General

  • Target

    PowerLog-Setup-5.9_b5900_r2282.exe

  • Size

    35.1MB

  • MD5

    f6ee7c5157fb6b577aeb487fe14fd6ce

  • SHA1

    59cbbddfff80f553761dfe2543f08d4f89902c1d

  • SHA256

    a3f8c9e6ab7a869800b37c116fe55f4ba07f8b17c02dc4761a19acac26997799

  • SHA512

    60fb2373635e5259d88561af5e000d32fda2c21e416a058965301432bf92b7c23556b3ebcc771e51537b25392c693fb7f6afb0b0875bd27b3e4a1827f20f6c4d

  • SSDEEP

    786432:WAatwWXvPKjmIIb0kcTyr99hPMlX4C1igUVFaXJQ+nsWKcfsQAZcBu:WffXvCSIXkcAKlX4C0sXJQcsW90QKcBu

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • PowerLog-Setup-5.9_b5900_r2282.exe
    .exe windows:4 windows x86 arch:x86

    d4b94e8ee3f620a89d114b9da4b31873


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    e26d7460d0c04056b9226a899477ba4d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/newadvsplash.dll
    .dll windows:4 windows x86 arch:x86

    7efb019e000b6e0291c32d00fe622590


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    0b75f1007d3cc8e457970ae3e3fd53c3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisdl.dll
    .dll windows:4 windows x86 arch:x86

    d09878220c1fdc2c2325ac1b89d388da


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.jpg
    .jpg
  • $PLUGINSDIR/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    dcbe94b8cc54b8e53867c61cc96811d6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • PowerLog.exe
    .exe windows:4 windows x86 arch:x86

    2b9005f02a55abffdab63fad80c28df4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Readme.txt
  • createdisks.cmd
  • createdisks.exe
    .exe windows:6 windows x86 arch:x86

    5ac5e46c574a5b579f63697f37d6bc98


    Code Sign

    Headers

    Imports

    Sections

  • libs/Bmp2Png.dll
    .dll windows:5 windows x86 arch:x86

    fb967b4510e6c4bd1ddf571ac81fcaf4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libs/Fluke_43xII.dll
    .dll windows:4 windows x86 arch:x86

    3222a7e980123288d55c2ccdca651e56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libs/PowerLog.ico
  • libs/PowerLogDB.dll
    .dll windows:6 windows x86 arch:x86

    59f86ec54c8f57b672ab4c7084a177c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libs/libcurl.dll
    .dll windows:4 windows x86 arch:x86

    278897de0aa0544338c744297a40d124


    Headers

    Imports

    Exports

    Sections

  • libs/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    32323da9e3f4928cdcb316e2581c8f7b


    Headers

    Imports

    Exports

    Sections

  • libs/libidn-11.dll
    .dll windows:4 windows x86 arch:x86

    e5ce09183f77d84d0da57e40ebf7ef93


    Headers

    Imports

    Exports

    Sections

  • libs/librtmp.dll
    .dll windows:4 windows x86 arch:x86

    6e971542efa5e49dfc92263b7078330b


    Headers

    Imports

    Exports

    Sections

  • libs/libssh2.dll
    .dll windows:4 windows x86 arch:x86

    59e4284fe583137effbd372bf718770a


    Headers

    Imports

    Exports

    Sections

  • libs/ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    30f17d88a5b3abe05667362bff1aa652


    Headers

    Imports

    Exports

    Sections

  • libs/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    bf7f66d7e1fe9e3ffe23c54095e1b6f2


    Headers

    Imports

    Exports

    Sections

  • license/EULA_cs.txt
  • license/EULA_de.txt
  • license/EULA_en.txt
  • license/EULA_es.txt
  • license/EULA_fr.txt
  • license/EULA_it.txt
  • license/EULA_ko.txt
  • license/EULA_pl.txt
  • license/EULA_ptbr.txt
  • license/EULA_ptpt.txt
  • license/EULA_ro.txt
  • license/EULA_ru.txt
  • license/EULA_sk.txt
  • license/EULA_sv.txt
  • license/EULA_tr.txt
  • license/EULA_zhcn.txt
  • license/EULA_zhtw.txt
  • locale/cs/LC_MESSAGES/default.mo
  • locale/cs/LC_MESSAGES/default.po
  • locale/de/LC_MESSAGES/default.mo
  • locale/de/LC_MESSAGES/default.po
  • locale/es/LC_MESSAGES/default.ini
  • locale/es/LC_MESSAGES/default.mo
  • locale/es/LC_MESSAGES/default.po
  • locale/fr/LC_MESSAGES/default.mo
  • locale/fr/LC_MESSAGES/default.po
  • locale/it/LC_MESSAGES/default.mo
  • locale/it/LC_MESSAGES/default.po
  • locale/ko/LC_MESSAGES/default.mo
  • locale/ko/LC_MESSAGES/default.po
  • locale/pl/LC_MESSAGES/default.mo
  • locale/pl/LC_MESSAGES/default.po
  • locale/pt_BR/LC_MESSAGES/default.mo
  • locale/pt_BR/LC_MESSAGES/default.po
  • locale/pt_PT/LC_MESSAGES/default.mo
  • locale/pt_PT/LC_MESSAGES/default.po
  • locale/ro/LC_MESSAGES/default.mo
  • locale/ro/LC_MESSAGES/default.po
  • locale/ru/LC_MESSAGES/default.mo
  • locale/ru/LC_MESSAGES/default.po
  • locale/sk/LC_MESSAGES/default.mo
  • locale/sk/LC_MESSAGES/default.po
  • locale/sv/LC_MESSAGES/default.mo
  • locale/sv/LC_MESSAGES/default.po
  • locale/tr/LC_MESSAGES/default.mo
  • locale/tr/LC_MESSAGES/default.po
  • locale/zh_CN/LC_MESSAGES/default.mo
  • locale/zh_CN/LC_MESSAGES/default.po
  • locale/zh_TW/LC_MESSAGES/default.mo
  • locale/zh_TW/LC_MESSAGES/default.po
  • manuals/PL_MSU.pdf
    .pdf
  • manuals/PowerLog-cs.pdf
    .pdf
    • http://fluke.com

    • http://register.fluke.com

    • http://us.fluke.com/usen/support/manuals.

    • http://www.fluke.com

    • http://youtube.com

  • manuals/PowerLog-de.pdf
    .pdf
    • http://fluke.com

    • http://register.fluke.com

    • http://us.fluke.com/usen/support/manuals.

    • http://www.fluke.com

    • http://youtube.com

  • manuals/PowerLog-en.pdf
    .pdf
    • http://fluke.com

    • http://register.fluke.com

    • http://us.fluke.com/usen/support/manuals.

    • http://www.fluke.com

    • http://youtube.com

  • manuals/PowerLog-es.pdf
    .pdf
    • http://fluke.com

    • http://register.fluke.com

    • http://us.fluke.com/usen/support/manuals.

    • http://www.fluke.com

    • http://youtube.com

  • manuals/PowerLog-fr.pdf
    .pdf
    • http://fluke.com

    • http://register.fluke.com

    • http://suryoutube.com

    • http://us.fluke.com/usen/support/manuals.

    • http://www.fluke.com

  • manuals/PowerLog-it.pdf
    .pdf
    • http://fluke.com

    • http://register.fluke.com

    • http://us.fluke.com/usen/support/manuals.

    • http://www.fluke.com

    • http://youtube.com

  • manuals/PowerLog-pl.pdf
    .pdf
    • http://fluke.com

    • http://register.fluke.com

    • http://us.fluke.com/usen/support/manuals.

    • http://www.fluke.com

    • http://youtube.com

  • manuals/PowerLog-pt.pdf
    .pdf
  • manuals/PowerLog-ru.pdf
    .pdf
  • manuals/PowerLog-sv.pdf
    .pdf
  • manuals/PowerLog-tk.pdf
    .pdf
  • manuals/PowerLog-zh.pdf
    .pdf
  • templates/Fluke-800x235.jpg
    .jpg
  • templates/Template-32145-default.rtf
    .rtf
  • templates/Template-32145-ru.rtf
    .rtf
  • templates/Template-33073-default.rtf
    .rtf
  • templates/Template-33073-ru.rtf
    .rtf
  • templates/Template-50160-cs.rtf
    .rtf
  • templates/Template-50160-de.rtf
    .rtf
  • templates/Template-50160-default.rtf
    .rtf
  • templates/Template-50160-en.rtf
    .rtf
  • templates/Template-50160-es.rtf
    .rtf
  • templates/Template-50160-fr.rtf
    .rtf
  • templates/Template-50160-it.rtf
    .rtf
  • templates/Template-50160-pl.rtf
    .rtf
  • templates/Template-50160-pt-br.rtf
    .rtf
  • templates/Template-50160-pt-pt.rtf
    .rtf
  • templates/Template-50160-ro.rtf
    .rtf
  • templates/Template-50160-ru.rtf
    .rtf
  • templates/Template-50160-sk.rtf
    .rtf
  • templates/Template-50160-sv.rtf
    .rtf
  • templates/Template-50160-tr.rtf
    .rtf
  • templates/Template-50160-zh-cn.rtf
    .rtf
  • templates/Template-50160-zh-tw.rtf
    .rtf
  • uninst.exe.nsis
  • vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    092eb6daba2f17cbda102fd1a32acd00


    Code Sign

    Headers

    Imports

    Sections