General

  • Target

    NinjaRipper25_setup.zip

  • Size

    135.0MB

  • MD5

    0fd0f62fe2b70b9e3c3cf5d2b5492801

  • SHA1

    6f56cc54bc4f0ad9344e63a06205f98b09144e06

  • SHA256

    cb5c51dc39ec05d5bfb1008f3ff79d62d678d3de4587d6f669dd3d6e254a85a3

  • SHA512

    e47bd69cd3cec6ff875d3239eb48f3d3579b8c748b6b1eee1ec276d5140ba6f76ee21c0208ab0a60a9156fb621540743aafb47fa9f8e47bc75733aa65467db09

  • SSDEEP

    3145728:DYTPNkH/eMGudOPVfHEhtwZNH9k3hzX4bLodveuHyYGILp1LUI0YUuQR:nfeMt0PVfE33ebLoVeRYdd1L0aQR

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 8 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

Files

  • NinjaRipper25_setup.zip
    .zip

    Password: ninjaripper

  • NinjaRipper25_setup.exe
    .exe windows:4 windows x86 arch:x86

    Password: ninjaripper

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    Password: ninjaripper

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    Password: ninjaripper

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: ninjaripper

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • bin32/NinjaRipper2.exe
    .exe windows:6 windows x86 arch:x86

    Password: ninjaripper

    c9cb2ec8a582b541e4bab0d200573e2c


    Code Sign

    Headers

    Imports

    Sections

  • bin32/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    Password: ninjaripper

    afe75f634760a7497c2ac0f407ccd385


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    Password: ninjaripper

    7d574430d493ee1c139ab143213bc780


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    Password: ninjaripper

    e2d6582d61f51d476db78d5375e6424e


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    474a6cb7ee7098bc573125006d8ac1d4


    Headers

    Imports

    Exports

    Sections

  • bin32/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    e799f7c5b87aa7532a785fb435499cec


    Headers

    Imports

    Exports

    Sections

  • bin32/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    131726669bc1e34b495edb4198d0aca3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/d3dx8d.dll
    .dll windows:5 windows x86 arch:x86

    c19a8753bbfb8558cc3b0cd978b86986


    Headers

    Imports

    Exports

    Sections

  • bin32/dxcompiler.dll
    .dll windows:6 windows x86 arch:x86

    b054a82b6de7ccc79c6bffbe6e61b1cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/dxil.dll
    .dll windows:6 windows x86 arch:x86

    8d0b214deaedeb318848cba886f785bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/intruder.dll
    .dll windows:6 windows x86 arch:x86

    5e576d12b49bf199b62b81a6d409cbba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    43b0fe249f8f5a5ce8ac2d967a025119


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    f39753df174cac69a0d3601482b87d13


    Headers

    Imports

    Exports

    Sections

  • bin32/qt.conf
  • bin32/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    cfa17dcf6bfa8195a00881038e4ac78e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • bin32/wrappers/d3d11.dll
    .dll windows:6 windows x86 arch:x86

    7cd0becfcbd09df4c0cf06ac2aac3798


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/wrappers/d3d12.dll
    .dll windows:6 windows x86 arch:x86

    7cd0becfcbd09df4c0cf06ac2aac3798


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/wrappers/d3dwrapper.dll
    .dll windows:6 windows x86 arch:x86

    7cd0becfcbd09df4c0cf06ac2aac3798


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/wrappers/dxgi.dll
    .dll windows:6 windows x86 arch:x86

    7cd0becfcbd09df4c0cf06ac2aac3798


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin32/wrappers/readme_wrappers.txt
  • bin32/wrappers/where_is_opengl.txt
  • bin64/NinjaRipper2.exe
    .exe windows:6 windows x64 arch:x64

    15013f0895809ae7572f1937c68e7f7e


    Code Sign

    Headers

    Imports

    Sections

  • bin64/Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    348b27e8ae5a6f4c3f669775cab709a3


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    440be853a85b4191cc3432b8fbc01965


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    8dd68c885d74e32731e3a9234116df78


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Svg.dll
    .dll windows:6 windows x64 arch:x64

    6cab8115e72f08e0e03451d1c62aaf95


    Headers

    Imports

    Exports

    Sections

  • bin64/Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    2c03a14cef04f3ff0a04485e1f9b8318


    Headers

    Imports

    Exports

    Sections

  • bin64/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    36f6d7806085bd3a70ed8c5dcb51f6c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/dxcompiler.dll
    .dll windows:6 windows x64 arch:x64

    e42da040e71d4193b2a5e422a377765a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/dxil.dll
    .dll windows:6 windows x64 arch:x64

    91f310a69a2a0eacfb89b33684188aca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/intruder.dll
    .dll .ps1 windows:6 windows x64 arch:x64 polyglot

    b997f70758713e3300a4c778b507d42f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/libeay32.dll
    .dll windows:4 windows x64 arch:x64

    c58d8c60fcd67ebf99c2b6a7061f8dbe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    ebca096725acfc3522ed2555e40d5456


    Headers

    Imports

    Exports

    Sections

  • bin64/qt.conf
  • bin64/ssleay32.dll
    .dll windows:4 windows x64 arch:x64

    47ba88217ec90f23914b7f4616463268


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • bin64/wrappers/d3d11.dll
    .dll windows:6 windows x64 arch:x64

    252b2e14c9bd2ab7287c56bdc711b141


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/wrappers/d3d12.dll
    .dll windows:6 windows x64 arch:x64

    252b2e14c9bd2ab7287c56bdc711b141


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/wrappers/d3dwrapper.dll
    .dll windows:6 windows x64 arch:x64

    252b2e14c9bd2ab7287c56bdc711b141


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/wrappers/dxgi.dll
    .dll windows:6 windows x64 arch:x64

    252b2e14c9bd2ab7287c56bdc711b141


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin64/wrappers/readme_wrappers.txt
  • bin64/wrappers/where_is_opengl.txt
  • config/nrconfigext.xml
  • config/patrons.xml
  • external/dgVoodoo2/3Dfx/arm64/Glide.dll
  • external/dgVoodoo2/3Dfx/arm64/Glide2x.dll
  • external/dgVoodoo2/3Dfx/arm64/Glide3x.dll
  • external/dgVoodoo2/3Dfx/x64/Glide.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x64/Glide2x.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x64/Glide3x.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Glide.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Glide2x.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Glide3x.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/3Dfx/x86/Napalm/Glide3x.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/Cpl/arm64/dgVoodooCpl.exe
  • external/dgVoodoo2/Cpl/x64/dgVoodooCpl.exe
    .exe windows:6 windows x64 arch:x64

    c1798482bbc136296591446a856f0e50


    Headers

    Imports

    Sections

  • external/dgVoodoo2/Cpl/x86/ReadMe.txt
  • external/dgVoodoo2/Doc/Readme.url
  • external/dgVoodoo2/Doc/ReadmeDirectX.url
  • external/dgVoodoo2/Doc/ReadmeGlide.url
  • external/dgVoodoo2/MS/arm64x/D3D9.dll
  • external/dgVoodoo2/MS/x64/D3D9.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/D3D8.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/D3D9.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/D3DImm.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/MS/x86/DDraw.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • external/dgVoodoo2/QuickGuide.url
  • external/dgVoodoo2/dgVoodoo.conf
  • external/dgVoodoo2/dgVoodooCpl.exe
    .exe windows:6 windows x86 arch:x86

    3fbbf409f55061a1dc356d4857d9ed76


    Headers

    Imports

    Sections

  • importers/3dsmax/import_local.ms
  • importers/3dsmax/import_nr/nr3dsimp.py
  • importers/3dsmax/import_nr/nr3dsimpmain.py
  • importers/3dsmax/import_nr/nrdump.py
  • importers/3dsmax/import_nr/nrfile.py
  • importers/3dsmax/import_nr/nrimp.py
  • importers/3dsmax/import_nr/nrqtgui.py
  • importers/3dsmax/import_nr/nrtools.py
  • importers/3dsmax/import_world.ms
  • importers/copy_3dsmaxaddon_to_maxdir.bat
  • importers/copy_mayaaddon_to_mayadir.bat
    .bat .vbs
  • importers/io_import_nr.zip
    .zip
  • importers/maya/import_nr.py
  • importers/maya/import_nr/__init__.py
  • importers/maya/import_nr/import_nr.py
  • importers/maya/import_nr/nrdump.py
  • importers/maya/import_nr/nrfile.py
  • importers/maya/import_nr/nrimp.py
  • importers/maya/import_nr/nrmayaimp.py
    .py .vbs
  • importers/maya/import_nr/nrqtgui.py
  • importers/maya/import_nr/nrtools.py
  • importers/noesis/fmt_ninjaripper_nr.py
  • importers/noesis/import_nr/nrdump.py
  • importers/noesis/import_nr/nrfile.py
  • importers/noesis/import_nr/nrimp.py
  • importers/noesis/import_nr/nrnoegui.py
  • importers/noesis/import_nr/nrnoeimp.py
  • importers/noesis/import_nr/nrtools.py
  • importers/readme_3dsmax.txt
  • importers/readme_blender.txt
  • importers/readme_maya.txt
  • importers/readme_noesis.txt
  • readme.txt
  • themes/Dark.qss
  • themes/Light.qss
  • themes/images/checkbox_checked.png
    .png
  • themes/images/checkbox_checked_dark.png
    .png
  • themes/images/checkbox_checked_disabled.png
    .png
  • themes/images/checkbox_checked_disabled_dark.png
    .png
  • themes/images/checkbox_partiallychecked.png
    .png
  • themes/images/checkbox_partiallychecked_dark.png
    .png
  • themes/images/checkbox_unchecked.png
    .png
  • themes/images/checkbox_unchecked_dark.png
    .png
  • themes/images/checkbox_unchecked_disabled.png
    .png
  • themes/images/checkbox_unchecked_disabled_dark.png
    .png
  • themes/images/down_arrow.png
    .png
  • themes/images/down_arrow_combo.png
    .png
  • themes/images/down_arrow_combo_dark.png
    .png
  • themes/images/down_arrow_combo_dark_disabled.png
    .png
  • themes/images/down_arrow_dark.png
    .png
  • themes/images/up_arrow.png
    .png
  • themes/images/up_arrow_dark.png
    .png
  • themes/readme.txt
  • tools/delete_dxcapturereplay_dll.bat
  • translations/Chinese.qm
  • translations/nr.ts
    .xml
  • translations/readme.txt
  • translations/Русский.qm
  • uninst.exe.nsis