NinjaTrader[.]exe | Triage

Sharing

General

Target

NinjaTrader.exe
Size

498KB
MD5

428ab5e478bbdc7e4d86096ae242fd6a
SHA1

2b4cdb6ba05010db0004a82a302acd38805ee671
SHA256

4b5c8c4c2ac56489abb25e1fea7dc6de2b17164c179d6f8a4159fe52462224f0
SHA512

db05feda7e3de416355c3c27db3f46e5e67611555717cac4c4afb1a2005b46df0a1b91f30116f28c2779b49f2691fa4d37c486d15e5ca17bbfa570026b2480b9
SSDEEP

12288:esdqaOs8VZ2ygYJUYP8FIeQsjrK023TE05l:xdqNsYBUYkFIkvA3nl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NinjaTrader.exe

Files

NinjaTrader.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.(]=
Size: - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.XE*
Size: 435KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ