Jigsaw-Ransomware-master[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Jigsaw-Ransomware-master.zip
Size

268KB
MD5

5596fd854875bee824de61ed8c6508a9
SHA1

11ccd44a1ddf182dbf16137ec270e760be37c433
SHA256

ef0e14a9813a9bda9808bebd309d82348d03ef94913932694bc52581c8de94a8
SHA512

dfeaa43bb0b0409e15d91dcf8b9e943c45ba233a84ae1e4d805c9f025e74fbc18daa53f1484420cbff92280165bec49a8efc61a33d049356f38954f9bed1a18e
SSDEEP

6144:tq/F5nWM6EZS7JCa4JMSk/tN+6nWM6EZS7JCn4JOj9:tUikS1CapS2N+3kS1CnDj9

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Jigsaw-Ransomware-master/Jigsaw/Jigsaw/bin/Debug/Jigsaw.exe
unpack001/Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/Jigsaw.exe
unpack001/Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/TempPE/My Project.Resources.Designer.vb.dll

Files

Jigsaw-Ransomware-master.zip
.zip
Jigsaw-Ransomware-master/Jigsaw/Jigsaw.sln
Jigsaw-Ransomware-master/Jigsaw/Jigsaw.v11.suo
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/App.config
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Form1.Designer.vb
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Form1.resx
.vbs
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Form1.vb
.vbs
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Form2.Designer.vb
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Form2.resx
.vbs
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Form2.vb
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Form3.Designer.vb
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Form3.resx
.vbs
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Form3.vb
.vbs
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Jigsaw.vbproj
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Jigsaw.vbproj.user
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/My Project/Application.Designer.vb
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/My Project/Application.myapp
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/My Project/AssemblyInfo.vb
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/My Project/Resources.Designer.vb
.vbs
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/My Project/Resources.resx
.vbs
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/My Project/Settings.Designer.vb
.vbs
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/My Project/Settings.settings
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/Resources/Jigsaw.jpg
.jpg
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/bin/Debug/Jigsaw.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ScreenLocker\Jigsaw\Jigsaw\Jigsaw\obj\Debug\Jigsaw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/bin/Debug/Jigsaw.exe.config
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/bin/Debug/Jigsaw.pdb
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/bin/Debug/Jigsaw.vshost.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/07/2012, 00:14

Not After

07/10/2013, 00:14

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

22:64:5f:e5:cf:38:f2:a2:a8:69:b4:29:9f:d2:ac:e1:72:43:a2:c4:35:f0:35:c1:ce:91:a1:5b:f4:6c:43:dc
Signer

Actual PE Digest

22:64:5f:e5:cf:38:f2:a2:a8:69:b4:29:9f:d2:ac:e1:72:43:a2:c4:35:f0:35:c1:ce:91:a1:5b:f4:6c:43:dc

Digest Algorithm

sha256

PE Digest Matches

true

62:ac:05:0a:9d:d8:fe:44:a8:ef:62:6a:b5:a0:96:e3:c9:0a:46:e0
Signer

Actual PE Digest

62:ac:05:0a:9d:d8:fe:44:a8:ef:62:6a:b5:a0:96:e3:c9:0a:46:e0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\binaries\Intermediate\vsproject\vshost32.csproj__1853760103\objr\x86\vshost32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/bin/Debug/Jigsaw.vshost.exe.config
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/bin/Debug/Jigsaw.vshost.exe.manifest
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/bin/Debug/Jigsaw.xml
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/DesignTimeResolveAssemblyReferences.cache
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/Jigsaw.Form1.resources
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/Jigsaw.Form2.resources
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/Jigsaw.Form3.resources
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/Jigsaw.Resources.resources
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/Jigsaw.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ScreenLocker\Jigsaw\Jigsaw\Jigsaw\obj\Debug\Jigsaw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/Jigsaw.pdb
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/Jigsaw.vbproj.FileListAbsolute.txt
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/Jigsaw.vbproj.GenerateResource.Cache
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/Jigsaw.xml
Jigsaw-Ransomware-master/Jigsaw/Jigsaw/obj/Debug/TempPE/My Project.Resources.Designer.vb.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Jigsaw-Ransomware-master/README.md

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 105KB - Virtual size: 104KB

.sdata Size: 512B - Virtual size: 312B

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

61:19:cc:93:00:01:00:00:00:66Certificate

Extended Key Usages

Key Usages

61:05:13:36:00:00:00:00:00:1aCertificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

22:64:5f:e5:cf:38:f2:a2:a8:69:b4:29:9f:d2:ac:e1:72:43:a2:c4:35:f0:35:c1:ce:91:a1:5b:f4:6c:43:dcSigner

62:ac:05:0a:9d:d8:fe:44:a8:ef:62:6a:b5:a0:96:e3:c9:0a:46:e0Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 4KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 105KB - Virtual size: 104KB

.sdata Size: 512B - Virtual size: 312B

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 776B

.reloc Size: 512B - Virtual size: 12B

.text
Size: 105KB - Virtual size: 104KB

.sdata
Size: 512B - Virtual size: 312B

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 12B

61:19:cc:93:00:01:00:00:00:66
Certificate

61:05:13:36:00:00:00:00:00:1a
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

22:64:5f:e5:cf:38:f2:a2:a8:69:b4:29:9f:d2:ac:e1:72:43:a2:c4:35:f0:35:c1:ce:91:a1:5b:f4:6c:43:dc
Signer

62:ac:05:0a:9d:d8:fe:44:a8:ef:62:6a:b5:a0:96:e3:c9:0a:46:e0
Signer

.text
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 105KB - Virtual size: 104KB

.sdata
Size: 512B - Virtual size: 312B

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 776B

.reloc
Size: 512B - Virtual size: 12B