Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


20 December 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
735053e788
NEW		 none[none] WinXP 33 of 42 09:01:30 09:01:30 1 none none:none
 none|none none none
a5afad5d2f
NEW		 none[none] WinXP 40 of 42 13:49:30 13:49:30 1 none none:none
 none|none none none
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 32 19:05:35 19:05:35 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
03ee456782
NEW		 none[none] WinXP 42 of 43 12:18:12 12:18:12 1 none none:none
 none|none none none
14f47ffd1e
NEW		 90bf4b99ff [0] Win2K-f 40 of 41 04:40:55 04:40:55 1 none ASM:Graph
 tElock| 96% lines=56
embedded dns		 trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 01:46:48 22:23:19 4 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
088fcebecf
NEW		 none[none] Win2K-f 40 of 42 09:48:22 09:48:22 1 none none:none
 none|none none none
c318ecb80c
NEW		 none[none] WinXP 43 of 43 03:37:28 03:37:28 1 none none:none
 none|none none none
29de5324e1
NEW		 none[none] Win2K-f 42 of 43 17:50:48 17:50:48 1 none none:none
 none|none none none
6075efaf84
NEW		 none[none] Win2K-f 38 of 41 12:28:26 12:28:26 1 none none:none
 none|none none none
21cca19488
NEW		 none[none] WinXP 41 of 43 08:13:58 08:13:58 1 none none:none
 none|none none none
2d91a8cacb
NEW		 none[none] WinXP 42 of 43 22:56:54 22:56:54 1 none none:none
 none|none none none
1b3d8e9fe7
NEW		 1d04d6dc84 [0] WinXP 39 of 41 11:57:28 11:57:28 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
6b315f5dbc
NEW
7938865f8c
NEW		 7604b94520 [0]
a9b9e4904b[0]		 Win2K-f
WinXP		 39 of 41 08:17:37 23:23:05 2 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
ce2d40e28c
NEW		 none[none] WinXP 37 of 43 09:38:05 09:38:05 1 none none:none
 none|none none none
5d445c59d8
NEW		 892e12db7b [0] Win2K-f 39 of 41 19:58:18 19:58:18 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
2a3119fb5a
NEW		 none[none] WinXP 41 of 42 03:56:38 03:56:38 1 none none:none
 none|none none none
8f4d2d39e2
NEW		 none[none] Win2K-f 38 of 43 14:12:39 14:12:39 1 none none:none
 none|none none none
735053e788
NEW
ab9c4b5f21
NEW
b285975966
NEW
b34e640329
NEW		 none[none]
5fe48b2dcc[0]
none [none]
none [none]		 WinXP 29 of 43 09:01:30 09:01:30 1 none none:none
ASM:Graph
none:none
none:none
 none|none
Armadillo|
none|none
none|none		 none
lines=42
none
none		 none
trace
none
none
8cdf1ff83e
NEW		 none[none] Win2K-f 42 of 43 11:22:38 11:22:38 1 none none:none
 none|none none none
3e95ce386c
NEW		 none[none] Win2K-f 29 of 41 10:50:15 10:50:15 1 none none:none
 none|none none none
f6c29b5afe
NEW		 none[none] Win2K-f 40 of 42 14:27:45 14:27:45 1 none none:none
 none|none none none
67f1a33096
NEW		 148e04eaab [0] WinXP 38 of 40 07:01:42 07:01:42 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
29f397698f
NEW		 none[none] Win2K-f 39 of 41 12:04:32 12:04:32 1 none none:none
 none|none none none
4410d5ed68
NEW		 none[none] WinXP 39 of 43 15:39:02 15:39:02 1 none none:none
 none|none none none
a09afd3528
NEW		 none[none] Win2K-f 37 of 41 22:34:39 22:34:39 1 none none:none
 none|none none none
c3f889a086
NEW		 none[none] WinXP 42 of 43 12:18:46 12:18:46 1 none none:none
 none|none none none
50cdd5c6cf
NEW		 1d04d6dc84 [0] Win2K-f
WinXP		 37 of 40 10:35:16 16:55:54 3 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 01:19:03 01:19:03 1 none none:none
 none|none 33% lines=60 trace
f14fd68756
NEW		 f14fd68756 [1] WinXP 37 of 40 10:25:14 10:25:14 1 none ASM:Graph
 pex| 42% lines=19 trace
c473a72583
NEW		 1d04d6dc84 [0] WinXP 35 of 40 13:25:47 13:25:47 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
5db8fa5a5f
NEW		 none[none] WinXP 39 of 41 13:26:08 13:26:08 1 none none:none
 none|none none none
735053e788
NEW
ab9c4b5f21
NEW
b285975966
NEW
b34e640329
NEW
d789c8d157
NEW		 none[none]
5fe48b2dcc[0]
none [none]
none [none]
5f6572479f[0]		 WinXP 31 of 33 09:01:30 09:01:30 1 none none:none
ASM:Graph
none:none
none:none
ASM:Graph
 none|none
Armadillo|
none|none
none|none
PolyEnE|		 95% none
lines=42
none
none
lines=113
embedded dns		 none
trace
none
none
trace
da28d7ab5c
NEW		 none[none] WinXP 31 of 42 09:52:25 09:52:25 1 none none:none
 none|none none none
c049ae8bc8
NEW		 none[none] WinXP 41 of 42 12:08:03 12:08:03 1 none none:none
 none|none none none
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 01:46:48 22:23:19 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
d8040f84d4
NEW		 d683995e84 [0] WinXP 39 of 41 00:52:16 04:15:46 2 none ASM:Graph
 PolyEnE| 100% lines=73 trace
3370517167
NEW		 none[none] WinXP 42 of 43 11:22:47 11:22:47 1 none none:none
 none|none none none
e3faefa56a
NEW		 1d04d6dc84 [0] Win2K-f
WinXP		 40 of 41 09:39:46 15:42:53 3 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
494871556a
NEW		 none[none] Win2K-f 38 of 41 11:21:42 11:21:42 1 none none:none
 none|none none none
531a598a70
NEW		 none[none] WinXP 40 of 43 14:20:10 14:20:10 1 none none:none
 none|none none none
013a5ba10e
NEW		 1d04d6dc84 [0] WinXP 40 of 40 14:19:04 17:19:20 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
a3adf5694f
NEW		 none[none] Win2K-f 38 of 42 13:04:23 13:04:23 1 none none:none
 none|none none none
c13a6c3da5
NEW		 1d04d6dc84 [0] WinXP 40 of 41 14:34:52 14:34:52 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
db12dac6c7
NEW		 afaf06d6cd [0] WinXP 41 of 41 12:38:25 12:38:25 1 none ASM:Graph
 pex| 81% lines=42 trace
3490e2ea15
NEW		 1d04d6dc84 [0] Win2K-f 38 of 40 10:13:56 10:13:56 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
331a6f5295
NEW
a1d87adbad
NEW		 none[none]
none [none]		 WinXP 40 of 43 17:09:30 17:09:30 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
17f4f7fd38
NEW		 none[none] Win2K-f
WinXP		 41 of 41 09:25:29 09:35:09 2 none none:none
 none|none none none
9363d60262
NEW		 1d04d6dc84 [0] WinXP 36 of 40 09:29:34 10:03:41 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
67f1a33096
NEW
724cf0dc37
NEW		 148e04eaab [0]
901dd267d4[0]		 WinXP 38 of 40 07:01:42 07:01:42 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
a5d5c8ec12
NEW		 none[none] WinXP 41 of 43 11:32:43 11:32:43 1 none none:none
 none|none none none
81540770eb
NEW		 none[none] WinXP 40 of 43 10:03:51 10:03:51 1 none none:none
 none|none none none
45885d17fa
NEW		 none[none] Win2K-f 40 of 42 15:48:57 15:48:57 1 none none:none
 none|none none none
c03793a035
NEW		 1d04d6dc84 [0] WinXP 41 of 41 10:50:35 10:50:35 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
a8fc800d16
NEW		 none[none] WinXP
Win2K-f		 42 of 43 11:27:19 13:41:25 2 none none:none
 none|none none none
40f180428a
NEW		 none[none] Win2K-f 39 of 41 13:12:31 13:12:31 1 none none:none
 none|none none none
68d9aa22f9
NEW		 none[none] Win2K-f 37 of 42 13:13:55 13:13:55 1 none none:none
 none|none none none
8bff1912e0
NEW		 none[none] Win2K-f 42 of 43 22:53:38 22:53:38 1 none none:none
 none|none none none
d6df3972a0
NEW		 none[0] WinXP 29 of 29 21:21:35 21:21:35 1 none none:none
 PolyEnE| 100% lines=65 trace
5c6df5141d
NEW		 none[none] WinXP 41 of 41 09:03:39 23:00:08 2 none none:none
 none|none none none
f16fcee967
NEW		 none[none] WinXP 41 of 41 10:38:20 11:03:54 2 none none:none
 none|none none none
5818023061
NEW		 none[0] WinXP 32 of 32 01:57:35 04:31:15 2 none none:none
 PolyEnE| 99% lines=68 trace
fb486908b0
NEW		 none[none] WinXP 41 of 43 06:10:07 06:25:10 2 none none:none
 none|none none none
29a3030e16
NEW		 1d04d6dc84 [0] Win2K-f 41 of 41 10:29:09 10:29:09 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
a347fd87e7
NEW		 none[none] WinXP 42 of 43 20:30:52 20:30:52 1 none none:none
 none|none none none
6b315f5dbc
NEW		 7604b94520 [0] Win2K-f
WinXP		 39 of 41 08:17:37 23:23:05 2 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
51a03793ab
NEW		 429f7618d3 [0] Win2K-f 37 of 41 03:53:53 03:53:53 1 none ASM:Graph
 none|none 97% lines=546 trace
735053e788
NEW
ab9c4b5f21
NEW
b285975966
NEW		 none[none]
5fe48b2dcc[0]
none [none]		 WinXP 37 of 43 09:01:30 09:01:30 1 none none:none
ASM:Graph
none:none
 none|none
Armadillo|
none|none		 none
lines=42
none		 none
trace
none
50465eaf96
NEW		 none[none] WinXP 39 of 43 10:14:02 10:14:02 1 none none:none
 none|none none none
b68d420d61
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 09:25:58 11:07:16 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
f996bf0275
NEW		 1e4ad6cdb1 [0] WinXP 38 of 41 09:23:11 09:23:11 1 none ASM:Graph
 ASPack| 43% lines=3065
embedded dns		 trace
ec8ab501b3
NEW		 bac4cc6eec [0] Win2K-f 40 of 41 12:25:33 12:34:01 2 none ASM:Graph
 Armadillo| 0% lines=218 trace
5d445c59d8
NEW
8a54950abb
NEW		 892e12db7b [0]
f6b9e43917[0]		 Win2K-f 37 of 40 19:58:18 19:58:18 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
ee77d33bdd
NEW		 none[none] WinXP 42 of 43 08:18:46 08:18:46 1 none none:none
 none|none none none
7d6256075e
NEW		 none[none] WinXP 41 of 42 12:31:54 12:31:54 1 none none:none
 none|none none none
3584c66b3c
NEW		 none[none] Win2K-f 40 of 43 11:30:37 11:30:37 1 none none:none
 none|none none none
8128405d8c
NEW		 1d04d6dc84 [0] Win2K-f 40 of 41 12:13:19 12:13:19 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 03:03:45 16:10:16 4 none none:none
 PolyEnE| 99% lines=68 trace
331a6f5295
NEW		 none[none] WinXP 42 of 43 17:09:30 17:09:30 1 none none:none
 none|none none none
d1ee5191a5
NEW		 none[none] WinXP 39 of 42 15:20:57 15:20:57 1 none none:none
 none|none none none
14f47ffd1e
NEW
50437008d9
NEW		 90bf4b99ff [0]
c1b09ac5d7[0]		 Win2K-f 5 of 41 04:40:55 04:40:55 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=56
embedded dns
lines=90		 trace
trace
bad4c0311c
NEW		 none[none] WinXP 39 of 43 13:45:14 13:45:14 1 none none:none
 none|none none none
d20f157117
NEW		 738f555183 [0] WinXP 34 of 34 06:18:19 13:22:43 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
735053e788
NEW
ab9c4b5f21
NEW		 none[none]
5fe48b2dcc[0]		 WinXP 39 of 41 09:01:30 09:01:30 1 none none:none
ASM:Graph
 none|none
Armadillo|		 0% none
lines=42		 none
trace
5e8ccc4190
NEW		 8d5f86583f [0] WinXP 39 of 40 17:08:45 17:09:47 2 none ASM:Graph
 PolyEnE| 100% lines=68 trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 16:28:09 16:36:54 2 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace