Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



01 April 2011

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
0f74a58af4
NEW
none[none] WinXP 39 of 40 04:41:05 04:41:05 1 none none:none
none|none none none
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
WinXP
Win2K-f
0 of 32 00:51:30 21:37:14 4 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
4d06d09b52
NEW
none[none] WinXP 40 of 40 02:30:52 02:30:52 1 none none:none
none|none none none
1595515522
NEW
none[none] WinXP 34 of 36 09:25:24 09:25:24 1 none none:none
none|none none none
53bfe15e91
NEW
1473091351 [0] WinXP
Win2K-f
33 of 33 00:51:30 21:37:14 4 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
204cf792b2
NEW
564048b35d
NEW
89f410e7cc
NEW
909270c172
NEW
9aa226324a
NEW
a372166493
NEW
cf3b5b3eb5
NEW
none[none]
none [none]
2593cbda62[0]
55c25968a5[0]
none [none]
none [none]
none [none]
WinXP 1 of 42 23:20:52 23:20:52 1 none none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
none:none
none|none
none|none
Armadillo|
tElock|
none|none
none|none
none|none
none
none
lines=91
lines=125
embedded dns
none
none
none
none
none
trace
trace
none
none
none
204cf792b2
NEW
564048b35d
NEW
89f410e7cc
NEW
909270c172
NEW
9aa226324a
NEW
a372166493
NEW
none[none]
none [none]
2593cbda62[0]
55c25968a5[0]
none [none]
none [none]
WinXP 18 of 41 23:20:52 23:20:52 1 none none:none
none:none
ASM:Graph
ASM:Graph
none:none
none:none
none|none
none|none
Armadillo|
tElock|
none|none
none|none
none
none
lines=91
lines=125
embedded dns
none
none
none
none
trace
trace
none
none
b970f605a8
NEW
none[none] WinXP 39 of 39 08:16:34 08:16:34 1 none none:none
none|none none none
5799ab6538
NEW
2713679411 [0] Win2K-f 40 of 41 19:48:52 19:48:52 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
c318ecb80c
NEW
none[none] WinXP 43 of 43 06:57:13 06:57:13 1 none none:none
none|none none none
0474b4b09f
NEW
affa94efc0 [0] WinXP 34 of 36 19:07:48 19:07:48 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
5f7781745b
NEW
none[none] WinXP 42 of 43 12:46:12 12:46:12 1 none none:none
none|none none none
d031b42d3f
NEW
none[none] Win2K-f 38 of 41 08:47:52 16:10:27 3 none none:none
none|none none none
5d445c59d8
NEW
892e12db7b [0] Win2K-f 39 of 41 16:28:53 16:28:53 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
204cf792b2
NEW
564048b35d
NEW
89f410e7cc
NEW
909270c172
NEW
9aa226324a
NEW
none[none]
none [none]
2593cbda62[0]
55c25968a5[0]
none [none]
WinXP 1 of 43 23:20:52 23:20:52 1 none none:none
none:none
ASM:Graph
ASM:Graph
none:none
none|none
none|none
Armadillo|
tElock|
none|none
none
none
lines=91
lines=125
embedded dns
none
none
none
trace
trace
none
38ed850a0e
NEW
46990f37cd [0] WinXP 34 of 38 21:05:36 21:05:36 1 none ASM:Graph
Armadillo| 0% lines=91 trace
fb486908b0
NEW
none[none] WinXP 41 of 43 08:37:17 08:37:17 1 none none:none
none|none none none
204cf792b2
NEW
564048b35d
NEW
none[none]
none [none]
WinXP 29 of 43 23:20:52 23:20:52 1 none none:none
none:none
none|none
none|none
none
none
none
none
d11b1f56f9
NEW
none[none] WinXP 40 of 41 10:31:16 10:31:16 1 none none:none
none|none none none
33ffb2cb88
NEW
none[none] WinXP 39 of 42 01:26:22 01:26:22 1 none none:none
none|none none none
04da0e9c97
NEW
none[none] Win2K-f 37 of 40 06:46:13 06:46:13 1 none none:none
none|none none none
741e3b03b3
NEW
none[0] WinXP 31 of 32 08:08:50 08:08:50 1 none none:none
none|none 32% lines=61 trace
246f38a76e
NEW
none[none] WinXP 39 of 41 10:26:30 10:26:30 1 none none:none
none|none none none
43b8f21924
NEW
none[3] WinXP 32 of 41 10:53:31 10:53:31 1 none none:none
none|none none trace
423af0cd97
NEW
none[none] WinXP 39 of 40 10:41:15 10:41:15 1 none none:none
none|none none none
e5b58f686a
NEW
none[none] WinXP 37 of 41 14:06:11 14:06:11 1 none none:none
none|none none none
7a8f766103
NEW
none[none] WinXP 42 of 42 10:52:33 10:52:33 1 none none:none
none|none none none
d6997f4bc2
NEW
none[none] WinXP 40 of 40 05:46:01 20:53:37 3 none none:none
none|none none none
204cf792b2
NEW
none[none] WinXP 31 of 38 23:20:52 23:20:52 1 none none:none
none|none none none
5d445c59d8
NEW
8a54950abb
NEW
892e12db7b [0]
f6b9e43917[0]
Win2K-f 37 of 40 16:28:53 16:28:53 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
e9fcd6f257
NEW
2e05bc2272 [0] WinXP 33 of 35 21:25:34 21:25:34 1 none ASM:Graph
PolyEnE| 100% lines=68 trace
0cfab99612
NEW
none[0] WinXP 29 of 29 09:39:33 09:39:33 1 none none:none
PolyEnE| 99% lines=68 trace
5799ab6538
NEW
ddbe111920
NEW
2713679411 [0]
none [none]
Win2K-f 41 of 43 19:48:52 19:48:52 1 none ASM:Graph
none:none
tElock|
none|none
lines=64
embedded dns
none
trace
none
7d99b0e910
NEW
none[0] WinXP 26 of 28 03:34:18 22:50:23 7 none none:none
PolyEnE| 99% lines=68 trace
2c94e3fd00
NEW
none[none] WinXP 42 of 43 16:06:49 16:06:49 1 none none:none
none|none none none
4698c2fbb6
NEW
none[none] WinXP 38 of 42 09:59:04 09:59:04 1 none none:none
none|none none none
204cf792b2
NEW
564048b35d
NEW
89f410e7cc
NEW
none[none]
none [none]
2593cbda62[0]
WinXP 38 of 40 23:20:52 23:20:52 1 none none:none
none:none
ASM:Graph
none|none
none|none
Armadillo|
0% none
none
lines=91
none
none
trace
204cf792b2
NEW
564048b35d
NEW
89f410e7cc
NEW
909270c172
NEW
none[none]
none [none]
2593cbda62[0]
55c25968a5[0]
WinXP 38 of 40 23:20:52 23:20:52 1 none none:none
none:none
ASM:Graph
ASM:Graph
none|none
none|none
Armadillo|
tElock|
96% none
none
lines=91
lines=125
embedded dns
none
none
trace
trace
d20f157117
NEW
738f555183 [0] WinXP 34 of 34 11:18:08 11:18:08 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
a3c82ff952
NEW
none[none] WinXP 39 of 41 14:35:34 14:35:34 1 none none:none
none|none none none
d8040f84d4
NEW
d683995e84 [0] WinXP 39 of 41 00:27:50 19:44:02 4 none ASM:Graph
PolyEnE| 100% lines=73 trace
38ed850a0e
NEW
b9297745a1
NEW
46990f37cd [0]
4294884d84[0]
WinXP 35 of 38 21:05:36 21:05:36 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
5e8ccc4190
NEW
8d5f86583f [0] WinXP 39 of 40 14:50:12 14:50:12 1 none ASM:Graph
PolyEnE| 100% lines=68 trace
0474b4b09f
NEW
1c3210698a
NEW
affa94efc0 [0]
38bbefb8cc[0]
WinXP 29 of 33 19:07:48 19:07:48 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
8a2553433c
NEW
none[none] WinXP 38 of 42 04:58:01 04:58:01 1 none none:none
none|none none none
5285741560
NEW
60590b8b67 [0] WinXP 37 of 40 03:46:53 23:51:06 3 none ASM:Graph
none|none 55% lines=59 trace
04da0e9c97
NEW
83d4f93437
NEW
none[none]
none [none]
Win2K-f 1 of 40 06:46:13 06:46:13 1 none none:none
none:none
none|none
none|none
none
none
none
none
3071c647d9
NEW
none[none] WinXP 38 of 40 12:06:41 12:51:23 2 none none:none
none|none none none
1e4f8f9259
NEW
e73db583fd [0] Win2K-f 40 of 41 16:52:11 16:52:11 1 none ASM:Graph
none|none 98% lines=546 trace
d9cb288f31
NEW
45603a001c [0] Win2K-f 3 of 37 02:38:53 18:44:53 8 none ASM:Graph
UPX| 92% lines=174
embedded dns
trace
d031b42d3f
NEW
fa14802705
NEW
none[none]
none [none]
Win2K-f 38 of 41 08:47:52 16:10:27 3 none none:none
none:none
none|none
none|none
none
none
none
none