Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-01_1b4994093c16ac227c82e93c656f4680_get-user-info_hijackloader_magniber_revil.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-09-01_1b4994093c16ac227c82e93c656f4680_get-user-info_hijackloader_magniber_revil.exe
Resource
win10v2004-20240802-en
Target
2024-09-01_1b4994093c16ac227c82e93c656f4680_get-user-info_hijackloader_magniber_revil
Size
28.9MB
MD5
1b4994093c16ac227c82e93c656f4680
SHA1
bc30c0dddda8b6aaf9fe7ff1fd173e8cd640961d
SHA256
4ef038de745e267a0046b2e9ffd14ead8c2cff3e4a9f0493e8b240b3b05e6411
SHA512
3bceed380418b7b627b6d4d6430df204beebac542761b6289be8096c967f0372670f75625ac122ecae563b2470f2bb376b684bc81603f868d774b436807c31f9
SSDEEP
393216:xKLsNkLB1Eyzzhjc9GZ1nncBC2NqFOvoizJ2jacQu3d0J4rYRZKV1PEr0lR4fjvJ:IoNqEyG9Grfs3zxcQh0o7vYG
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
X:\联想工具\关闭Win11系统自动更新商业化\Code\QuickFix\Release\QuickFix.pdb
FindNextFileW
FindFirstFileExW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
GetTimeZoneInformation
LCMapStringW
GetStdHandle
GetFileType
GetACP
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetCommandLineA
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
RtlUnwind
OutputDebugStringW
IsValidCodePage
GetOEMCP
GetCPInfo
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetTempFileNameW
SearchPathW
GetEnvironmentStringsW
GetProfileIntW
GetTickCount
GetWindowsDirectoryW
FindResourceExW
GetTempPathW
GetCurrentDirectoryW
SetErrorMode
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileAttributesExW
FileTimeToLocalFileTime
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
FileTimeToSystemTime
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
InitializeCriticalSectionAndSpinCount
VerifyVersionInfoW
VerSetConditionMask
GetPrivateProfileIntW
lstrcmpA
GetVersionExW
GetCurrentThread
SetThreadPriority
GetThreadLocale
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetModuleHandleA
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
SetLastError
CopyFileW
FormatMessageW
LocalFree
GlobalSize
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileStringW
DeleteFileW
CreateThread
GetCommandLineW
WriteFile
GetFileSizeEx
CreateFileW
Sleep
MultiByteToWideChar
ReadFile
Process32NextW
TerminateProcess
Process32FirstW
CreateToolhelp32Snapshot
Wow64RevertWow64FsRedirection
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
Wow64DisableWow64FsRedirection
CreateDirectoryW
GetCurrentProcess
GetProcAddress
GetModuleHandleW
lstrcpyW
GetFileAttributesW
WideCharToMultiByte
ResetEvent
SetEvent
WaitForSingleObject
FreeResource
GlobalAlloc
ResumeThread
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
CloseHandle
CreateEventW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetModuleFileNameW
SizeofResource
FindResourceW
LoadResource
LockResource
SetStdHandle
WriteConsoleW
CopyImage
RealChildWindowFromPoint
IntersectRect
GetMenuItemInfoW
DestroyMenu
SetCursor
ShowOwnedPopups
EnumDisplayMonitors
SystemParametersInfoW
LoadCursorW
SetLayeredWindowAttributes
DrawIconEx
IsRectEmpty
InflateRect
DrawFocusRect
GetSysColorBrush
DrawStateW
DrawFrameControl
DrawEdge
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
TranslateMessage
GetMessageW
SetRectEmpty
SendDlgItemMessageA
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
CharUpperW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
TrackMouseEvent
DestroyIcon
DestroyAcceleratorTable
EnableWindow
GetClientRect
FillRect
GetParent
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
LoadMenuW
RemoveMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
LoadImageW
WaitMessage
SetCapture
ReleaseCapture
WindowFromPoint
DeleteMenu
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxW
SetParent
MonitorFromPoint
IsZoomed
NotifyWinEvent
SetCursorPos
UnionRect
BringWindowToTop
GetAsyncKeyState
GetWindowRect
PtInRect
InvalidateRect
GetCursorPos
ScreenToClient
UnregisterClassW
SetRect
GetDC
ReleaseDC
GetSysColor
CopyRect
SendMessageW
GetSystemMetrics
GetWindowLongW
SetWindowLongW
UpdateLayeredWindow
IsWindow
SetWindowPos
OffsetRect
SetWindowRgn
SetTimer
KillTimer
LoadIconW
GetSystemMenu
AppendMenuW
IsIconic
DrawIcon
DrawTextW
ModifyMenuW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
ClientToScreen
IsWindowEnabled
SetClassLongW
GetUpdateRect
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
MapVirtualKeyW
LoadAcceleratorsW
CreateAcceleratorTableW
HideCaret
InvertRect
GetKeyNameTextW
FrameRect
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatW
SubtractRect
CharUpperBuffW
IsClipboardFormatAvailable
PostThreadMessageW
IsCharLowerW
MapVirtualKeyExW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
GetComboBoxInfo
CreateMenu
DestroyCursor
GetWindowRgn
SetMenuDefaultItem
GetMenuDefaultItem
CopyIcon
GetIconInfo
GetDoubleClickTime
EnableScrollBar
LockWindowUpdate
CreatePopupMenu
CreatePatternBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreatePen
CreateDCW
CombineRgn
CreateEllipticRgn
CreateRectRgnIndirect
Ellipse
GetBkColor
GetTextColor
PatBlt
CreatePolygonRgn
Polygon
Polyline
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetMapMode
SetRectRgn
DPtoLP
GetRgnBox
RealizePalette
SetPixel
CreateDIBSection
SetDIBColorTable
Rectangle
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
EnumFontFamiliesExW
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceW
CreateHatchBrush
CreateBitmap
CreateRoundRectRgn
GetTextExtentPoint32W
CreateFontIndirectW
GetObjectW
GetStockObject
GetTextMetricsW
DeleteObject
SelectObject
GetDeviceCaps
StretchBlt
CreateSolidBrush
BitBlt
CreateCompatibleBitmap
CopyMetaFileW
DeleteDC
CreateCompatibleDC
TransparentBlt
AlphaBlend
ClosePrinter
OpenPrinterW
DocumentPropertiesW
RegEnumKeyW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
ShellExecuteW
CommandLineToArgvW
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
DragFinish
DragQueryFileW
SHAppBarMessage
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
InitCommonControlsEx
_TrackMouseEvent
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
StrFormatKBSizeW
PathIsUNCW
IsThemeBackgroundPartiallyTransparent
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeSysColor
GetThemeColor
GetCurrentThemeName
DrawThemeParentBackground
GetThemePartSize
DrawThemeText
GetWindowTheme
IsAppThemed
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoInitializeEx
CoRevokeClassObject
CoRegisterMessageFilter
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CoCreateInstance
CLSIDFromProgID
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
OleUninitialize
CLSIDFromString
VarBstrFromDate
VariantCopy
OleCreateFontIndirect
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
OleLoadPicture
OleUIBusyW
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipSetInterpolationMode
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdiplusStartup
GdipCloneImage
GdipAlloc
GdipFree
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipDrawImageRectI
GdiplusShutdown
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRectI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipDisposeImage
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
PlaySoundW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ