Agilent Benchlink Data Logger Pro & 3 (34830A)[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Agilent Benchlink Data Logger Pro & 3 (34830A).zip
Size

12.8MB
MD5

4a17dabd9af92088187e3aae7d5f1f49
SHA1

da77e3ef487aa92a9801ae34af7faf0e560eb341
SHA256

e73a756656f7c64eff84ef8e0858be656eb3a69e7e6b20cd10a2eaa4a885f2c8
SHA512

b307365237714057d6ad2838966b40edba8c5fa0cac384a43b84d2127ec1894829e2528d5ffa33de92eab34554431c613757234c61074ce16f0c9daec5d7b025
SSDEEP

393216:SnOGAGrEyl5X1NhgO+cDBDZj4EBvndVoP:VoEyLGSN4EpnzoP

Score

3^/10

pdf link

Malware Config

Signatures

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Agilent Benchlink Data Logger Pro & 3 (34830A)/agt34970A_XL.exe
unpack001/Agilent Benchlink Data Logger Pro & 3 (34830A)/aig setup.exe
unpack001/Agilent Benchlink Data Logger Pro & 3 (34830A)/shelexec.exe

Files

Agilent Benchlink Data Logger Pro & 3 (34830A).zip
.zip
Agilent Benchlink Data Logger Pro & 3 (34830A)/34825A-datasheet.pdf
.pdf
- http://20065989-0918ENwww.agilent.com/find/emailupdatesGet
- http://www.Agilent.com/find/appcentralwww.Agilent.com/find/connectivitywww.Agilent.com/find/adnRelated
- http://www.agilent.com
- http://www.agilent.com/find/assistPhone
- http://www.agilent.com/find/buildyourownWas
Agilent Benchlink Data Logger Pro & 3 (34830A)/34970A-datasheet.pdf
.pdf
- http://www.agilent.com/find/assistAgilent's
- http://www.agilent.com/find/connectivity
- http://www.agilent.com/find/emailupdatesGet
- http://www.agilent.com/find/iosuite-datasheetOrdering
Agilent Benchlink Data Logger Pro & 3 (34830A)/34972xA_Data_Sheet.pdf
.pdf
- http://20125965-5290ENwww.agilent.comwww.agilent.com/find/34970Awww.agilent.com/find/34972AAgilent
- http://Partnerswww.agilent.com/find/channelpartnersGet
- http://convenience.www.agilent.com/find/myagilentA
- http://countries.www.lxistandard.org
- http://world.www.agilent.com/qualitywww.agilent.com/find/advantageservicesQuality
- http://www.agilent.com/find/34972Awww.agilent.com/find/34970AMainframe34970A
- http://www.agilent.com/�
- http://you.my
Agilent Benchlink Data Logger Pro & 3 (34830A)/DL3readme.html
.html
Agilent Benchlink Data Logger Pro & 3 (34830A)/DLProreadme.html
.html
Agilent Benchlink Data Logger Pro & 3 (34830A)/Thumbs.db
Agilent Benchlink Data Logger Pro & 3 (34830A)/agilent.gif
.gif
Agilent Benchlink Data Logger Pro & 3 (34830A)/agt34970A_XL.exe
.exe windows:4 windows x86 arch:x86

4c59c0b3420ca0877a0e6c8146bdb593

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
SetCursor
EndDialog
DefWindowProcA
GetWindowWord
SetWindowWord
BeginPaint
GetSysColor
GetClientRect
SetRect
EndPaint
RegisterClassA
LoadIconA
OemToCharBuffA
LoadCursorA
GetLastActivePopup
ShowWindow
PostMessageA
EnableWindow
GetTopWindow
DestroyWindow
GetWindowLongA
SetWindowLongA
SetWindowTextA
SetForegroundWindow
SetActiveWindow
CharNextA
SetTimer
GetMessageA
PostQuitMessage
KillTimer
DialogBoxIndirectParamA
GetDlgItemTextA
SendMessageA
GetSystemMetrics
SetWindowPos
PeekMessageA
TranslateMessage
DispatchMessageA
GetParent
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
InvalidateRect
UpdateWindow
wsprintfA
MessageBoxA

kernel32

_lopen
WinExec
CreateProcessA
_lclose
GetVolumeInformationA
RtlUnwind
GetCommandLineA
GetModuleHandleA
ExitProcess
FindNextFileA
MoveFileExA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
SetFilePointer
SetEndOfFile
RemoveDirectoryA
SetFileAttributesA
DeleteFileA
GetACP
GetModuleFileNameA
SetErrorMode
GetVersion
LoadLibraryA
GetProcAddress
GetLastError
FormatMessageA
FreeLibrary
WaitForSingleObject
GetTickCount
GetWindowsDirectoryA
FindClose
FindFirstFileA
SetCurrentDirectoryA
lstrlenA
CreateDirectoryA
lstrcatA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
_lcreat
lstrcpyA
LocalAlloc
GetEnvironmentVariableA
OpenFile
_lwrite
_lread
GetDriveTypeA
_llseek
LocalFree
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle

gdi32

GetTextExtentPoint32A
SetBkColor
SetTextColor
SetTextAlign
GetBkColor
DeleteObject
ExtTextOutA
CreateDCA
GetDeviceCaps
CreateFontIndirectA
DeleteDC
SelectObject

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_winzip_
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Agilent Benchlink Data Logger Pro & 3 (34830A)/aig setup.exe
.exe windows:4 windows x86 arch:x86

f2f9102c7663962c22d17a8dabc5e7ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
FindExecutableA
SHBrowseForFolderA
SHGetMalloc

user32

GetClientRect
SetRect
EndPaint
LoadCursorA
GetLastActivePopup
KillTimer
ShowWindow
PostMessageA
SendMessageA
EnableWindow
SetTimer
SetWindowTextA
SetForegroundWindow
SetActiveWindow
SetDlgItemTextA
GetKeyState
CharUpperBuffA
PeekMessageA
GetSysColor
DispatchMessageA
GetParent
SendDlgItemMessageA
GetDlgItem
InvalidateRect
UpdateWindow
LoadStringA
MessageBoxA
DialogBoxParamA
GetWindowLongA
SetWindowLongA
GetDlgItemTextA
EndDialog
GetWindowRect
GetSystemMetrics
SetWindowPos
SetCursor
CharNextA
BeginPaint
SetWindowWord
GetWindowWord
DefWindowProcA
RegisterClassA
TranslateMessage

kernel32

GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
GetStdHandle
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapSize
Sleep
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
GetVersionExA
FindClose
FindFirstFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
LocalAlloc
GetDriveTypeA
GetEnvironmentVariableA
SetFilePointer
CreateFileA
GetWindowsDirectoryA
GlobalFree
GlobalUnlock
GlobalHandle
_lclose
_llseek
_lread
_lopen
GlobalLock
GlobalAlloc
GlobalMemoryStatus
GetVersion
GetModuleFileNameA
WriteFile
GetSystemTime
LocalFree
ExitProcess
FormatMessageA
GetLastError
GetModuleHandleA
GetVolumeInformationA
WideCharToMultiByte
CreateProcessA
lstrcmpiA
SetErrorMode
MultiByteToWideChar
GetLocalTime
lstrlenA
CreateFileW
ReadFile
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSection
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
FlushFileBuffers
WriteConsoleW
CloseHandle
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetProcAddress
TlsGetValue
TlsAlloc

gdi32

SetTextColor
SetTextAlign
GetBkColor
GetTextExtentPoint32A
ExtTextOutA
CreateDCA
GetDeviceCaps
CreateFontIndirectA
DeleteDC
SelectObject
DeleteObject
SetBkColor

advapi32

RegQueryValueA

comctl32

ord17

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_winzip_
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Agilent Benchlink Data Logger Pro & 3 (34830A)/autorun.inf
Agilent Benchlink Data Logger Pro & 3 (34830A)/codewizard.html
.html
Agilent Benchlink Data Logger Pro & 3 (34830A)/copyright.html
.html
Agilent Benchlink Data Logger Pro & 3 (34830A)/down-over.gif
Agilent Benchlink Data Logger Pro & 3 (34830A)/driver_ivicom_ivic_matlab_Agilent34970-x64_1_3_7_0.msi
.msi
Agilent Benchlink Data Logger Pro & 3 (34830A)/index.html
.html .js polyglot
Agilent Benchlink Data Logger Pro & 3 (34830A)/info1.gif
.gif
Agilent Benchlink Data Logger Pro & 3 (34830A)/intuilink.html
.html
Agilent Benchlink Data Logger Pro & 3 (34830A)/iolibs.html
.html
Agilent Benchlink Data Logger Pro & 3 (34830A)/ivicom.html
.html
Agilent Benchlink Data Logger Pro & 3 (34830A)/readme.htm
.html
Agilent Benchlink Data Logger Pro & 3 (34830A)/shelexec.exe
.exe windows:4 windows x86 arch:x86

58ea9c226761c3223961c1747a2795cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetModuleHandleA
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress
LoadLibraryA

shell32

ShellExecuteA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 823B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Agilent Benchlink Data Logger Pro & 3 (34830A)/spark.ico
Agilent Benchlink Data Logger Pro & 3 (34830A)/thumbs (2).db
Agilent Benchlink Data Logger Pro & 3 (34830A)/up-over.gif

Sharing

General

Malware Config

Signatures

Files

4c59c0b3420ca0877a0e6c8146bdb593

Headers

File Characteristics

Imports

user32

kernel32

gdi32

Sections

.text Size: 21KB - Virtual size: 21KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

_winzip_ Size: 2.3MB - Virtual size: 2.3MB

f2f9102c7663962c22d17a8dabc5e7ce

Headers

File Characteristics

Imports

shell32

user32

kernel32

gdi32

advapi32

comctl32

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 57KB

.rsrc Size: 40KB - Virtual size: 37KB

_winzip_ Size: 3.4MB - Virtual size: 3.4MB

58ea9c226761c3223961c1747a2795cd

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 823B

.data Size: 4KB - Virtual size: 4KB

.idata Size: 1024B - Virtual size: 886B

.reloc Size: 1024B - Virtual size: 752B

.text
Size: 21KB - Virtual size: 21KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB

_winzip_
Size: 2.3MB - Virtual size: 2.3MB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 57KB

.rsrc
Size: 40KB - Virtual size: 37KB

_winzip_
Size: 3.4MB - Virtual size: 3.4MB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 823B

.data
Size: 4KB - Virtual size: 4KB

.idata
Size: 1024B - Virtual size: 886B

.reloc
Size: 1024B - Virtual size: 752B