General

  • Target

    QDeskSetup1.1.1.6.exe

  • Size

    10.1MB

  • MD5

    413fd3e1d20e10b93ceb366b51bf6f53

  • SHA1

    e8a7d0c2ad2b4f923b56edecb547304f433eda07

  • SHA256

    4969529f962c7cbbb1c368b92dd2f99131c3ad6e5a12919b8aee8b47c92beacf

  • SHA512

    9b90b7ff03decc5154cc8e07a40e0d7f73fe7e110809550957d3fc841526c62a6ca785c417ae717e9cad7ebd3cc96fbb96d304933fc5b79b26c71e27f85081fd

  • SSDEEP

    196608:FC6Dc8zspBYxPYvYWAi19y5bx+ys/4OLQAFzTk9xRCk2KINKwXOIdpyVJ6:Fvzsp3vYm85b8yslZTcF8tXkI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • QDeskSetup1.1.1.6.exe
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    274b99a815ba574d8c9e1712916d8b30


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    46f8b6973f33717335c0f6d8087de67b


    Headers

    Imports

    Exports

    Sections

  • D3DCompiler_43.dll
    .dll windows:6 windows x64 arch:x64

    87e48ad40a89f4f6e1404989a85ca976


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • D3DX9_43.dll
    .dll windows:6 windows x64 arch:x64

    336d8057d1db03e5a3ac3b62e8902f4b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VMProtectSDK64.dll
    .dll windows:5 windows x64 arch:x64

    1851ff453adce0cef5274e320d5bed3c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avcodec-58.dll
    .dll windows:6 windows x64 arch:x64

    e6b9dca5a416a8cbf02a06553f734331


    Headers

    Imports

    Exports

    Sections

  • avdevice-58.dll
    .dll windows:6 windows x64 arch:x64

    78184aefb8b5a4bd80e41f52c486c8cc


    Headers

    Imports

    Exports

    Sections

  • avfilter-7.dll
    .dll windows:6 windows x64 arch:x64

    e0f4553b81473d8ac28ff8649eb8c133


    Headers

    Imports

    Exports

    Sections

  • avformat-58.dll
    .dll windows:6 windows x64 arch:x64

    afc3d456a6f867e724588825b5386cf5


    Headers

    Imports

    Exports

    Sections

  • avutil-56.dll
    .dll windows:6 windows x64 arch:x64

    b06b8033916b2dd6b1e00cfe0008248e


    Headers

    Imports

    Exports

    Sections

  • breakpad.dll
    .dll windows:6 windows x64 arch:x64

    874bb12241997d4f01dccaaf667e7097


    Headers

    Imports

    Exports

    Sections

  • d3dx11_43.dll
    .dll windows:6 windows x64 arch:x64

    81904c72645caa23fce37aa3b4a853e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • driver/devcon.exe
    .exe windows:10 windows x64 arch:x64

    68d7a4b13b38a420769678c927abc196


    Headers

    Imports

    Sections

  • driver/idd/qdeskidd.cat
  • driver/idd/qdeskidd.dll
    .dll windows:10 windows x64 arch:x64

    caa98f35d3d37ea68230c4ec2dd28e69


    Headers

    Imports

    Exports

    Sections

  • driver/idd/qdeskidd.inf
  • driver/install.bat
  • driver/qdeskhid/qdeskhid.cat
  • driver/qdeskhid/qdeskhid.inf
  • driver/qdeskhid/qdeskhid.sys
    .sys windows:10 windows x64 arch:x64

    262a92dbe66b55225a26ed728eaa2e03


    Headers

    Imports

    Sections

  • driver/uninstall.bat
  • driver/vigem/ViGEmBus.cat
  • driver/vigem/ViGEmBus.inf
  • driver/vigem/ViGEmBus.sys
    .sys windows:10 windows x64 arch:x64

    2b05ffaf020d557250850e4af9bda453


    Code Sign

    Headers

    Imports

    Sections

  • duilib.dll
    .dll windows:6 windows x64 arch:x64

    fce9aa42cb14e26003bda20b5fd2161f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • edid/1366x768x60.hex
  • edid/1440x900x60.hex
  • edid/1600x900x60.hex
  • edid/1920x1080x144.hex
  • edid/1920x1080x165.hex
  • edid/1920x1080x200.hex
  • edid/1920x1080x240.hex
  • edid/1920x1080x280.hex
  • edid/1920x1080x360.hex
  • edid/1920x1080x60.hex
  • edid/1920x1080x75.hex
  • edid/2560x1080x144.hex
  • edid/2560x1080x200.hex
  • edid/2560x1440x144.hex
  • edid/2560x1440x155.hex
  • edid/2560x1440x165.hex
  • edid/2560x1440x170.hex
  • edid/2560x1440x180.hex
  • edid/2560x1440x240.hex
  • edid/2560x1440x60.hex
  • edid/2560x1440x75.hex
  • edid/2560x1440x90.hex
  • edid/3840x2160x60.hex
  • libx264-164.dll
    .dll windows:4 windows x64 arch:x64

    4afade20abdb686756c1d9a537c71167


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • privacy_wnd.exe
    .exe windows:6 windows x64 arch:x64

    8b0c352951a0343c8ae88821bc8d74ad


    Code Sign

    Headers

    Imports

    Sections

  • quicdesk.exe
    .exe windows:6 windows x64 arch:x64

    b2585ffa76ccb576bb494a58cb6724dc


    Headers

    Imports

    Exports

    Sections

  • quicdesk_ui.exe
    .exe windows:6 windows x64 arch:x64

    0b958f394102582892298d3867ff3a2f


    Headers

    Imports

    Sections

  • quicnet.dll
    .dll windows:6 windows x64 arch:x64

    052c89d63f4a033d80369c832c096e33


    Headers

    Imports

    Exports

    Sections

  • res/arrow.cur
  • res/weaknet.png
    .png
  • sioclient_tls.dll
    .dll windows:6 windows x64 arch:x64

    9ae7d36718da5b6d0722abde0fe093b0


    Headers

    Imports

    Exports

    Sections

  • swresample-3.dll
    .dll windows:6 windows x64 arch:x64

    2c4dc881eed225b5c209cbad15f22669


    Headers

    Imports

    Exports

    Sections

  • swscale-5.dll
    .dll windows:6 windows x64 arch:x64

    7ea9064e325850c8bbdb7b987ffe6cde


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    274b99a815ba574d8c9e1712916d8b30


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    46f8b6973f33717335c0f6d8087de67b


    Headers

    Imports

    Exports

    Sections

  • xinput1_3.dll
    .dll windows:5 windows x64 arch:x64

    cfb6d24996ee7fd94a9861f495966a8f


    Code Sign

    Headers

    Imports

    Exports

    Sections