From d8049792f19c36ed7a2ba92edc5b8d704c4d7776 Mon Sep 17 00:00:00 2001
From: Matt Nadareski <mnadareski@outlook.com>
Date: Sun, 7 Sep 2025 21:07:00 -0400
Subject: [PATCH] Add Spoon Installer detection (fixes #98)

---
 BinaryObjectScanner/Packer/SpoonInstaller.cs | 25 ++++++++++++++++++++
 README.md                                    |  1 +
 2 files changed, 26 insertions(+)
 create mode 100644 BinaryObjectScanner/Packer/SpoonInstaller.cs

diff --git a/BinaryObjectScanner/Packer/SpoonInstaller.cs b/BinaryObjectScanner/Packer/SpoonInstaller.cs
new file mode 100644
index 00000000..13d55f8e
--- /dev/null
+++ b/BinaryObjectScanner/Packer/SpoonInstaller.cs
@@ -0,0 +1,25 @@
+using BinaryObjectScanner.Interfaces;
+using SabreTools.Serialization.Wrappers;
+
+namespace BinaryObjectScanner.Packer
+{
+    /// <summary>
+    /// Spoon Installer
+    /// </summary>
+    public class SpoonInstaller : IExecutableCheck<PortableExecutable>
+    {
+        /// <inheritdoc/>
+        public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
+        {
+            // <see href="https://www.virustotal.com/gui/file/ad876d9aa59a2c51af776ce7c095af69f41f2947c6a46cfe87a724ecf8745084/details"/>
+            var name = exe.AssemblyDescription;
+            if (name.OptionalEquals("Spoon Installer"))
+                return "Spoon Installer";
+
+            // TODO: Add assembly identity name check as well: "Illustrate.Spoon.Installer"
+            // Requires adding a helper to get the first Assembly Identity whose name is not null
+
+            return null;
+        }
+    }
+}
diff --git a/README.md b/README.md
index e1cc2634..951e1f26 100644
--- a/README.md
+++ b/README.md
@@ -171,6 +171,7 @@ Below is a list of executable packers detected by BinaryObjectScanner. The three
 | PKLITE32 | Yes | No | No | |
 | Setup Factory | Yes | No | No | |
 | Shrinker | Yes | No | No | |
+| Spoon Installer | Yes | No | No | |
 | UPX and UPX (NOS Variant) | Yes | No | No | |
 | WinRAR SFX | Yes | No | Yes | |
 | WinZip SFX | Yes | No | Yes | |