Overview

overview

10

Static

static

3

spsetup133.exe

windows10-ltsc_2021-x64

$PLUGINSDIR/INetC.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...em.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...er.bmp

windows10-ltsc_2021-x64

1

$PLUGINSDI...rd.bmp

windows10-ltsc_2021-x64

1

$PLUGINSDI...gs.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ec.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ss.dll

windows10-ltsc_2021-x64

3

$_100_/lang-1026.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1031.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1034.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1035.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1036.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1037.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1038.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1040.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1041.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1043.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1045.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1046.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1049.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1050.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1051.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1052.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1053.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1055.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1058.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1059.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1060.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1062.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1066.dll

windows10-ltsc_2021-x64

1

$_100_/lang-1067.dll

windows10-ltsc_2021-x64

1

Resubmissions

15/03/2026, 23:03

260315-216vqacs3m6

05/11/2025, 23:54

251105-3x28sswnfl6

02/11/2025, 22:39

251102-2kyjeadk7w10

Sharing

Copy URL Twitter E-mail

General

  • Target
    spsetup133.exe
  • Size 18.0MB
  • Sample251102-2kyjeadk7w
  • SHA256 03c35fcb1d10cf478c0b9896699937e6e262daa4f4a4353a7cc56b238fe86892
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • spsetup133.exe
    .exe 18.0MB
  • $PLUGINSDIR/INetC.dll
    .dll 23KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $_100_/lang-1026.dll
    .dll 78KB
  • $_100_/lang-1031.dll
    .dll 78KB
  • $_100_/lang-1034.dll
    .dll 86KB
  • $_100_/lang-1035.dll
    .dll 83KB
  • $_100_/lang-1036.dll
    .dll 83KB
  • $_100_/lang-1037.dll
    .dll 66KB
  • $_100_/lang-1038.dll
    .dll 81KB
  • $_100_/lang-1040.dll
    .dll 81KB
  • $_100_/lang-1041.dll
    .dll 55KB
  • $_100_/lang-1043.dll
    .dll 82KB
  • $_100_/lang-1045.dll
    .dll 81KB
  • $_100_/lang-1046.dll
    .dll 78KB
  • $_100_/lang-1049.dll
    .dll 77KB
  • $_100_/lang-1050.dll
    .dll 85KB
  • $_100_/lang-1051.dll
    .dll 73KB
  • $_100_/lang-1052.dll
    .dll 79KB
  • $_100_/lang-1053.dll
    .dll 79KB
  • $_100_/lang-1055.dll
    .dll 75KB
  • $_100_/lang-1058.dll
    .dll 79KB
  • $_100_/lang-1059.dll
    .dll 79KB
  • $_100_/lang-1060.dll
    .dll 77KB
  • $_100_/lang-1062.dll
    .dll 80KB
  • $_100_/lang-1066.dll
    .dll 75KB
  • $_100_/lang-1067.dll
    .dll 75KB
  • $_100_/lang-1068.dll
    .dll 76KB
  • $_100_/lang-1071.dll
    .dll 78KB
  • $_100_/lang-1079.dll
    .dll 80KB
  • $_100_/lang-1102.dll
    .dll 76KB
  • $_100_/lang-2052.dll
    .dll 41KB
  • $_100_/lang-2070.dll
    .dll 77KB
  • $_100_/lang-2074.dll
    .dll 78KB
  • $_100_/lang-3098.dll
    .dll 78KB
  • $_100_/lang-5146.dll
    .dll 76KB
  • $_100_/lang-9999.dll
    .dll 75KB
  • Lang/lang-1026.dll
    .dll 78KB
  • Lang/lang-1031.dll
    .dll 78KB
  • Lang/lang-1034.dll
    .dll 86KB
  • Lang/lang-1035.dll
    .dll 83KB
  • Lang/lang-1036.dll
    .dll 83KB
  • Lang/lang-1037.dll
    .dll 66KB
  • Lang/lang-1038.dll
    .dll 81KB
  • Lang/lang-1040.dll
    .dll 81KB
  • Lang/lang-1041.dll
    .dll 55KB
  • Lang/lang-1043.dll
    .dll 82KB
  • Lang/lang-1045.dll
    .dll 81KB
  • Lang/lang-1046.dll
    .dll 78KB
  • Lang/lang-1049.dll
    .dll 77KB
  • Lang/lang-1050.dll
    .dll 85KB
  • Lang/lang-1051.dll
    .dll 73KB
  • Lang/lang-1052.dll
    .dll 79KB
  • Lang/lang-1053.dll
    .dll 79KB
  • Lang/lang-1055.dll
    .dll 75KB
  • Lang/lang-1058.dll
    .dll 79KB
  • Lang/lang-1059.dll
    .dll 79KB
  • Lang/lang-1060.dll
    .dll 77KB
  • Lang/lang-1062.dll
    .dll 80KB
  • Lang/lang-1066.dll
    .dll 75KB
  • Lang/lang-1067.dll
    .dll 75KB
  • Lang/lang-1068.dll
    .dll 76KB
  • Lang/lang-1071.dll
    .dll 78KB
  • Lang/lang-1079.dll
    .dll 80KB
  • Lang/lang-1102.dll
    .dll 76KB
  • Lang/lang-2052.dll
    .dll 41KB
  • Lang/lang-2070.dll
    .dll 77KB
  • Lang/lang-2074.dll
    .dll 78KB
  • Lang/lang-3098.dll
    .dll 78KB
  • Lang/lang-5146.dll
    .dll 76KB
  • Lang/lang-9999.dll
    .dll 75KB
  • Speccy.exe
    .exe 16.4MB
  • Speccy64.exe
    .exe 19.9MB
  • cpuidsdk.dll
    .dll 3.0MB

spsetup133.exe

  • IMPHASH 61259b55b8912888e90f516ca08dc514
  • SHA256 03c35fcb1d10cf478c0b9896699937e6e262daa4f4a4353a7cc56b238fe86892
  • MD5 SHA1 SHA512 SSDEEP
windows:4windowsx86arch:x86
Digest
05:50:5a:6f:1f:df:13:28:56:12:42:f2:df:33:35:0a:3b:0b:0f:53:5d:d5:48:1c:c7:93:f5:4f:fa:75:c5:19
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=08235567,CN=Piriform Software Ltd,O=Piriform Software Ltd,L=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
4
Entry point
13888
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths