Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


02 March 2011

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 32 07:11:28 23:42:08 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
1595515522
NEW		 none[none] WinXP 34 of 36 04:08:33 04:08:33 1 none none:none
 none|none none none
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 01:56:33 23:42:08 7 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
b8e6f4caf7
NEW
fb92b91fe7
NEW		 f81eac6379 [0]
fe88ab8768[0]		 Win2K-f 39 of 39 03:13:04 03:13:04 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
220c0b183d
NEW
40a82f045f
NEW		 none[none]
none [none]		 Win2K-f 0 of 0 03:07:59 03:07:59 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1761e9db94
NEW		 none[none] Win2K-f 40 of 41 09:14:46 09:14:46 1 none none:none
 none|none none none
04d4170d3b
NEW		 none[none] WinXP 41 of 43 09:13:15 09:13:15 1 none none:none
 none|none none none
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 02:48:35 19:19:49 3 none ASM:Graph
 PolyEnE| 99% lines=73 trace
5d445c59d8
NEW		 892e12db7b [0] WinXP 39 of 41 22:34:27 22:34:27 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
f3932b94a6
NEW		 910494cc45 [0] Win2K-f 40 of 41 15:24:09 15:24:09 1 none ASM:Graph
 none|none 98% lines=546 trace
6ffc4847e4
NEW		 none[none] WinXP 43 of 43 00:05:04 02:48:14 2 none none:none
 none|none none none
4bc7ff96e4
NEW
8809b6417c
NEW
89f410e7cc
NEW
909270c172
NEW
a24a4f5ff4
NEW
b34e640329
NEW		 none[none]
none [none]
2593cbda62[0]
55c25968a5[0]
none [none]
none [none]		 Win2K-f
WinXP		 29 of 43 03:07:59 03:09:23 2 none none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
 none|none
none|none
Armadillo|
tElock|
none|none
none|none		 none
none
lines=91
lines=125
embedded dns
none
none		 none
none
trace
trace
none
none
1096ba143e
NEW		 none[none] WinXP 40 of 41 19:23:36 19:23:36 1 none none:none
 none|none none none
6a6aaa5b73
NEW		 63889c9976 [0] Win2K-f 39 of 40 15:43:33 15:43:33 1 none ASM:Graph
 tElock| 100% lines=42 trace
01c4a6b3eb
NEW		 dd524b0259 [0] WinXP 40 of 41 13:27:02 13:27:02 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 04:47:15 04:47:15 1 none none:none
 none|none 33% lines=60 trace
01805ec3c3
NEW
3ef3c2ad56
NEW
8809b6417c
NEW		 none[none]
none [none]
none [none]		 WinXP
Win2K-f		 28 of 42 03:09:23 03:14:13 2 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
4bc7ff96e4
NEW
8809b6417c
NEW
89f410e7cc
NEW
909270c172
NEW
a24a4f5ff4
NEW
b34e640329
NEW
b4afa1df1d
NEW		 none[none]
none [none]
2593cbda62[0]
55c25968a5[0]
none [none]
none [none]
none [none]		 Win2K-f
WinXP		 41 of 43 03:07:59 03:09:23 2 none none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
none:none
 none|none
none|none
Armadillo|
tElock|
none|none
none|none
none|none		 none
none
lines=91
lines=125
embedded dns
none
none
none		 none
none
trace
trace
none
none
none
89333786d3
NEW		 none[none] WinXP 40 of 42 05:56:56 05:56:56 1 none none:none
 none|none none none
01805ec3c3
NEW
3ef3c2ad56
NEW		 none[none]
none [none]		 Win2K-f 38 of 43 03:14:13 03:14:13 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2205443cc8
NEW		 04ce1ed773 [none] WinXP 38 of 39 05:25:14 05:25:14 1 none none:none
 none|none none none
57ce4acac2
NEW		 none[0] Win2K-f 0 of 33 10:21:58 10:21:58 1 none none:none
 Armadillo| 0% lines=90 trace
4bc7ff96e4
NEW
8809b6417c
NEW
89f410e7cc
NEW		 none[none]
none [none]
2593cbda62[0]		 WinXP 38 of 40 03:09:23 03:09:23 1 none none:none
none:none
ASM:Graph
 none|none
none|none
Armadillo|		 0% none
none
lines=91		 none
none
trace
53bfe15e91
NEW
708f4ce601
NEW		 1473091351 [0]
none [none]		 Win2K-f 36 of 42 07:23:10 07:23:10 1 none ASM:Graph
none:none
 tElock|
none|none		 lines=75
embedded dns
none		 trace
none
887b302405
NEW		 none[none] WinXP 38 of 41 05:34:05 05:36:03 2 none none:none
 none|none none none
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 01:56:33 16:32:39 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
d28246ec52
NEW		 none[none] WinXP 41 of 42 04:28:43 04:28:43 1 none none:none
 none|none none none
38ed850a0e
NEW
b9297745a1
NEW		 46990f37cd [0]
4294884d84[0]		 WinXP 35 of 38 05:25:14 20:14:56 2 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
01805ec3c3
NEW		 none[none] Win2K-f 3 of 41 03:14:13 03:14:13 1 none none:none
 none|none none none
a24a4f5ff4
NEW		 none[none] Win2K-f
WinXP		 33 of 42 03:07:59 03:42:13 3 none none:none
 none|none none none
0f94963076
NEW		 2a573942eb [0] WinXP 39 of 40 20:02:57 20:02:57 1 none ASM:Graph
 none|none 98% lines=546 trace
220c0b183d
NEW
40a82f045f
NEW
53ab8b46bc
NEW		 none[none]
none [none]
none [none]		 Win2K-f 28 of 42 03:07:59 03:07:59 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
4bc7ff96e4
NEW		 none[none] WinXP 31 of 42 03:09:23 03:09:23 1 none none:none
 none|none none none
de4624560d
NEW		 none[none] WinXP 40 of 42 03:19:38 03:19:38 1 none none:none
 none|none none none
6e9e655f3c
NEW		 none[0] WinXP 29 of 29 09:21:21 09:21:21 1 none none:none
 PolyEnE| 99% lines=68 trace
10eebdc28e
NEW
761a66b891
NEW		 e2ca2da35d [0]
b469dac5dc[0]		 Win2K-f 38 of 41 09:38:41 09:38:41 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
31ec203307
NEW		 none[none] WinXP 39 of 42 20:27:56 20:27:56 1 none none:none
 none|none none none
45885d17fa
NEW		 none[none] Win2K-f 40 of 42 07:16:19 07:16:19 1 none none:none
 none|none none none
88f3393e20
NEW		 none[none] WinXP 42 of 43 17:03:21 17:03:21 1 none none:none
 none|none none none
b8e6f4caf7
NEW		 f81eac6379 [0] Win2K-f 39 of 40 03:13:04 03:13:04 1 none none:none
 tElock| none trace
1761e9db94
NEW
d1e83e2d0a
NEW		 none[none]
none [none]		 Win2K-f 40 of 40 09:14:46 09:14:46 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
5c6df5141d
NEW		 none[none] WinXP 41 of 41 07:26:15 07:26:15 1 none none:none
 none|none none none
d031b42d3f
NEW		 none[none] Win2K-f
WinXP		 38 of 41 11:37:11 17:29:10 3 none none:none
 none|none none none
38ed850a0e
NEW		 46990f37cd [0] WinXP 34 of 38 20:14:56 20:14:56 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
c19c8a2776
NEW		 none[none] WinXP 42 of 43 00:33:44 10:20:33 2 none none:none
 none|none none none
6a6aaa5b73
NEW
8bde6dd126
NEW		 63889c9976 [0]
885c68f500[0]		 Win2K-f 40 of 41 15:43:33 15:43:33 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 96% lines=42
lines=64
embedded dns		 trace
trace
220c0b183d
NEW
40a82f045f
NEW
53ab8b46bc
NEW
a24a4f5ff4
NEW
a784a42dcc
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 11 of 42 03:07:59 03:07:59 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
fb486908b0
NEW		 none[none] WinXP 41 of 43 08:14:45 14:43:29 4 none none:none
 none|none none none
2978812f76
NEW		 none[none] WinXP 24 of 42 12:52:26 12:52:26 1 none none:none
 none|none none none
d11b1f56f9
NEW		 none[none] WinXP 40 of 41 07:06:56 23:17:20 3 none none:none
 none|none none none
408a70e2ee
NEW		 none[none] WinXP 0 of 0 23:17:27 23:17:27 1 none none:none
 none|none none none
7f60162c2c
NEW		 none[0] WinXP 25 of 25 07:53:36 13:19:02 2 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
5d445c59d8
NEW
8a54950abb
NEW		 892e12db7b [0]
f6b9e43917[0]		 WinXP 37 of 40 22:34:27 22:34:27 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
1bafff1e61
NEW		 none[none] WinXP 38 of 42 03:30:44 03:30:44 1 none none:none
 none|none none none
1bafff1e61
NEW
8511a51872
NEW		 none[none]
none [none]		 WinXP 40 of 43 03:30:44 03:30:44 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0cfab99612
NEW		 none[0] WinXP 29 of 29 05:57:15 05:57:15 1 none none:none
 PolyEnE| 99% lines=68 trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 08:39:38 18:40:04 5 none none:none
 PolyEnE| 99% lines=68 trace
220c0b183d
NEW
40a82f045f
NEW
53ab8b46bc
NEW
a24a4f5ff4
NEW
a784a42dcc
NEW
b34e640329
NEW
b4afa1df1d
NEW
e1a6bbb316
NEW
ec73fe029d
NEW
f283c43596
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 37 of 43 03:07:59 03:07:59 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none
none
none
none
none		 none
none
none
none
none
none
none
none
none
none
2c94e3fd00
NEW		 none[none] WinXP 42 of 43 17:58:16 20:11:15 3 none none:none
 none|none none none
01805ec3c3
NEW
3ef3c2ad56
NEW
8809b6417c
NEW
e4240d7958
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 9 of 42 03:14:13 03:14:13 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
4bc7ff96e4
NEW
8809b6417c
NEW
89f410e7cc
NEW
909270c172
NEW		 none[none]
none [none]
2593cbda62[0]
55c25968a5[0]		 WinXP 38 of 40 03:09:23 03:09:23 1 none none:none
none:none
ASM:Graph
ASM:Graph
 none|none
none|none
Armadillo|
tElock|		 96% none
none
lines=91
lines=125
embedded dns		 none
none
trace
trace
ee09957625
NEW		 e88a3c4b63 [0] WinXP 32 of 32 05:35:24 05:35:24 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
b27d73bfcb
NEW		 473c6454ce [0] WinXP 35 of 36 09:04:18 09:04:18 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
d20f157117
NEW		 738f555183 [0] WinXP 34 of 34 01:43:25 18:06:26 4 none ASM:Graph
 PolyEnE| 99% lines=68 trace
220c0b183d
NEW		 none[none] Win2K-f 39 of 42 03:07:59 03:07:59 1 none none:none
 none|none none none
10eebdc28e
NEW		 e2ca2da35d [0] Win2K-f 38 of 41 09:38:41 09:38:41 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
5e8ccc4190
NEW		 8d5f86583f [0] WinXP 39 of 40 08:53:36 08:53:36 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
4bc7ff96e4
NEW
8809b6417c
NEW
89f410e7cc
NEW
909270c172
NEW
a24a4f5ff4
NEW
b34e640329
NEW
b4afa1df1d
NEW
e1a6bbb316
NEW		 none[none]
none [none]
2593cbda62[0]
55c25968a5[0]
none [none]
none [none]
none [none]
none [none]		 Win2K-f
WinXP		 41 of 42 03:07:59 03:09:23 2 none none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
none:none
none:none
 none|none
none|none
Armadillo|
tElock|
none|none
none|none
none|none
none|none		 none
none
lines=91
lines=125
embedded dns
none
none
none
none		 none
none
trace
trace
none
none
none
none
220c0b183d
NEW
40a82f045f
NEW
53ab8b46bc
NEW
a24a4f5ff4
NEW
a784a42dcc
NEW
b34e640329
NEW
b4afa1df1d
NEW
e1a6bbb316
NEW
ec73fe029d
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 36 of 42 03:07:59 03:07:59 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none
none
none
none		 none
none
none
none
none
none
none
none
none
d031b42d3f
NEW
fa14802705
NEW		 none[none]
none [none]		 Win2K-f
WinXP		 38 of 41 11:37:11 17:29:10 3 none none:none
none:none
 none|none
none|none		 none
none		 none
none
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 15:11:48 15:21:04 2 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace