Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


15 March 2011

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
0629d7fc42
NEW		 none[none] Win2K-f 40 of 40 22:11:35 22:59:20 2 none none:none
 none|none none none
379a6daa0d
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 39 of 40 18:07:47 20:49:23 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
64ad97c075
NEW		 none[none] WinXP 0 of 0 02:08:54 02:08:54 1 none none:none
 none|none none none
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 32 01:57:51 01:57:51 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
365c2de5e0
NEW
53ab8b46bc
NEW
87ac373063
NEW
9aed35b536
NEW
b34e640329
NEW
bea8cb1865
NEW
f7df702b31
NEW
fac78fde16
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
154de51a66[0]
none [none]
882896ab05[0]		 WinXP 35 of 36 20:18:49 20:18:49 1 none none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
ASM:Graph
 none|none
none|none
none|none
none|none
none|none
Armadillo|
none|none
tElock|		 96% none
none
none
none
none
lines=91
none
lines=126
embedded dns		 none
none
none
none
none
trace
none
trace
1595515522
NEW		 none[none] WinXP 34 of 36 23:24:41 23:24:41 1 none none:none
 none|none none none
53bfe15e91
NEW		 1473091351 [0] Win2K-f 33 of 33 01:57:51 16:50:38 4 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
95173a796c
NEW		 none[none] Win2K-f 38 of 43 06:15:22 06:15:22 1 none none:none
 none|none none none
450ad1b683
NEW		 1e4ad6cdb1 [0] Win2K-f 39 of 41 18:55:00 18:55:00 1 none ASM:Graph
 ASPack| 43% lines=3065
embedded dns		 trace
0e186d31c8
NEW		 none[none] WinXP 40 of 43 19:40:51 19:40:51 1 none none:none
 none|none none none
f13860c2c4
NEW		 none[none] WinXP 0 of 0 10:46:07 23:10:58 2 none none:none
 none|none none none
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 12:14:54 12:14:54 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
04d4170d3b
NEW		 none[none] WinXP 41 of 43 09:14:19 09:14:19 1 none none:none
 none|none none none
1b3d8e9fe7
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 39 of 41 17:06:26 17:08:38 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
2fc89991b2
NEW
7bdf45b79a
NEW		 none[none]
none [none]		 WinXP 40 of 41 16:36:48 16:36:48 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
365c2de5e0
NEW
53ab8b46bc
NEW
87ac373063
NEW
9aed35b536
NEW
b34e640329
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]		 WinXP 29 of 43 20:18:49 20:18:49 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
80b5952d6c
NEW		 none[none] WinXP 41 of 43 06:04:48 06:04:48 1 none none:none
 none|none none none
220053b50c
NEW		 1d04d6dc84 [0] Win2K-f 35 of 41 17:32:41 17:32:41 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
0f77d6439f
NEW		 none[none] WinXP 0 of 0 08:37:49 08:37:49 1 none none:none
 none|none none none
1096ba143e
NEW		 none[none] WinXP 40 of 41 16:02:23 16:02:23 1 none none:none
 none|none none none
e146d8fa76
NEW		 none[none] Win2K-f 0 of 0 17:20:39 17:20:39 1 none none:none
 none|none none none
e6f26d0bed
NEW		 none[none] Win2K-f 0 of 0 19:21:09 19:21:09 1 none none:none
 none|none none none
741e3b03b3
NEW		 none[0] WinXP 31 of 32 00:59:58 10:17:59 2 none none:none
 none|none 32% lines=61 trace
50cdd5c6cf
NEW		 1d04d6dc84 [0] WinXP 37 of 40 20:58:04 20:58:04 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
024410ad21
NEW
b0cedd71bb
NEW		 96d0267b80 [0]
f6e156bdca[0]		 WinXP 38 of 40 22:38:37 22:38:37 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
12b5856655
NEW		 none[none] Win2K-f 41 of 43 16:56:17 16:56:17 1 none none:none
 none|none none none
365c2de5e0
NEW
53ab8b46bc
NEW
87ac373063
NEW
9aed35b536
NEW
b34e640329
NEW
bea8cb1865
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
154de51a66[0]		 WinXP 32 of 36 20:18:49 20:18:49 1 none none:none
none:none
none:none
none:none
none:none
ASM:Graph
 none|none
none|none
none|none
none|none
none|none
Armadillo|		 0% none
none
none
none
none
lines=91		 none
none
none
none
none
trace
bedf29b824
NEW		 1e4ad6cdb1 [0] Win2K-f 40 of 41 23:37:22 23:37:22 1 none ASM:Graph
 ASPack| 43% lines=3065
embedded dns		 trace
327cc7cb3d
NEW		 none[none] Win2K-f 40 of 43 17:28:36 17:28:36 1 none none:none
 none|none none none
2fc89991b2
NEW		 none[none] WinXP 40 of 41 16:36:48 16:36:48 1 none none:none
 none|none none none
6704922c65
NEW		 1d04d6dc84 [0] Win2K-f 39 of 41 17:48:43 17:48:43 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
2f6cab0a72
NEW		 none[none] WinXP 0 of 0 10:02:42 10:02:42 1 none none:none
 none|none none none
2205443cc8
NEW		 04ce1ed773 [none] Win2K-f 38 of 39 20:46:45 20:46:45 1 none none:none
 none|none none none
ab9c4b5f21
NEW
d789c8d157
NEW		 5fe48b2dcc [0]
5f6572479f[0]		 Win2K-f 31 of 33 05:53:38 05:53:38 1 none ASM:Graph
ASM:Graph
 Armadillo|
PolyEnE|		 95% lines=42
lines=113
embedded dns		 trace
trace
7ea0317789
NEW		 18ff3687ad [0] Win2K-f 38 of 40 22:44:46 22:44:46 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 14:35:13 16:50:38 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
7587773eea
NEW		 none[3] Win2K-f 7 of 37 03:48:01 03:56:43 2 none none:none
 StarForce| none trace
d8040f84d4
NEW		 d683995e84 [0] WinXP 39 of 41 15:28:38 15:28:38 1 none ASM:Graph
 PolyEnE| 100% lines=73 trace
e3faefa56a
NEW		 1d04d6dc84 [0] WinXP 40 of 41 21:40:47 21:40:47 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
2205443cc8
NEW
b9297745a1
NEW		 04ce1ed773 [none]
4294884d84[0]		 Win2K-f 35 of 38 20:46:45 20:46:45 1 none none:none
ASM:Graph
 none|none
tElock|		 96% none
lines=64
embedded dns		 none
trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 03:20:03 06:37:07 2 none ASM:Graph
 none|none 55% lines=59 trace
c13a6c3da5
NEW		 1d04d6dc84 [0] WinXP
Win2K-f		 40 of 41 17:13:16 20:35:10 2 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
365c2de5e0
NEW
53ab8b46bc
NEW		 none[none]
none [none]		 WinXP 28 of 42 20:18:49 20:18:49 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0448650359
NEW		 1e4ad6cdb1 [0] WinXP 34 of 40 19:10:58 19:10:58 1 none ASM:Graph
 ASPack| 43% lines=3065
embedded dns		 trace
0d4c9b9be2
NEW
1824c59f34
NEW		 none[none]
da8a48fc3a[0]		 WinXP 40 of 41 06:52:33 06:52:33 1 none none:none
ASM:Graph
 none|none
tElock|		 95% none
lines=112
embedded dns		 none
trace
c23a910a12
NEW		 none[none] WinXP 41 of 43 16:54:14 16:54:14 1 none none:none
 none|none none none
9363d60262
NEW		 1d04d6dc84 [0] Win2K-f 36 of 40 18:36:05 18:36:05 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
98c8641dc3
NEW		 none[none] Win2K-f 0 of 0 16:54:28 16:54:28 1 none none:none
 none|none none none
f534041536
NEW		 1d04d6dc84 [0] WinXP 40 of 41 18:12:13 18:12:13 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
10eebdc28e
NEW
761a66b891
NEW		 e2ca2da35d [0]
b469dac5dc[0]		 WinXP 38 of 41 21:24:14 21:24:14 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
4c1e03dd5e
NEW		 none[none] WinXP 39 of 42 13:35:42 13:35:42 1 none none:none
 none|none none none
c03793a035
NEW		 1d04d6dc84 [0] WinXP 41 of 41 17:40:38 17:40:38 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
365c2de5e0
NEW
53ab8b46bc
NEW
87ac373063
NEW
9aed35b536
NEW
b34e640329
NEW
bea8cb1865
NEW
f7df702b31
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
154de51a66[0]
none [none]		 WinXP 21 of 40 20:18:49 20:18:49 1 none none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
 none|none
none|none
none|none
none|none
none|none
Armadillo|
none|none		 none
none
none
none
none
lines=91
none		 none
none
none
none
none
trace
none
53aa804019
NEW
95ddd4a823
NEW		 29c6cdbf45 [0]
9e78315a6d[0]		 Win2K-f 39 of 41 13:40:21 13:40:21 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
365c2de5e0
NEW		 none[none] WinXP 0 of 0 20:18:49 20:18:49 1 none none:none
 none|none none none
309898871c
NEW		 none[none] WinXP 42 of 43 20:49:33 20:49:33 1 none none:none
 none|none none none
d031b42d3f
NEW		 none[none] WinXP
Win2K-f		 38 of 41 05:22:20 18:40:15 4 none none:none
 none|none none none
5c6df5141d
NEW		 none[none] WinXP 41 of 41 02:08:10 02:08:10 1 none none:none
 none|none none none
0d4c9b9be2
NEW		 none[none] WinXP 8 of 43 06:52:33 06:52:33 1 none none:none
 none|none none none
fb486908b0
NEW		 none[none] WinXP 41 of 43 07:44:05 18:51:04 3 none none:none
 none|none none none
9716d7995a
NEW		 c3a5354b6f [0] WinXP 35 of 35 01:55:44 01:55:44 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
365c2de5e0
NEW
53ab8b46bc
NEW
87ac373063
NEW		 none[none]
none [none]
none [none]		 WinXP 0 of 0 20:18:49 20:18:49 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
6163d9bc47
NEW		 none[none] Win2K-f 0 of 0 18:41:43 18:41:43 1 none none:none
 none|none none none
fd5d54282a
NEW		 none[none] WinXP 41 of 42 13:59:28 13:59:28 1 none none:none
 none|none none none
7f60162c2c
NEW		 none[0] WinXP 25 of 25 01:17:14 12:47:59 2 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
2026658d8d
NEW		 none[none] Win2K-f 38 of 40 17:45:43 17:45:43 1 none none:none
 none|none none none
82e755f5d3
NEW		 1d04d6dc84 [0] Win2K-f 37 of 40 17:07:48 17:07:48 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
0b6d0d400c
NEW		 none[none] Win2K-f
WinXP		 8 of 43 17:29:16 23:34:50 2 none none:none
 none|none none none
b68d420d61
NEW		 1d04d6dc84 [0] WinXP 40 of 41 19:07:02 19:07:02 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
5c70659e82
NEW		 none[none] WinXP 0 of 0 17:25:24 17:25:24 1 none none:none
 none|none none none
8128405d8c
NEW		 1d04d6dc84 [0] WinXP 40 of 41 23:47:36 23:47:36 1 none ASM:Graph
 ASPack| 41% lines=3292
embedded dns		 trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 09:35:39 20:53:53 2 none none:none
 PolyEnE| 99% lines=68 trace
2c94e3fd00
NEW		 none[none] WinXP 42 of 43 07:41:04 12:19:38 2 none none:none
 none|none none none
13541553f3
NEW		 none[none] Win2K-f 0 of 0 21:44:14 21:44:14 1 none none:none
 none|none none none
024410ad21
NEW		 96d0267b80 [0] WinXP 40 of 41 22:38:37 22:38:37 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
95173a796c
NEW
c2f1f7d01e
NEW		 none[none]
none [none]		 Win2K-f 41 of 43 06:15:22 06:15:22 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2b314ef150
NEW		 none[none] WinXP 43 of 43 00:32:33 00:32:33 1 none none:none
 none|none none none
824aebb099
NEW		 none[none] WinXP 0 of 0 18:10:22 18:10:22 1 none none:none
 none|none none none
d20f157117
NEW		 738f555183 [0] WinXP 34 of 34 00:50:34 00:50:34 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
10eebdc28e
NEW		 e2ca2da35d [0] WinXP 38 of 41 21:24:14 21:24:14 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
53aa804019
NEW		 29c6cdbf45 [0] Win2K-f 39 of 41 13:40:21 13:40:21 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
ab9c4b5f21
NEW		 5fe48b2dcc [0] Win2K-f 39 of 41 05:53:38 05:53:38 1 none ASM:Graph
 Armadillo| 0% lines=42 trace
a8c4007dd5
NEW		 none[none] Win2K-f 0 of 0 17:53:36 17:53:36 1 none none:none
 none|none none none
5e8ccc4190
NEW		 8d5f86583f [0] WinXP 39 of 40 06:59:02 06:59:02 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
1918cf26b6
NEW		 none[none] WinXP 0 of 0 21:20:34 21:20:34 1 none none:none
 none|none none none
365c2de5e0
NEW
53ab8b46bc
NEW
87ac373063
NEW
9aed35b536
NEW		 none[none]
none [none]
none [none]
none [none]		 WinXP 21 of 40 20:18:49 20:18:49 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
d031b42d3f
NEW
fa14802705
NEW		 none[none]
none [none]		 WinXP
Win2K-f		 38 of 41 05:22:20 18:40:15 4 none none:none
none:none
 none|none
none|none		 none
none		 none
none