General

  • Target

    QDeskSetup1.13.exe

  • Size

    9.5MB

  • MD5

    f7842ed9dae6298a41e86387fc37faae

  • SHA1

    e383cfa12ed2596a9615074a606e785aeb12e05d

  • SHA256

    4170a43774964dede1bd0874d2cfe12653080da060b20ce65e8459241f7a58de

  • SHA512

    dbb5189f4128ee58973b9e91e4296db401c06e1ae99f4b239ac3beff11e8963ac68baa72b788d34c52196434c4b330a4aa2d3be479ec59b67844d7144ed9613f

  • SSDEEP

    196608:8Ce/iWUA39njKVZfJnSe23MsACSJ4KnV8F0fLBmJCkpnIQ7kZ+:8J/y8jASe23Ms44KnVnfwkyIZg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • QDeskSetup1.13.exe
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    274b99a815ba574d8c9e1712916d8b30


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    46f8b6973f33717335c0f6d8087de67b


    Headers

    Imports

    Exports

    Sections

  • D3DX9_43.dll
    .dll windows:6 windows x64 arch:x64

    336d8057d1db03e5a3ac3b62e8902f4b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VMProtectSDK64.dll
    .dll windows:5 windows x64 arch:x64

    1851ff453adce0cef5274e320d5bed3c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • breakpad.dll
    .dll windows:6 windows x64 arch:x64

    874bb12241997d4f01dccaaf667e7097


    Headers

    Imports

    Exports

    Sections

  • crashreport.exe
    .exe windows:6 windows x64 arch:x64

    9cc2b14cd191535634715c76f28e56c2


    Code Sign

    Headers

    Imports

    Sections

  • driver/devcon.exe
    .exe windows:10 windows x64 arch:x64

    68d7a4b13b38a420769678c927abc196


    Headers

    Imports

    Sections

  • driver/idd/qdeskidd.cat
  • driver/idd/qdeskidd.dll
    .dll windows:10 windows x64 arch:x64

    caa98f35d3d37ea68230c4ec2dd28e69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • driver/idd/qdeskidd.inf
  • driver/install.bat
  • driver/uninstall.bat
  • driver/vigem/ViGEmBus.cat
  • driver/vigem/ViGEmBus.inf
  • driver/vigem/ViGEmBus.sys
    .sys windows:10 windows x64 arch:x64

    2b05ffaf020d557250850e4af9bda453


    Code Sign

    Headers

    Imports

    Sections

  • driver/vmulti/WdfCoInstaller01009.dll
    .dll windows:6 windows x86 arch:x86

    a17af54bf9d379152b9c377204b35eb9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • driver/vmulti/hidkmdf.sys
    .sys windows:6 windows x64 arch:x64

    e8e487ab35ff7db0ab732351bd9aba78


    Code Sign

    Headers

    Imports

    Sections

  • driver/vmulti/vmulti.cat
  • driver/vmulti/vmulti.inf
  • driver/vmulti/vmulti.sys
    .sys windows:6 windows x64 arch:x64

    f1f8c6545a85894ab9a3e8db68853297


    Code Sign

    Headers

    Imports

    Sections

  • duilib.dll
    .dll windows:6 windows x64 arch:x64

    fce9aa42cb14e26003bda20b5fd2161f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • edid/1920x1080x60.hex
  • edid/2560x1440x60.hex
  • edid/3840x2160x60.hex
  • libx264-164.dll
    .dll windows:4 windows x64 arch:x64

    4afade20abdb686756c1d9a537c71167


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • privacy_wnd.exe
    .exe windows:6 windows x64 arch:x64

    8b0c352951a0343c8ae88821bc8d74ad


    Code Sign

    Headers

    Imports

    Sections

  • quicdesk.exe
    .exe windows:6 windows x64 arch:x64

    9ae60f4b647d6bf2fbcdb22fac5631e6


    Headers

    Imports

    Exports

    Sections

  • quicdesk_ui.exe
    .exe windows:6 windows x64 arch:x64

    35deec82bfa5eaf25b34ea78650c6fdf


    Headers

    Imports

    Sections

  • quicnet.dll
    .dll windows:6 windows x64 arch:x64

    de8de66bd5c79ce86b1c842d207376ff


    Headers

    Imports

    Exports

    Sections

  • res/arrow.cur
  • res/weaknet.png
    .png
  • sioclient_tls.dll
    .dll windows:6 windows x64 arch:x64

    9ae7d36718da5b6d0722abde0fe093b0


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    274b99a815ba574d8c9e1712916d8b30


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    46f8b6973f33717335c0f6d8087de67b


    Headers

    Imports

    Exports

    Sections

  • xinput1_3.dll
    .dll windows:5 windows x64 arch:x64

    cfb6d24996ee7fd94a9861f495966a8f


    Code Sign

    Headers

    Imports

    Exports

    Sections