Jigsaw[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Jigsaw.exe
Size

119KB
MD5

2ecd61d62dac0f8da928922c1f04bef2
SHA1

1909a137713700e266a15f60ad5205ea9c110e31
SHA256

49e6b1b9c6503df4105d548891e596bb91f4df63882a9cbbeb4ba541b897f049
SHA512

474e4df86c23e3e6e98bc8a6423825502b32b4c2e012b90adf51659a77c7e5216cf80550d70d5025e5ed997358dfdf9f14dd10871d27791fb2c8bd1a75a6dea1
SSDEEP

3072:xT4ZUYxYID6CEbkkkkkkkik7fXA9T16f:xT4ZVxYgV094

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Jigsaw.exe

Files

Jigsaw.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ScreenLocker\Jigsaw\Jigsaw\Jigsaw\obj\Debug\Jigsaw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ