Ninja_default[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ninja_default.exe
Size

3.4MB
MD5

a7dea97ca99153b905bfb11d0cf18bdf
SHA1

dc3e6709ede562f0632ab6baeaf869570a3b6d36
SHA256

101434d82e7dca11c1775afc480bfc30e67d38f3bfabfd0cd20b53357492c19e
SHA512

109210c5bf06101dccc37e84f9fc58b612d1675c8782e87c2a5eb5e17856855373910f393470a1addac4809400f44f967e4f64ea60c56583e9f4f56b4ff7c812
SSDEEP

49152:Lvrrn6IcHpCpaiO5KLehN+kKVOeZYI2GCff2ZVUgjccWS5:LvrjSjEL4YOasGCff2ZDAh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ninja_default.exe

Files

Ninja_default.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Ninja_default.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ