General

  • Target

    NinjaRipper2016_setup.exe

  • Size

    104.4MB

  • MD5

    e93283474185aacbe5fb59291f9b1e6a

  • SHA1

    cdabb6ccb509fced6de7abdf34d54fc7658ad577

  • SHA256

    df5fb1c3061638667dac8d6d958f5ce7d0674a7af9a212b91b238f09b430f992

  • SHA512

    e4dc9561d3b2bfdc2d44d95991c585275415b380641b704064a223766dd0e261788c3658a0742b43a02784e0d5c390aed66aab9999b89069476ed4c83a703875

  • SSDEEP

    3145728:08oZazMWzrzjQWlsCkHOwHT5FWBP9ywTxBQk0:eZeMWzrgcYtJgy

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 8 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 29 IoCs

    Checks for missing Authenticode signature.

Files

  • NinjaRipper2016_setup.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • bin32/NinjaRipper2.exe
    .exe windows:6 windows x86 arch:x86

    ad1c2f47670fee98fb43c466ff8da853


    Code Sign

    Headers

    Imports

    Sections

  • bin32/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    afe75f634760a7497c2ac0f407ccd385


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    7d574430d493ee1c139ab143213bc780


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    e2d6582d61f51d476db78d5375e6424e


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    474a6cb7ee7098bc573125006d8ac1d4


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    e799f7c5b87aa7532a785fb435499cec


    Headers

    Imports

    Exports

    Sections

  • bin32/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    131726669bc1e34b495edb4198d0aca3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/dxcompiler.dll
    .dll windows:10 windows x86 arch:x86

    47bf2bd480598e32388b520eb9ccf831


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/dxil.dll
    .dll windows:10 windows x86 arch:x86

    b9723f7c7a2c695dfabae5179143d8af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/intruder.dll
    .dll windows:6 windows x86 arch:x86

    a38166a0fd86f88f95c3f0c0ef92dc7b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    43b0fe249f8f5a5ce8ac2d967a025119


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    f39753df174cac69a0d3601482b87d13


    Headers

    Imports

    Exports

    Sections

  • bin32/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    cfa17dcf6bfa8195a00881038e4ac78e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • bin32/wrappers/d3d11.dll
    .dll windows:6 windows x86 arch:x86

    1df0e029caf68f0c3511551997c3bb8a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/wrappers/d3d12.dll
    .dll windows:6 windows x86 arch:x86

    1df0e029caf68f0c3511551997c3bb8a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/wrappers/d3dwrapper.dll
    .dll windows:6 windows x86 arch:x86

    1df0e029caf68f0c3511551997c3bb8a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/wrappers/dxgi.dll
    .dll windows:6 windows x86 arch:x86

    1df0e029caf68f0c3511551997c3bb8a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/wrappers/readme_wrappers.txt
  • bin32/wrappers/where_is_opengl.txt
  • bin64/NinjaRipper2.exe
    .exe windows:6 windows x64 arch:x64

    ade83d7303120bf0e557070729b26b4a


    Code Sign

    Headers

    Imports

    Sections

  • bin64/Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    348b27e8ae5a6f4c3f669775cab709a3


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    440be853a85b4191cc3432b8fbc01965


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    8dd68c885d74e32731e3a9234116df78


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Svg.dll
    .dll windows:6 windows x64 arch:x64

    6cab8115e72f08e0e03451d1c62aaf95


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    2c03a14cef04f3ff0a04485e1f9b8318


    Headers

    Imports

    Exports

    Sections

  • bin64/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    36f6d7806085bd3a70ed8c5dcb51f6c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/dxcompiler.dll
    .dll windows:6 windows x64 arch:x64

    e8395070b3b876d513531870703f39d2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/intruder.dll
    .dll windows:6 windows x64 arch:x64

    59aa386038615515c02ffdf43fc2b36f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/libeay32.dll
    .dll windows:4 windows x64 arch:x64

    c58d8c60fcd67ebf99c2b6a7061f8dbe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    ebca096725acfc3522ed2555e40d5456


    Headers

    Imports

    Exports

    Sections

  • bin64/ssleay32.dll
    .dll windows:4 windows x64 arch:x64

    47ba88217ec90f23914b7f4616463268


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • bin64/wrappers/d3d11.dll
    .dll windows:6 windows x64 arch:x64

    ad7a648981c12912a79ff9eced786bf4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/wrappers/d3d12.dll
    .dll windows:6 windows x64 arch:x64

    ad7a648981c12912a79ff9eced786bf4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/wrappers/d3dwrapper.dll
    .dll windows:6 windows x64 arch:x64

    ad7a648981c12912a79ff9eced786bf4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/wrappers/dxgi.dll
    .dll windows:6 windows x64 arch:x64

    ad7a648981c12912a79ff9eced786bf4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/wrappers/readme_wrappers.txt
  • bin64/wrappers/where_is_opengl.txt
  • config/nrcommon.xml
    .xml
  • config/nrconfig.xml
    .xml
  • config/patrons.xml
  • config/process_inject.xml
  • external/dgVoodoo2/3Dfx/arm64/Glide.dll
  • external/dgVoodoo2/3Dfx/arm64/Glide2x.dll
  • external/dgVoodoo2/3Dfx/arm64/Glide3x.dll
  • external/dgVoodoo2/3Dfx/x64/Glide.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x64/Glide2x.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x64/Glide3x.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Glide.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Glide2x.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Glide3x.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Napalm/Glide3x.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/Cpl/arm64/dgVoodooCpl.exe
  • external/dgVoodoo2/Cpl/x64/dgVoodooCpl.exe
    .exe windows:6 windows x64 arch:x64

    459029e2e1424b5540a0b60ab9a57776


    Headers

    Imports

    Sections

  • external/dgVoodoo2/Doc/Readme.url
  • external/dgVoodoo2/Doc/ReadmeDirectX.url
  • external/dgVoodoo2/Doc/ReadmeGlide.url
  • external/dgVoodoo2/MS/arm64x/D3D9.dll
  • external/dgVoodoo2/MS/x64/D3D9.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/D3D8.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/D3D9.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/D3DImm.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/DDraw.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/QuickGuide.url
  • external/dgVoodoo2/dgVoodoo.conf
  • external/dgVoodoo2/dgVoodooCpl.exe
    .exe windows:6 windows x86 arch:x86

    0938f8adf94d5d0445c4d3cd99fe4bf0


    Headers

    Imports

    Sections

  • importers/3dsmax/import_local.ms
  • importers/3dsmax/import_nr/nr3dsimp.py
  • importers/3dsmax/import_nr/nr3dsimpmain.py
  • importers/3dsmax/import_nr/nrdump.py
  • importers/3dsmax/import_nr/nrfile.py
  • importers/3dsmax/import_nr/nrimp.py
  • importers/3dsmax/import_nr/nrqtgui.py
  • importers/3dsmax/import_nr/nrtools.py
  • importers/3dsmax/import_world.ms
  • importers/copy_3dsmaxaddon_to_maxdir.bat
  • importers/copy_mayaaddon_to_mayadir.bat
    .bat .vbs
  • importers/io_import_nr.zip
    .zip
  • io_import_nr/__init__.py
  • io_import_nr/nrblendgui0.py
  • io_import_nr/nrblendgui1.py
  • io_import_nr/nrblendimp.py
  • io_import_nr/nrdump.py
  • io_import_nr/nrfile.py
  • io_import_nr/nrimp.py
  • io_import_nr/nrtools.py
  • importers/maya/import_nr.py
  • importers/maya/import_nr/__init__.py
  • importers/maya/import_nr/import_nr.py
  • importers/maya/import_nr/nrdump.py
  • importers/maya/import_nr/nrfile.py
  • importers/maya/import_nr/nrimp.py
  • importers/maya/import_nr/nrmayaimp.py
    .py .vbs
  • importers/maya/import_nr/nrqtgui.py
  • importers/maya/import_nr/nrtools.py
  • importers/noesis/fmt_ninjaripper_nr.py
  • importers/noesis/import_nr/nrdump.py
  • importers/noesis/import_nr/nrfile.py
  • importers/noesis/import_nr/nrimp.py
  • importers/noesis/import_nr/nrnoegui.py
  • importers/noesis/import_nr/nrnoeimp.py
  • importers/noesis/import_nr/nrtools.py
  • importers/readme_3dsmax.txt
  • importers/readme_blender.txt
  • importers/readme_maya.txt
  • importers/readme_noesis.txt
  • readme.txt
  • themes/Dark.qss
  • themes/Light.qss
  • themes/images/checkbox_checked.png
    .png
  • themes/images/checkbox_checked_dark.png
    .png
  • themes/images/checkbox_unchecked.png
    .png
  • themes/images/checkbox_unchecked_dark.png
    .png
  • themes/images/down_arrow.png
    .png
  • themes/images/down_arrow_combo.png
    .png
  • themes/images/down_arrow_combo_dark.png
    .png
  • themes/images/down_arrow_combo_dark_disabled.png
    .png
  • themes/images/down_arrow_dark.png
    .png
  • themes/images/up_arrow.png
    .png
  • themes/images/up_arrow_dark.png
    .png
  • themes/readme.txt
  • tools/delete_dxcapturereplay_dll.bat
  • translations/nr.ts
    .xml
  • translations/readme.txt
  • translations/Русский.qm
  • uninst.exe.nsis