General

  • Target
    Handy_0.10.0_x64-setup.exe
  • Size 16.4MB
  • Sample261102-tznzhsbv41
  • SHA256 d4c02386d6b4b2a8ef8e53a7ce5c6c417d554005e91b3529def3920e0e786d03
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Handy_0.10.0_x64-setup.exe
    .exe 16.4MB
  • $PLUGINSDIR/NSISdl.dll
    .dll 15KB
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll 48KB
  • ggml-base.dll
    .dll 689KB
  • ggml-cpu-alderlake.dll
    .dll 1.1MB
  • ggml-cpu-cannonlake.dll
    .dll 1.2MB
  • ggml-cpu-cascadelake.dll
    .dll 1.2MB
  • ggml-cpu-haswell.dll
    .dll 1.1MB
  • ggml-cpu-icelake.dll
    .dll 1.2MB
  • ggml-cpu-sandybridge.dll
    .dll 1.1MB
  • ggml-cpu-skylakex.dll
    .dll 1.2MB
  • ggml-cpu-sse42.dll
    .dll 861KB
  • ggml-cpu-x64.dll
    .dll 865KB
  • ggml-vulkan.dll
    .dll 41.4MB
  • ggml.dll
    .dll 76KB
  • handy.exe
    .exe 30.7MB
  • msvcp140.dll
    .dll 628KB
  • msvcp140_1.dll
    .dll 34KB
  • msvcp140_2.dll
    .dll 268KB
  • msvcp140_atomic_wait.dll
    .dll 56KB
  • msvcp140_codecvt_ids.dll
    .dll 30KB
  • resources/default_settings.json
    337B
  • resources/handy.png
    .png 768B
  • resources/handy_warning.png
    .png 2KB
  • resources/marimba_start.wav
    99KB
  • resources/marimba_stop.wav
    135KB
  • resources/models/silero-vad-v6.2-F32.gguf
    1.2MB
  • resources/pop_start.wav
    105KB
  • resources/pop_stop.wav
    99KB
  • resources/recording.png
    .png 678B
  • resources/transcribing.png
    .png 756B
  • resources/tray_idle.png
    .png 1KB
  • resources/tray_idle_dark.png
    .png 1KB
  • resources/tray_idle_warning.png
    .png 1KB
  • resources/tray_idle_warning_dark.png
    .png 1KB
  • resources/tray_recording.png
    .png 1KB
  • resources/tray_recording_dark.png
    .png 1KB
  • resources/tray_transcribing.png
    .png 1KB
  • resources/tray_transcribing_dark.png
    .png 1KB
  • transcribe.dll
    .dll 1.9MB
  • vcomp140.dll
    .dll 207KB
  • vcruntime140.dll
    .dll 174KB
  • vcruntime140_1.dll
    .dll 48KB
  • vcruntime140_threads.dll
    .dll 37KB

Handy_0.10.0_x64-setup.exe

  • IMPHASH 46ce5c12b293febbeb513b196aa7f843
  • SHA256 d4c02386d6b4b2a8ef8e53a7ce5c6c417d554005e91b3529def3920e0e786d03
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6c:0e:1f:78:d8:1d:8f:63:50:b9:c4:9f:b0:c1:e1:80:85:80:34:9e:ae:f9:f9:d4:e9:ba:44:84:a5:68:35:38
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=YNYNG LLC,O=YNYNG LLC,L=Sacramento,ST=California,C=US
Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths