General

  • Target
    QDeskSetup1.1.1.6.exe
  • Size 10.1MB
  • Sample240329-nzkdfagg89
  • SHA256 4969529f962c7cbbb1c368b92dd2f99131c3ad6e5a12919b8aee8b47c92beacf
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

File Explorer

  • QDeskSetup1.1.1.6.exe
    .exe 10.1MB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • D3DCompiler_43.dll
    .dll 2.4MB
  • D3DX9_43.dll
    .dll 2.3MB
  • VMProtectSDK64.dll
    .dll 137KB
  • avcodec-58.dll
    .dll 5.1MB
  • avdevice-58.dll
    .dll 742KB
  • avfilter-7.dll
    .dll 866KB
  • avformat-58.dll
    .dll 1.4MB
  • avutil-56.dll
    .dll 1.7MB
  • breakpad.dll
    .dll 172KB
  • d3dx11_43.dll
    .dll 270KB
  • driver/devcon.exe
    .exe 80KB
  • driver/idd/qdeskidd.cat
    11KB
  • driver/idd/qdeskidd.dll
    .dll 84KB
  • driver/idd/qdeskidd.inf
    3KB
  • driver/install.bat
    913B
  • driver/qdeskhid/qdeskhid.cat
    11KB
  • driver/qdeskhid/qdeskhid.inf
    2KB
  • driver/qdeskhid/qdeskhid.sys
    .sys 41KB
  • driver/uninstall.bat
    140B
  • driver/vigem/ViGEmBus.cat
    10KB
  • driver/vigem/ViGEmBus.inf
    3KB
  • driver/vigem/ViGEmBus.sys
    .sys 161KB
  • duilib.dll
    .dll 1.0MB
  • edid/1366x768x60.hex
    383B
  • edid/1440x900x60.hex
    383B
  • edid/1600x900x60.hex
    383B
  • edid/1920x1080x144.hex
    767B
  • edid/1920x1080x165.hex
    383B
  • edid/1920x1080x200.hex
    767B
  • edid/1920x1080x240.hex
    767B
  • edid/1920x1080x280.hex
    767B
  • edid/1920x1080x360.hex
    1KB
  • edid/1920x1080x60.hex
    383B
  • edid/1920x1080x75.hex
    383B
  • edid/2560x1080x144.hex
    383B
  • edid/2560x1080x200.hex
    767B
  • edid/2560x1440x144.hex
    383B
  • edid/2560x1440x155.hex
    767B
  • edid/2560x1440x165.hex
    767B
  • edid/2560x1440x170.hex
    1KB
  • edid/2560x1440x180.hex
    1KB
  • edid/2560x1440x240.hex
    1KB
  • edid/2560x1440x60.hex
    383B
  • edid/2560x1440x75.hex
    767B
  • edid/2560x1440x90.hex
    383B
  • edid/3840x2160x60.hex
    767B
  • libx264-164.dll
    .dll 3.0MB
  • privacy_wnd.exe
    .exe 560KB
  • quicdesk.exe
    .exe 3.6MB
  • quicdesk_ui.exe
    .exe 1.3MB
  • quicnet.dll
    .dll 6.6MB
  • res/arrow.cur
    8KB
  • res/weaknet.png
    .png 1KB
  • sioclient_tls.dll
    .dll 3.1MB
  • swresample-3.dll
    .dll 848KB
  • swscale-5.dll
    .dll 1.4MB
  • uninst.exe
    .exe 79KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • xinput1_3.dll
    .dll 104KB

QDeskSetup1.1.1.6.exe

  • IMPHASH 57e98d9a5a72c8d7ad8fb7a6a58b3daf
  • SHA256 4969529f962c7cbbb1c368b92dd2f99131c3ad6e5a12919b8aee8b47c92beacf
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

  • NSIS installer

Minor OS version
0
Major OS version
4
Entry point
13069
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths