9dfb6b41c90732c9206ef6f65a941b1061126ead69e3715d79519196dad5899c_payload.exe Ransomware STOP/Djvu Analysis

Ransomware STOP/Djvu
Updated on 2024-01-12 (3 months ago)
Checked by Online Virus Scanner
Online Virus Checkerv.1.0.154.174
DB Version:2024-01-12 12:04:16

Ransom.Win32.STOP.tr

STOP/Djvu Ransomware, also known simply as STOP Ransomware or Djvu Ransomware, is a type of malicious software that encrypts the files on a victim's computer and demands a ransom for their decryption. This ransomware variant has been active for several years and has affected numerous users and organizations.

File9dfb6b41c90732c9206ef6f65a941b1061126ead69e3715d79519196dad5899c_payload.exe
Checked2024-01-12 12:49:28
MD53eeb7b2030517f91fdf0f4c5278d8e76
SHA1c4c3a4650d278f2f8b9bf871c2ae91508ffae165
SHA2564ad7b8d228fe32d82b0373ce886f224f47c2e06a59d394c634160c70083b5f32
SHA512eaea7fa64c8bedf0698a12f16871c5a4caf19f4ce5576765d2d803568c8fe95ae4bef456c2c72f1591bda16fce412850889770a58a5e239e60a31633bfb7d110
Imphash0c756c849bc7b459f78f7a5ce46cd4a7
File Size1150976 bytes

Ransom.Win32.STOP.tr Removal

Ransom.Win32.STOP.tr Removal

Gridinsoft has the capability to identify and eliminate Ransom.Win32.STOP.tr without requiring further user intervention.

  • Start by downloading Gridinsoft Anti-Malware to your computer.
  • Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  • Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  • Click on the "Standard Scan" button.
  • After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  • If prompted, restart your system to complete the removal process.

Portable Executable Info

Image Base:0x00400000
Entry Point:0x00424141
Compilation:2019-09-23 17:30:31
Checksum:0x00000000 (Actual: 0x0011d2e6)
OS Version:5.1
PDB Path:E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
PEiD:PE32 executable (GUI) Intel 80386, for MS Windows
Sign:The PE file does not contain a certificate table.
Sections:5
Imports: RPCRT4, MPR, WININET, WINMM, SHLWAPI, KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, IPHLPAPI, WS2_32, DNSAPI, CRYPT32, GDI32,
Exports: 0
Resources:1

Sections

Name Virtual Address Virtual Size Raw Size MD5 Entropy
.text 0x00001000 0x000ca5bc 0x000ca600 9d3505098e4eee3dc361c6bef0b26b98 6.57
.rdata 0x000cc000 0x0003dba2 0x0003dc00 0f42a4cf76b698dd17862729640276b6 5.67
.data 0x0010a000 0x00020358 0x00006400 b9cff45acba0bf73d16290994acd3da3 4.94
.rsrc 0x0012b000 0x000001e0 0x00000200 9c3280f335e8e346ce925599d24fcc62 4.72
.reloc 0x0012c000 0x0000a32c 0x0000a400 24f3bb349067df95682b9a6026a53082 6.61

Leave a comment*

Share your thoughts or insights about this file. Do you align with our conclusion?

*Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Please Wait...

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware