Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


17 November 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
ecfbf321d3
NEW		 none[none] Win2K-f
WinXP		 38 of 41 07:58:34 16:10:28 2 none none:none
 none|none none none
10759405e0
NEW		 292d343248 [0] Win2K-f 38 of 41 13:54:43 13:54:43 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
6eda5f32a0
NEW		 none[none] WinXP 42 of 43 12:24:02 12:25:37 2 none none:none
 none|none none none
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 32 07:18:07 19:48:20 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
278df56902
NEW		 none[none] Win2K-f 29 of 43 03:39:36 03:39:36 1 none none:none
 none|none none none
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 05:30:32 21:58:31 7 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
682a384fe9
NEW		 none[3] WinXP 31 of 41 14:03:17 14:03:17 1 none none:none
 none|none none trace
866ac9b262
NEW		 none[none] WinXP 39 of 41 10:10:56 18:17:17 3 none none:none
 none|none none none
6033722379
NEW		 none[none] Win2K-f 43 of 43 04:18:40 04:18:40 1 none none:none
 none|none none none
761a66b891
NEW		 b469dac5dc [0] WinXP 38 of 41 18:25:47 18:25:47 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
8b41cb7a41
NEW		 ef18d720f3 [0] Win2K-f 3 of 41 00:52:48 00:52:48 1 none ASM:Graph
 Armadillo| 0% lines=90 trace
95d1a78f0d
NEW		 none[none] WinXP 42 of 43 15:16:56 15:58:45 2 none none:none
 none|none none none
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 07:17:48 07:17:48 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
986b59708d
NEW		 none[0] WinXP 29 of 29 07:04:19 07:04:19 1 none none:none
 PolyEnE| 100% lines=57 trace
02c8f02035
NEW		 none[none] Win2K-f 41 of 43 08:57:11 08:57:11 1 none none:none
 none|none none none
9b285231fe
NEW		 a9a8f0a26f [0] WinXP 41 of 42 07:47:02 07:47:02 1 none none:none
 PolyEnE| none trace
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 13:29:37 22:18:48 2 none ASM:Graph
 PolyEnE| 99% lines=73 trace
8b41cb7a41
NEW
97fef473b9
NEW		 ef18d720f3 [0]
ff4e7d6992[0]		 Win2K-f 33 of 33 00:52:48 00:52:48 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=90
lines=64
embedded dns		 trace
trace
5d445c59d8
NEW		 892e12db7b [0] WinXP 39 of 41 19:38:07 19:38:07 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
912a073945
NEW		 7874c7f21e [0] WinXP 39 of 41 16:09:12 16:09:12 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
278df56902
NEW
3e90ae8532
NEW		 none[none]
none [none]		 Win2K-f 15 of 43 03:39:36 03:39:36 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
05a52280ab
NEW		 none[none] WinXP 40 of 41 20:40:49 20:40:49 1 none none:none
 none|none none none
d11b1f56f9
NEW		 none[none] WinXP 40 of 41 14:27:37 15:58:27 2 none none:none
 none|none none none
51a03793ab
NEW		 429f7618d3 [0] Win2K-f 37 of 41 21:57:38 21:57:38 1 none ASM:Graph
 none|none 97% lines=546 trace
761a66b891
NEW
98d05c039b
NEW		 b469dac5dc [0]
none [none]		 WinXP 38 of 41 18:25:47 18:25:47 1 none ASM:Graph
none:none
 tElock|
none|none		 lines=64
embedded dns
none		 trace
none
e52504d836
NEW		 none[none] WinXP 42 of 43 16:26:52 16:26:52 1 none none:none
 none|none none none
7f60162c2c
NEW		 none[0] WinXP 25 of 25 03:00:27 13:57:36 2 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
aad01847fa
NEW		 none[none] WinXP 42 of 43 03:12:52 03:30:04 2 none none:none
 none|none none none
278df56902
NEW
3e90ae8532
NEW
40306feecb
NEW
7ab76b4b8e
NEW
827e44840a
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 14 of 43 03:39:36 03:39:36 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
741e3b03b3
NEW		 none[0] WinXP 31 of 32 09:00:31 09:00:31 1 none none:none
 none|none 32% lines=61 trace
5d445c59d8
NEW
8a54950abb
NEW		 892e12db7b [0]
f6b9e43917[0]		 WinXP 37 of 40 19:38:07 19:38:07 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
d08635ca20
NEW		 none[none] WinXP 40 of 41 04:06:30 04:06:30 1 none none:none
 none|none none none
9fe0ab64c0
NEW		 60b46aa7dd [0] WinXP 40 of 41 09:22:04 09:22:04 1 none ASM:Graph
 none|none 55% lines=62 trace
76de0ef9f1
NEW		 none[none] Win2K-f 12 of 42 20:45:31 20:45:31 1 none none:none
 none|none none none
278df56902
NEW
3e90ae8532
NEW
40306feecb
NEW
7ab76b4b8e
NEW
827e44840a
NEW
8fa9f641e6
NEW
ab9c4b5f21
NEW
b4afa1df1d
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
5fe48b2dcc[0]
none [none]		 Win2K-f 41 of 43 03:39:36 03:39:36 1 none none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
 none|none
none|none
none|none
none|none
none|none
none|none
Armadillo|
none|none		 none
none
none
none
none
none
lines=42
none		 none
none
none
none
none
none
trace
none
eda3b7766c
NEW		 7556343561 [0] WinXP 40 of 41 14:54:37 14:54:37 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 04:46:16 14:42:52 7 none none:none
 PolyEnE| 99% lines=68 trace
10759405e0
NEW
d08e00dfaf
NEW		 292d343248 [0]
854c49d8c4[0]		 Win2K-f 39 of 41 13:54:43 13:54:43 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
278df56902
NEW
3e90ae8532
NEW
40306feecb
NEW
7ab76b4b8e
NEW
827e44840a
NEW
8fa9f641e6
NEW
ab9c4b5f21
NEW
b4afa1df1d
NEW
d789c8d157
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
5fe48b2dcc[0]
none [none]
5f6572479f[0]		 Win2K-f 31 of 33 03:39:36 03:39:36 1 none none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
ASM:Graph
 none|none
none|none
none|none
none|none
none|none
none|none
Armadillo|
none|none
PolyEnE|		 95% none
none
none
none
none
none
lines=42
none
lines=113
embedded dns		 none
none
none
none
none
none
trace
none
trace
278df56902
NEW
3e90ae8532
NEW
40306feecb
NEW		 none[none]
none [none]
none [none]		 Win2K-f 30 of 43 03:39:36 03:39:36 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 05:30:32 05:30:32 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
fa9dfa8179
NEW		 none[none] WinXP 41 of 42 05:40:44 05:40:44 1 none none:none
 none|none none none
f54f5a7205
NEW		 none[none] WinXP 39 of 40 09:26:25 09:26:25 1 none none:none
 none|none none none
6455904435
NEW		 none[none] WinXP 38 of 41 01:19:11 05:31:01 3 none none:none
 none|none none none
e18a983c20
NEW		 none[none] WinXP 36 of 42 23:59:56 23:59:56 1 none none:none
 none|none none none
02c8f02035
NEW
0e395f5cf9
NEW		 none[none]
none [none]		 Win2K-f 41 of 43 08:57:11 08:57:11 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 14:36:08 21:58:31 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
a3c82ff952
NEW		 none[none] WinXP 39 of 41 19:38:37 19:38:37 1 none none:none
 none|none none none
278df56902
NEW
3e90ae8532
NEW
40306feecb
NEW
7ab76b4b8e
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 23 of 42 03:39:36 03:39:36 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
d20f157117
NEW		 738f555183 [0] WinXP 34 of 34 05:41:28 18:33:04 3 none ASM:Graph
 PolyEnE| 99% lines=68 trace
278df56902
NEW
3e90ae8532
NEW
40306feecb
NEW
7ab76b4b8e
NEW
827e44840a
NEW
8fa9f641e6
NEW
ab9c4b5f21
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
5fe48b2dcc[0]		 Win2K-f 39 of 41 03:39:36 03:39:36 1 none none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
 none|none
none|none
none|none
none|none
none|none
none|none
Armadillo|		 0% none
none
none
none
none
none
lines=42		 none
none
none
none
none
none
trace
d08635ca20
NEW
e2479cbb98
NEW		 none[none]
none [none]		 WinXP 39 of 40 04:06:30 04:06:30 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8a2553433c
NEW		 none[none] WinXP 38 of 42 10:56:19 10:56:19 1 none none:none
 none|none none none
278df56902
NEW
3e90ae8532
NEW
40306feecb
NEW
7ab76b4b8e
NEW
827e44840a
NEW
8fa9f641e6
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 19 of 42 03:39:36 03:39:36 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none		 none
none
none
none
none
none
3138581861
NEW		 none[none] WinXP 29 of 29 03:59:12 06:13:05 2 none none:none
 none|none none none
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 14:16:39 21:06:34 2 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace