General

  • Target

    spsetup132.exe

  • Size

    7.9MB

  • MD5

    4c24bb86569c8a0c384bfb4fb95259d6

  • SHA1

    74019f340bf280ab55e3adf2b3e3f66ce50f0e8d

  • SHA256

    1356cae1349d3a46692bcafeb9d275150d21ba024cc995d3d9368d906b41ac0a

  • SHA512

    458a37523d7a392088cf0b692bf006f9af3a68f29e03fd00d85589294324bdfa1d62226b79d4a7b5abf68460e6f7dc2bf8c40bb49e214bdc7a858d69bd224245

  • SSDEEP

    196608:1XfjcT02U2UQsYRioh4YagF2zSgIdgzGUcbIPDHq//asTMDUfa+V0bd8:1XfjU02UNQ5RinYagF2m/gyUccr8aoMC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • spsetup132.exe
    .exe windows:5 windows x86 arch:x86

    377a97652fdf5740d8cc11d5ce124fed


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:5 windows x86 arch:x86

    59070d80178eb0db7b7113b7a8608502


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/execDos.dll
    .dll windows:5 windows x86 arch:x86

    a5d239ed12c9442d63c73cb9ff7cad0e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/g/gcapi_dll.dll
    .dll windows:5 windows x86 arch:x86

    26266d1a8a5fbe7334adaf3309d96608


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/g/gcombo/ComboOffer_1025.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1026.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1027.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1028.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1029.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1030.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1031.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1032.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1033.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1034.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1035.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1036.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1037.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1038.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1040.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1041.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1042.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1043.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1044.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1045.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1046.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1048.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1049.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1050.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1051.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1053.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1054.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1055.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1057.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1058.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1060.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1061.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1062.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1066.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1102.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_2052.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_2070.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_3098.html
    .html
  • $PLUGINSDIR/g/gcombo/combo-offer.png
    .png
  • $PLUGINSDIR/g/pfWWW.dll
    .dll windows:6 windows x86 arch:x86

    0b014cd10403d41385037c19158ec8ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    917ae9b9adb269abd5543f5bf5676bac


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/p/$_57_/pfAP.dll
    .dll windows:6 windows x86 arch:x86

    c64550027a7f1b6995572b9c5f642645


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_119_/$_119_/pfUI.dll
    .dll windows:6 windows x86 arch:x86

    2098ffb08712ddc0dac6b33fecf1aefb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_120_/Montserrat-Regular.otf
  • $_120_/PF_logo.png
    .png
  • $_120_/SP_computer.png
    .png
  • $_120_/Speccy_Logo_72px.png
    .png
  • $_120_/lang-1026.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1031.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1034.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1035.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1036.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1037.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1038.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1040.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1041.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1043.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1045.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1046.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1049.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1050.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1051.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1053.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1055.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1058.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1059.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1060.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1062.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1066.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1067.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1068.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1071.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1079.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-1102.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-2052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-2070.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-2074.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-3098.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-5146.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_120_/lang-9999.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1026.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1031.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1034.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1035.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1036.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1037.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1038.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1040.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1041.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1043.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1045.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1046.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1049.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1050.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1051.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1053.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1055.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1058.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1059.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1060.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1062.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1066.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1067.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1068.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1071.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1079.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1102.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-2052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-2070.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-2074.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-3098.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-5146.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-9999.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Speccy.exe
    .exe windows:5 windows x86 arch:x86

    6abb34630c6da342fa77d5a5d662848a


    Code Sign

    Headers

    Imports

    Sections

  • Speccy64.exe
    .exe windows:5 windows x64 arch:x64

    4b6a6dd2bb3112d0f3d56c2f5b02f06a


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:5 windows x86 arch:x86

    377a97652fdf5740d8cc11d5ce124fed


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections