K-f 0 of 33 20:52:51 20:52:51 1 none none:none
 Armadillo| 0% lines=90 trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 04:39:29 18:20:51 4 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
16581ff3a1
NEW
278df56902
NEW
3e90ae8532
NEW
5ee6911378
NEW
654f6f25df
NEW
827e44840a
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 14 of 43 11:26:39 11:26:39 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none		 none
none
none
none
none
none
741e3b03b3
NEW		 none[0] WinXP 31 of 32 20:25:35 20:25:35 1 none none:none
 none|none 32% lines=61 trace
68b5e580f0
NEW		 none[none] Win2K-f 38 of 41 17:09:19 17:09:19 1 none none:none
 none|none none none
e158a924e8
NEW		 none[none] WinXP 40 of 43 11:50:53 11:50:53 1 none none:none
 none|none none none
e1b13a07d7
NEW		 none[none] WinXP 41 of 43 03:58:52 03:58:52 1 none none:none
 none|none none none
751685117f
NEW		 none[none] WinXP 40 of 42 05:13:04 05:13:04 1 none none:none
 none|none none none
ff95ab4410
NEW		 none[none] WinXP 40 of 43 21:59:06 21:59:06 1 none none:none
 none|none none none
68b5e580f0
NEW
b475ce7c0b
NEW		 none[none]
none [none]		 Win2K-f 38 of 41 17:09:19 17:09:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
16581ff3a1
NEW
278df56902
NEW
3e90ae8532
NEW
5ee6911378
NEW
654f6f25df
NEW
827e44840a
NEW
ab9c4b5f21
NEW
b4afa1df1d
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
5fe48b2dcc[0]
none [none]		 Win2K-f 41 of 43 11:26:39 11:26:39 1 none none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
 none|none
none|none
none|none
none|none
none|none
none|none
Armadillo|
none|none		 none
none
none
none
none
none
lines=42
none		 none
none
none
none
none
none
trace
none
7d99b0e910
NEW		 none[0] WinXP 26 of 28 00:36:44 22:48:58 10 none none:none
 PolyEnE| 99% lines=68 trace
459d2bddeb
NEW		 10fac04dd2 [0] Win2K-f 40 of 41 22:13:06 22:13:06 1 none ASM:Graph
 none|none 98% lines=546 trace
16581ff3a1
NEW
278df56902
NEW
3e90ae8532
NEW
5ee6911378
NEW
654f6f25df
NEW
827e44840a
NEW
ab9c4b5f21
NEW
b4afa1df1d
NEW
d789c8d157
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
5fe48b2dcc[0]
none [none]
5f6572479f[0]		 Win2K-f 31 of 33 11:26:39 11:26:39 1 none none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
ASM:Graph
 none|none
none|none
none|none
none|none
none|none
none|none
Armadillo|
none|none
PolyEnE|		 95% none
none
none
none
none
none
lines=42
none
lines=113
embedded dns		 none
none
none
none
none
none
trace
none
trace
fa9dfa8179
NEW		 none[none] Win2K-f 41 of 42 11:31:45 11:31:45 1 none none:none
 none|none none none
6455904435
NEW		 none[none] WinXP 38 of 41 10:20:18 19:38:19 2 none none:none
 none|none none none
ac9e84c925
NEW		 none[none] WinXP 34 of 41 14:42:26 14:42:26 1 none none:none
 none|none none none
16581ff3a1
NEW
278df56902
NEW
3e90ae8532
NEW
5ee6911378
NEW
654f6f25df
NEW
827e44840a
NEW
ab9c4b5f21
NEW
b4afa1df1d
NEW
d789c8d157
NEW
d802244b8f
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
5fe48b2dcc[0]
none [none]
5f6572479f[0]
none [none]		 Win2K-f 15 of 43 11:26:39 11:26:39 1 none none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
ASM:Graph
none:none
 none|none
none|none
none|none
none|none
none|none
none|none
Armadillo|
none|none
PolyEnE|
none|none		 none
none
none
none
none
none
lines=42
none
lines=113
embedded dns
none		 none
none
none
none
none
none
trace
none
trace
none
4ca3056804
NEW		 none[0] Win2K-f 1 of 33 23:22:14 23:22:14 1 none none:none
 Armadillo| 0% lines=90 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 05:58:52 13:03:39 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
d20f157117
NEW		 738f555183 [0] WinXP 34 of 34 04:47:00 13:12:24 5 none ASM:Graph
 PolyEnE| 99% lines=68 trace
d88d8a987a
NEW		 none[none] WinXP 25 of 32 04:01:43 04:01:43 1 none none:none
 none|none none none
16581ff3a1
NEW
278df56902
NEW
3e90ae8532
NEW
5ee6911378
NEW
654f6f25df
NEW
827e44840a
NEW
ab9c4b5f21
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
5fe48b2dcc[0]		 Win2K-f 39 of 41 11:26:39 11:26:39 1 none none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
 none|none
none|none
none|none
none|none
none|none
none|none
Armadillo|		 0% none
none
none
none
none
none
lines=42		 none
none
none
none
none
none
trace
26ba4fd8e8
NEW		 none[none] Win2K-f 37 of 41 05:30:44 05:30:44 1 none none:none
 none|none none none
d8040f84d4
NEW		 d683995e84 [0] WinXP 39 of 41 08:03:35 08:03:35 1 none ASM:Graph
 PolyEnE| 100% lines=73 trace
70ec5c4b3f
NEW		 f697adabdd [0] Win2K-f 39 of 40 15:46:58 15:46:58 1 none none:none
 StarForce| none trace
270559591a
NEW		 none[none] WinXP 38 of 41 15:28:58 15:28:58 1 none none:none
 none|none none none
02b2b6af5f
NEW		 none[none] WinXP 41 of 43 14:58:01 14:58:01 1 none none:none
 none|none none none
5e8ccc4190
NEW		 8d5f86583f [0] WinXP 39 of 40 03:18:58 05:34:36 2 none ASM:Graph
 PolyEnE| 100% lines=68 trace
65db8c1d0d
NEW		 none[none] WinXP 40 of 40 01:48:13 01:48:13 1 none none:none
 none|none none none
8a2553433c
NEW		 none[none] WinXP 38 of 42 01:00:50 13:49:47 2 none none:none
 none|none none none
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 07:19:21 07:19:21 1 none ASM:Graph
 none|none 55% lines=59 trace
a0139d7ad8
NEW		 none[0] WinXP 29 of 29 10:13:43 10:13:43 1 none none:none
 PolyEnE| 99% lines=68 trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 15:40:19 15:49:01 2 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace