Static task
static1
Behavioral task
behavioral1
Sample
fc2mppatcher.exe
Resource
win7-20230831-en
windows7-x64
Behavioral task
behavioral2
Sample
fc2mppatcher.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
General
-
Target
fc2mppatcher.exe
-
Size
297KB
-
MD5
cdfe04d59c74924f660c0fcedb09b818
-
SHA1
3e1b497315084462fa8c3e20aa6789d02343327e
-
SHA256
d1cba30330a66b9e35706ab52c20f78c7f5e99a0a646027c3ed96e8fb342a92b
-
SHA512
ebed5f43a8209672906d85d82040188b8f841da4d0a50b60d067f2067de95b55e2a38dc99974d3b1759dec7eb388d40d659d12278067377de89b238037e207e1
-
SSDEEP
6144:Fo3frE6ZIxCXb9eeuy8RXVtySFOsgaNsG4Mn2r82rFCVcphpSM:eE6Znr9eny8RXvySFDg0sG49lM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc2mppatcher.exe
Files
-
fc2mppatcher.exe.exe windows:4 windows x86
484b8a7a597ea60d0df17892f2ee8558
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
qt5core
_ZN10QArrayData10deallocateEPS_jj
_ZN10QArrayData11shared_nullE
_ZN10QByteArrayC1EPKci
_ZN10QJsonValueD1Ev
_ZN11QFileDevice5closeEv
_ZN11QJsonObject7detach2Ej
_ZN11QJsonObjectC1Ev
_ZN11QJsonObjectD1Ev
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject14normalizedTypeEPKc
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QTextStreamlsEc
_ZN13QJsonDocument8fromJsonERK10QByteArrayP15QJsonParseError
_ZN13QJsonDocumentD1Ev
_ZN16QCoreApplication18setApplicationNameERK7QString
_ZN16QCoreApplication19setOrganizationNameERK7QString
_ZN16QCoreApplication21setApplicationVersionERK7QString
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN18QCommandLineOptionC1ERK11QStringListRK7QStringS5_S5_
_ZN18QCommandLineOptionD1Ev
_ZN18QCommandLineParser13addHelpOptionEv
_ZN18QCommandLineParser16addVersionOptionEv
_ZN18QCommandLineParser7processERK16QCoreApplication
_ZN18QCommandLineParser9addOptionERK18QCommandLineOption
_ZN18QCommandLineParserC1Ev
_ZN18QCommandLineParserD1Ev
_ZN18QCryptographicHash7addDataEP9QIODevice
_ZN18QCryptographicHashC1ENS_9AlgorithmE
_ZN18QCryptographicHashD1Ev
_ZN18QRegularExpressionC1ERK7QString6QFlagsINS_13PatternOptionEE
_ZN18QRegularExpressionD1Ev
_ZN23QRegularExpressionMatchD1Ev
_ZN4QDir2cdERK7QString
_ZN4QDir4cdUpEv
_ZN4QDirC1ERK7QString
_ZN4QDirC1ERKS_
_ZN4QDirD1Ev
_ZN4QDiraSERK7QString
_ZN5QFile14setPermissionsE6QFlagsIN11QFileDevice10PermissionEE
_ZN5QFile4copyERK7QString
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFile6removeERK7QString
_ZN5QFile6removeEv
_ZN5QFile6renameERK7QString
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN6QDebug9putStringEPK5QCharj
_ZN6QDebugD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QString13toUtf8_helperERKS_
_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE
_ZN7QString14toLower_helperERS_
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString16fromAscii_helperEPKci
_ZN7QString6appendERKS_
_ZN7QString6insertEi5QChar
_ZN7QString6removeEii
_ZN7QStringaSERKS_
_ZN8QSysInfo15machineUniqueIdEv
_ZN8QVariantC1ERK5QSize
_ZN8QVariantC1ERK6QPoint
_ZN8QVariantC1ERK7QString
_ZN8QVariantC1Eb
_ZN8QVariantC1EiPKvj
_ZN8QVariantD1Ev
_ZN9QFileInfoC1ERK5QFile
_ZN9QFileInfoD1Ev
_ZN9QIODevice7readAllEv
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData5eraseEPPv
_ZN9QListData6appendEv
_ZN9QListData6detachEi
_ZN9QListData7disposeEPNS_4DataE
_ZN9QListData7prependEv
_ZN9QListData7reallocEi
_ZN9QMetaType22registerNormalizedTypeERK10QByteArrayPFvPvEPFS3_S3_PKvEi6QFlagsINS_8TypeFlagEEPK11QMetaObject
_ZN9QSettings10beginGroupERK7QString
_ZN9QSettings8endGroupEv
_ZN9QSettings8setValueERK7QStringRK8QVariant
_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject
_ZN9QSettingsD1Ev
_ZN9QtPrivate16QStringList_joinEPK11QStringListPK5QChari
_ZN9QtPrivate20QStringList_containsEPK11QStringListRK7QStringN2Qt15CaseSensitivityE
_ZNK10QByteArray5toHexEv
_ZNK10QJsonValue8toStringEv
_ZNK11QJsonObject4sizeEv
_ZNK11QJsonObject5keyAtEi
_ZNK11QJsonObject5valueERK7QString
_ZNK11QMetaObject2trEPKcS1_i
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK13QJsonDocument6objectEv
_ZNK13QJsonValueRef7toValueEv
_ZNK14QMessageLogger5debugEv
_ZNK18QCommandLineParser5isSetERK18QCommandLineOption
_ZNK18QCommandLineParser5valueERK18QCommandLineOption
_ZNK18QCryptographicHash6resultEv
_ZNK18QRegularExpression5matchERK7QStringiNS_9MatchTypeE6QFlagsINS_11MatchOptionEE
_ZNK23QRegularExpressionMatch8capturedEi
_ZNK23QRegularExpressionMatch8hasMatchEv
_ZNK4QDir12absolutePathEv
_ZNK4QDir6existsERK7QString
_ZNK4QDir6existsEv
_ZNK4QDir7dirNameEv
_ZNK4QDir8filePathERK7QString
_ZNK5QFile6existsEv
_ZNK5QFile8fileNameEv
_ZNK7QObject10objectNameEv
_ZNK7QString10startsWithE5QCharN2Qt15CaseSensitivityE
_ZNK7QString3argERKS_i5QChar
_ZNK7QString3argEyii5QChar
_ZNK7QString5splitE5QCharNS_13SplitBehaviorEN2Qt15CaseSensitivityE
_ZNK7QString5toIntEPbi
_ZNK7QString8endsWithERKS_N2Qt15CaseSensitivityE
_ZNK7QString8multiArgEiPPKS_
_ZNK8QVariant6toBoolEv
_ZNK8QVariant6toSizeEv
_ZNK8QVariant7convertEiPv
_ZNK8QVariant7toPointEv
_ZNK8QVariant8toStringEv
_ZNK8QVariant8userTypeEv
_ZNK8QVariant9constDataEv
_ZNK9QFileInfo10permissionE6QFlagsIN11QFileDevice10PermissionEE
_ZNK9QSettings5valueERK7QStringRK8QVariant
_ZeqRK7QStringS1_
qt5gui
_ZN5QIconC1Ev
_ZN5QIconD1Ev
qt5network
_ZN12QHostAddressD1Ev
_ZN17QNetworkInterface13allInterfacesEv
_ZN17QNetworkInterface16staticMetaObjectE
_ZN17QNetworkInterface17interfaceFromNameERK7QString
_ZN17QNetworkInterfaceC1ERKS_
_ZN17QNetworkInterfaceC1Ev
_ZN17QNetworkInterfaceD1Ev
_ZN20QNetworkAddressEntryC1ERKS_
_ZN20QNetworkAddressEntryD1Ev
_ZNK12QHostAddress8protocolEv
_ZNK12QHostAddress8toStringEv
_ZNK17QNetworkInterface14addressEntriesEv
_ZNK17QNetworkInterface17humanReadableNameEv
_ZNK17QNetworkInterface4nameEv
_ZNK17QNetworkInterface5flagsEv
_ZNK17QNetworkInterface7isValidEv
_ZNK20QNetworkAddressEntry2ipEv
qt5widgets
_ZN10QBoxLayout10setSpacingEi
_ZN10QBoxLayout9addLayoutEP7QLayouti
_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QFileDialog20getExistingDirectoryEP7QWidgetRK7QStringS4_6QFlagsINS_6OptionEE
_ZN11QHBoxLayoutC1Ev
_ZN11QMessageBox11informationEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QMessageBox7warningEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QPushButton10setDefaultEb
_ZN11QPushButtonC1EP7QWidget
_ZN11QVBoxLayoutC1EP7QWidget
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN15QAbstractButton16staticMetaObjectE
_ZN15QAbstractButton7clickedEb
_ZN15QAbstractButton7setTextERK7QString
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QLayout18setContentsMarginsEiiii
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setToolTipERK7QString
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPl
_ZN7QWidget11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QWidget11qt_metacastEPKc
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13setSizePolicyE11QSizePolicy
_ZN7QWidget13showMaximizedEv
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16contextMenuEventEP17QContextMenuEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget16staticMetaObjectE
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4moveERK6QPoint
_ZN7QWidget4showEv
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC2EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidgetD2Ev
_ZN9QComboBox10insertItemEiRK5QIconRK7QStringRK8QVariant
_ZN9QComboBox11setEditableEb
_ZN9QComboBox14setCurrentTextERK7QString
_ZN9QComboBox15setCurrentIndexEi
_ZN9QComboBox16staticMetaObjectE
_ZN9QComboBox19currentIndexChangedEi
_ZN9QComboBoxC1EP7QWidget
_ZN9QLineEdit18setPlaceholderTextERK7QString
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget10sizePolicyEv
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11isMaximizedEv
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget3posEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK9QComboBox11currentDataEi
_ZNK9QComboBox11currentTextEv
_ZNK9QComboBox5countEv
_ZNK9QComboBox8itemDataEii
_ZNK9QComboBox8lineEditEv
_ZTV11QSpacerItem
_ZThn8_NK7QWidget10redirectedEP6QPoint
_ZThn8_NK7QWidget11initPainterEP8QPainter
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget13sharedPainterEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
libgcc_s_dw2-1
_Unwind_Resume
__deregister_frame_info
__register_frame_info
__udivdi3
__umoddi3
libiconv-2
libiconv
libiconv_close
libiconv_open
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
SetFileAttributesW
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___mb_cur_max_func
__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_errno
_initterm
_iob
_onexit
abort
atoi
calloc
exit
fprintf
fputc
free
fwrite
getenv
localeconv
malloc
memcmp
memcpy
memmove
memset
setlocale
signal
strchr
strcmp
strerror
strlen
strncmp
strtol
vfprintf
wcslen
shell32
CommandLineToArgvW
libstdc++-6
_ZNKSt13runtime_error4whatEv
_ZNSi4readEPci
_ZNSi5seekgESt4fposIiE
_ZNSi5seekgExSt12_Ios_Seekdir
_ZNSi5tellgEv
_ZNSo3putEc
_ZNSo5tellpEv
_ZNSo5writeEPKci
_ZNSt12__basic_fileIcED1Ev
_ZNSt13basic_filebufIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode
_ZNSt13basic_filebufIcSt11char_traitsIcEE5closeEv
_ZNSt13basic_filebufIcSt11char_traitsIcEEC1Ev
_ZNSt13basic_filebufIcSt11char_traitsIcEED1Ev
_ZNSt13runtime_errorC2EPKc
_ZNSt13runtime_errorC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNSt13runtime_errorD2Ev
_ZNSt14basic_ifstreamIcSt11char_traitsIcEED1Ev
_ZNSt14basic_ofstreamIcSt11char_traitsIcEED1Ev
_ZNSt6localeD1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6resizeEjc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERjj
_ZNSt8ios_baseC2Ev
_ZNSt8ios_baseD2Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E
_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate
_ZSt17__throw_bad_allocv
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt20__throw_out_of_rangePKc
_ZSt24__throw_invalid_argumentPKc
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZTTSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTTSt14basic_ofstreamIcSt11char_traitsIcEE
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZTVSt13basic_filebufIcSt11char_traitsIcEE
_ZTVSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTVSt14basic_ofstreamIcSt11char_traitsIcEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZdaPv
_ZdlPv
_ZdlPvj
_Znaj
_Znwj
__cxa_allocate_exception
__cxa_begin_catch
__cxa_end_catch
__cxa_free_exception
__cxa_guard_abort
__cxa_guard_acquire
__cxa_guard_release
__cxa_pure_virtual
__cxa_rethrow
__cxa_throw
__gxx_personality_v0
Sections
.text Size: 213KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE