Behavioral task
behavioral1
Sample
2023-08-26_d19c47621d1e367288e6389fea16ccf1_stop_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_d19c47621d1e367288e6389fea16ccf1_stop_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-26_d19c47621d1e367288e6389fea16ccf1_stop_JC.exe
-
Size
1.2MB
-
MD5
d19c47621d1e367288e6389fea16ccf1
-
SHA1
266e03e8cff7d49f6c70a2567237aa7d8cc36ded
-
SHA256
6ddaae77105cf4161dbadbef7043ac61f8eb7f7d9fd44e96fbb8649e10e9d43b
-
SHA512
601541bc82e8db31cca92f18843a8e7626c14a93dbcfc4560930f2431dd8e73f967f314919f2751b491578a6f9af582fbfaee348cd175d3923b2ab827d0850ca
-
SSDEEP
24576:ZBUIKn/vwOXGUXAjCymYZiVtElVIBT2roqnTSSxWeT/dRPOO86WiHUq7:F0dwAYZt6C31WeTVRPOh6ZUq7
Malware Config
Signatures
-
Detected Djvu ransomware 1 IoCs
resource yara_rule sample family_djvu -
Djvu family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-26_d19c47621d1e367288e6389fea16ccf1_stop_JC.exe
Files
-
2023-08-26_d19c47621d1e367288e6389fea16ccf1_stop_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 809KB - Virtual size: 809KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 247KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ