General

  • Target

    Ninja Ripper 2.0.5 beta.setup.exe

  • Size

    22.2MB

  • MD5

    0a4740cbc76a032a7c22f91c67f0271a

  • SHA1

    f7cbb1fcc15cdfa118869dc8de29f60f50d9d8d8

  • SHA256

    a84128b8a49693cafb45189dbaa9f3c3ab2200280b8532d9556e948959933e4b

  • SHA512

    9706d6c0b0042d0d97c38ef97bb89f65ce6cd7f34657c221eff4a55953435d6b83036e90a2a13081a64862b738cddaba7feafa61f29d2402d906360c2b862db6

  • SSDEEP

    393216:XFRo5mCiJ2CeSCI9fbw9XHMr7dRX8omFZBxBQooYj1H1qzGVyqgq12P/rwhgNU:XTos127IttrpbmRHQooYFn8ugU

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 8 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 47 IoCs

    Checks for missing Authenticode signature.

Files

  • Ninja Ripper 2.0.5 beta.setup.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • bin32/7z.dll
    .dll windows:4 windows x86 arch:x86

    622eae4411b119bf4ca7bee4fa1391c8


    Headers

    Imports

    Exports

    Sections

  • bin32/NinjaRipper2.exe
    .exe windows:6 windows x86 arch:x86

    034a85ddcf65d1277d37a86ac504fbb3


    Headers

    Imports

    Sections

  • bin32/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    afe75f634760a7497c2ac0f407ccd385


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    7d574430d493ee1c139ab143213bc780


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    e2d6582d61f51d476db78d5375e6424e


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    e799f7c5b87aa7532a785fb435499cec


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Xml.dll
    .dll windows:6 windows x86 arch:x86

    3dceccd49f328a58235f2e480b2c51de


    Headers

    Imports

    Exports

    Sections

  • bin32/crashdumpsender.exe
    .exe windows:6 windows x86 arch:x86

    e7a4d64df70b49a770e7ce32341c32d7


    Headers

    Imports

    Sections

  • bin32/intruder.dll
    .dll windows:6 windows x86 arch:x86

    68fbbd61a3ad3e880a35bfd084d87450


    Headers

    Imports

    Exports

    Sections

  • bin32/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    43b0fe249f8f5a5ce8ac2d967a025119


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    f39753df174cac69a0d3601482b87d13


    Headers

    Imports

    Exports

    Sections

  • bin32/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    cfa17dcf6bfa8195a00881038e4ac78e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/wrapper/d3d11.dll
    .dll windows:6 windows x86 arch:x86

    38885d6ce14d09666d7b63efbb861af8


    Headers

    Imports

    Exports

    Sections

  • bin32/wrapper/d3d8.dll
    .dll windows:6 windows x86 arch:x86

    38885d6ce14d09666d7b63efbb861af8


    Headers

    Imports

    Exports

    Sections

  • bin32/wrapper/d3d9.dll
    .dll windows:6 windows x86 arch:x86

    38885d6ce14d09666d7b63efbb861af8


    Headers

    Imports

    Exports

    Sections

  • bin32/wrapper/ddraw.dll
    .dll windows:6 windows x86 arch:x86

    38885d6ce14d09666d7b63efbb861af8


    Headers

    Imports

    Exports

    Sections

  • bin64/7z.dll
    .dll windows:4 windows x64 arch:x64

    09c182b10b88cd78aa1b9a1fdb0142e4


    Headers

    Imports

    Exports

    Sections

  • bin64/NinjaRipper2.exe
    .exe windows:6 windows x64 arch:x64

    3031ac3e3f74d1edd563a2e7936dd1e6


    Headers

    Imports

    Sections

  • bin64/Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    348b27e8ae5a6f4c3f669775cab709a3


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    440be853a85b4191cc3432b8fbc01965


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    8dd68c885d74e32731e3a9234116df78


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    2c03a14cef04f3ff0a04485e1f9b8318


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Xml.dll
    .dll windows:6 windows x64 arch:x64

    a443cfc7e5572a20e62f1b7abe65afaa


    Headers

    Imports

    Exports

    Sections

  • bin64/crashdumpsender.exe
    .exe windows:6 windows x64 arch:x64

    ae9d5a327d5424dc339b9b3bcb41fa04


    Headers

    Imports

    Sections

  • bin64/intruder.dll
    .dll windows:6 windows x64 arch:x64

    41d24e062ab1ad2ba873922a0b80502a


    Headers

    Imports

    Exports

    Sections

  • bin64/libeay32.dll
    .dll windows:4 windows x64 arch:x64

    c58d8c60fcd67ebf99c2b6a7061f8dbe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    ebca096725acfc3522ed2555e40d5456


    Headers

    Imports

    Exports

    Sections

  • bin64/ssleay32.dll
    .dll windows:4 windows x64 arch:x64

    47ba88217ec90f23914b7f4616463268


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/wrapper/d3d11.dll
    .dll windows:6 windows x64 arch:x64

    96151452db0ee5977471727c654d3a15


    Headers

    Imports

    Exports

    Sections

  • bin64/wrapper/d3d8.dll
    .dll windows:6 windows x64 arch:x64

    96151452db0ee5977471727c654d3a15


    Headers

    Imports

    Exports

    Sections

  • bin64/wrapper/d3d9.dll
    .dll windows:6 windows x64 arch:x64

    96151452db0ee5977471727c654d3a15


    Headers

    Imports

    Exports

    Sections

  • bin64/wrapper/ddraw.dll
    .dll windows:6 windows x64 arch:x64

    96151452db0ee5977471727c654d3a15


    Headers

    Imports

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/arm64/Glide.dll
  • external/dgVoodoo2/3Dfx/arm64/Glide2x.dll
  • external/dgVoodoo2/3Dfx/arm64/Glide3x.dll
  • external/dgVoodoo2/3Dfx/x64/Glide.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x64/Glide2x.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x64/Glide3x.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Glide.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Glide2x.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Glide3x.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Napalm/Glide3x.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/Cpl/arm64/dgVoodooCpl.exe
  • external/dgVoodoo2/Cpl/x64/dgVoodooCpl.exe
    .exe windows:6 windows x64 arch:x64

    939e2b8e9926279ad9d2a842fd36d56a


    Headers

    Imports

    Sections

  • external/dgVoodoo2/Cpl/x86/readme.txt
  • external/dgVoodoo2/Doc/Readme.url
  • external/dgVoodoo2/Doc/ReadmeDirectX.url
  • external/dgVoodoo2/Doc/ReadmeGlide.url
  • external/dgVoodoo2/MS/arm64/D3D9.dll
  • external/dgVoodoo2/MS/x64/D3D9.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/D3D8.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/D3D9.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/D3DImm.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/DDraw.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/QuickGuide.url
  • external/dgVoodoo2/dgVoodoo.conf
  • external/dgVoodoo2/dgVoodooCpl.exe
    .exe windows:6 windows x86 arch:x86

    125efe8469a81fecbe11643e609e549d


    Headers

    Imports

    Sections

  • importers/io_import_nr.zip
    .zip
  • io_import_nr/__init__.py
  • io_import_nr/__pycache__/__init__.cpython-35.pyc
  • io_import_nr/__pycache__/__init__.cpython-37.pyc
  • io_import_nr/__pycache__/gui0.cpython-35.pyc
  • io_import_nr/__pycache__/gui1.cpython-37.pyc
  • io_import_nr/__pycache__/guibase.cpython-35.pyc
  • io_import_nr/__pycache__/guibase.cpython-37.pyc
  • io_import_nr/__pycache__/nrblendimp.cpython-35.pyc
  • io_import_nr/__pycache__/nrblendimp.cpython-37.pyc
  • io_import_nr/__pycache__/nrblendtools.cpython-35.pyc
  • io_import_nr/__pycache__/nrblendtools.cpython-37.pyc
  • io_import_nr/__pycache__/nrdump.cpython-35.pyc
  • io_import_nr/__pycache__/nrdump.cpython-37.pyc
  • io_import_nr/__pycache__/nrdump.cpython-38.pyc
  • io_import_nr/__pycache__/nrfile.cpython-35.pyc
  • io_import_nr/__pycache__/nrfile.cpython-37.pyc
  • io_import_nr/__pycache__/nrfile.cpython-38.pyc
  • io_import_nr/__pycache__/nrtools.cpython-35.pyc
  • io_import_nr/__pycache__/nrtools.cpython-37.pyc
  • io_import_nr/create_gui.py
  • io_import_nr/gui0.py
  • io_import_nr/gui1.py
  • io_import_nr/gui_templ.py
  • io_import_nr/guibase.py
  • io_import_nr/meshinf.bat
  • io_import_nr/meshinfo.py
  • io_import_nr/noesis_temp/fmt_ninjaripper_nr.py
  • io_import_nr/noesis_temp/noe.txt
  • io_import_nr/noesis_temp/nrload — копия (2).py
  • io_import_nr/noesis_temp/nrload — копия.py
  • io_import_nr/noesis_temp/nrload__texture.py
  • io_import_nr/noesis_temp/nrload_noesis_funcs.txt
  • io_import_nr/noesis_temp/worldprojmat.py
  • io_import_nr/nrblendimp - Copy.py
  • io_import_nr/nrblendimp.py
  • io_import_nr/nrblendtools.py
  • io_import_nr/nrdump.py
  • io_import_nr/nrfile.py
  • io_import_nr/nrtools.py
  • importers/readme.txt
  • readme.txt
  • themes/Dark.qss
  • themes/Light.qss
  • themes/images/checkbox_checked.png
    .png
  • themes/images/checkbox_checked_dark.png
    .png
  • themes/images/checkbox_unchecked.png
    .png
  • themes/images/checkbox_unchecked_dark.png
    .png
  • themes/images/down_arrow.png
    .png
  • themes/images/down_arrow_combo.png
    .png
  • themes/images/down_arrow_combo_dark.png
    .png
  • themes/images/down_arrow_dark.png
    .png
  • themes/images/up_arrow.png
    .png
  • themes/images/up_arrow_dark.png
    .png
  • themes/readme.txt
  • translations/nr_orig.ts
    .xml
  • translations/readme.txt
  • translations/Русский.qm
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Headers

    Imports

    Sections