General

  • Target
    Dictao-beta-x64-setup.exe
  • Size 20.2MB
  • Sample261102-jpw72af17s
  • SHA256 3e184099478a8cb918eff5256bb25d65083096f2d90152bb4cc12d1d8d112e2d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Dictao-beta-x64-setup.exe
    .exe 20.2MB
  • $PLUGINSDIR/NSISdl.dll
    .dll 15KB
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll 33KB
  • dictao.exe
    .exe 27.4MB
  • ggml-base.dll
    .dll 639KB
  • ggml-cpu-alderlake.dll
    .dll 887KB
  • ggml-cpu-cannonlake.dll
    .dll 995KB
  • ggml-cpu-cascadelake.dll
    .dll 992KB
  • ggml-cpu-haswell.dll
    .dll 889KB
  • ggml-cpu-icelake.dll
    .dll 992KB
  • ggml-cpu-sandybridge.dll
    .dll 852KB
  • ggml-cpu-skylakex.dll
    .dll 995KB
  • ggml-cpu-sse42.dll
    .dll 757KB
  • ggml-cpu-x64.dll
    .dll 762KB
  • ggml-vulkan.dll
    .dll 70.4MB
  • ggml.dll
    .dll 66KB
  • msvcp140.dll
    .dll 628KB
  • msvcp140_1.dll
    .dll 34KB
  • msvcp140_2.dll
    .dll 268KB
  • msvcp140_atomic_wait.dll
    .dll 56KB
  • msvcp140_codecvt_ids.dll
    .dll 30KB
  • onnxruntime.dll
    .dll 13.5MB
  • resources/air_start.wav
    77KB
  • resources/air_stop.wav
    77KB
  • resources/bubble_start.wav
    29KB
  • resources/bubble_stop.wav
    29KB
  • resources/chime_start.wav
    148KB
  • resources/chime_stop.wav
    148KB
  • resources/crystal_start.wav
    51KB
  • resources/crystal_stop.wav
    51KB
  • resources/default_settings.json
    337B
  • resources/droplet_start.wav
    46KB
  • resources/droplet_stop.wav
    46KB
  • resources/handy.png
    .png 2KB
  • resources/marimba_start.wav
    99KB
  • resources/marimba_stop.wav
    135KB
  • resources/models/gigaam_vocab.txt
    2KB
  • resources/models/silero_vad_v4.onnx
    1.7MB
  • resources/pop_start.wav
    105KB
  • resources/pop_stop.wav
    99KB
  • resources/recording.png
    .png 2KB
  • resources/rise_start.wav
    79KB
  • resources/rise_stop.wav
    79KB
  • resources/transcribing.png
    .png 2KB
  • resources/tray_idle.png
    .png 1KB
  • resources/tray_idle_dark.png
    .png 2KB
  • resources/tray_recording.png
    .png 2KB
  • resources/tray_recording_dark.png
    .png 2KB
  • resources/tray_transcribing.png
    .png 2KB
  • resources/tray_transcribing_dark.png
    .png 2KB
  • resources/wood_start.wav
    68KB
  • resources/wood_stop.wav
    68KB
  • transcribe.dll
    .dll 1.5MB
  • vcomp140.dll
    .dll 207KB
  • vcruntime140.dll
    .dll 174KB
  • vcruntime140_1.dll
    .dll 48KB
  • vcruntime140_threads.dll
    .dll 37KB

Dictao-beta-x64-setup.exe

  • IMPHASH 46ce5c12b293febbeb513b196aa7f843
  • SHA256 3e184099478a8cb918eff5256bb25d65083096f2d90152bb4cc12d1d8d112e2d
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths