nfa_tool[.]exe | Triage™

Resubmissions

29/05/2026, 22:28

260529-2dsdtabs2y3

29/05/2026, 22:26

260529-2czrhadt3l3

Sharing

Copy URL Twitter E-mail

General

Target
nfa_tool.exe
Size 4.3MB
Sample260529-2dsdtabs2y
SHA256 9572297d8090899cf32b992ad373cf4f5e4d1eaf851ca1c949775c9cbf34d3de
MD5 b3dd4c3baa32160517051ec61cd9aa03
SHA1 8b48f300ac8e1d9516bfc5cf18ca972cf2360ec9
SHA512 64a3f5ab095972e259c015313f61ab6d9c97748710e2b2ceb7f8c3b5f93190658b1c63b5f76b08525ebf0e2226c2bb0ce8f19c90201f6147a3e33abe06163fa4
SSDEEP 49152:qImNT3/euRFvBNXrLkPA2eixtww+TIoM4gqd8kusT7zv2T7YT7x9bVroKJeq0JPi:qISLkwC5dWdw6bePuz
TLSH
T1F3268D03B746DAADC01AC474934682735A62B0CB0B35AAFF55C8563C6F6AEF05F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nfa_tool.exe

File Explorer

nfa_tool.exe

.exe 4.3MB

nfa_tool.exe

IMPHASH bc81c0ab3a072785119f4433f9cfa04a
SHA256 9572297d8090899cf32b992ad373cf4f5e4d1eaf851ca1c949775c9cbf34d3de
MD5 b3dd4c3baa32160517051ec61cd9aa03
SHA1 8b48f300ac8e1d9516bfc5cf18ca972cf2360ec9
SHA512 64a3f5ab095972e259c015313f61ab6d9c97748710e2b2ceb7f8c3b5f93190658b1c63b5f76b08525ebf0e2226c2bb0ce8f19c90201f6147a3e33abe06163fa4
SSDEEP 49152:qImNT3/euRFvBNXrLkPA2eixtww+TIoM4gqd8kusT7zv2T7YT7x9bVroKJeq0JPi:qISLkwC5dWdw6bePuz
TLSH
T1F3268D03B746DAADC01AC474934682735A62B0CB0B35AAFF55C8563C6F6AEF05F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2114568

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

nfa_tool.pdb

kernel32

CloseHandle LocalFree SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime LoadLibraryW GlobalFree GlobalAlloc GlobalUnlock GlobalSize SetLastError GlobalLock GetCurrentThreadId WideCharToMultiByte FormatMessageW MultiByteToWideChar WaitForSingleObject GetCurrentThread CreateEventW HeapFree FreeLibrary HeapAlloc GetProcessHeap RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext LoadLibraryA GetExitCodeProcess QueryPerformanceCounter GetSystemTimePreciseAsFileTime WriteFileEx CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW CompareStringOrdinal FreeEnvironmentStringsW GetFileAttributesW SleepEx ReadFileEx WaitForMultipleObjects CreateThread SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP GetStdHandle WriteConsoleW CancelIo ReadFile QueryPerformanceFrequency ExitProcess GetProcAddress GetModuleHandleA Sleep GetModuleFileNameW SetThreadErrorMode LoadLibraryExW GetFullPathNameW GetModuleHandleW GetConsoleMode FindClose FindFirstFileExW DeleteFileW GetFileInformationByHandle GetOverlappedResult CreateFileW SwitchToThread GetFileInformationByHandleEx CreateDirectoryW HeapReAlloc GetLastError GetCurrentProcess WaitForSingleObjectEx GetCurrentProcessId CreateMutexA ReleaseMutex SetFileInformationByHandle SetFileTime DuplicateHandle GetEnvironmentVariableW GetEnvironmentStringsW GetCurrentDirectoryW AddVectoredExceptionHandler SetThreadStackGuarantee lstrlenW

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

bcryptprimitives

ProcessPrng

advapi32

RegOpenKeyExW RegSetValueExW RegCloseKey RegQueryValueExW ImpersonateAnonymousToken RevertToSelf

crypt32

CryptProtectData

ole32

CoCreateInstance CoUninitialize OleInitialize RegisterDragDrop RevokeDragDrop CoInitializeEx

oleaut32

SafeArrayCreateVector SetErrorInfo GetErrorInfo SysFreeString SafeArrayPutElement SysAllocStringLen SysStringLen

user32

ClipCursor GetClipCursor IsIconic ShowCursor GetWindowRect GetDC ReleaseDC CreateIcon EnumDisplayMonitors MonitorFromPoint SetWindowTextW GetWindowTextW GetWindowTextLengthW EnableMenuItem GetSystemMenu IsProcessDPIAware SendInput MapVirtualKeyW ShowWindow KillTimer SetTimer GetMessageW ReleaseCapture SetCapture RegisterWindowMessageA DestroyIcon SetClipboardData SetWindowLongW GetWindowLongW EmptyClipboard RemovePropW CallWindowProcW AdjustWindowRectEx SystemParametersInfoA CloseClipboard DestroyWindow GetClipboardData GetPropW GetRawInputData SetPropW OpenClipboard RegisterClipboardFormatW SetForegroundWindow IsClipboardFormatAvailable GetActiveWindow GetSystemMetrics SendMessageW RegisterRawInputDevices SetCursorPos FlashWindowEx GetForegroundWindow CreateIconFromResourceEx ClientToScreen GetKeyState ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW GetKeyboardState GetAsyncKeyState GetClassInfoExW GetClassNameW ValidateRect SetCursor LoadCursorW GetMonitorInfoW MonitorFromWindow GetCursorPos TrackMouseEvent CloseTouchInputHandle GetTouchInputInfo MonitorFromRect ScreenToClient GetMenu PostMessageW SetWindowDisplayAffinity RedrawWindow PeekMessageW RegisterTouchWindow GetClientRect InvalidateRgn SetWindowPos SetWindowPlacement GetWindowPlacement ChangeDisplaySettingsExW DefWindowProcW GetWindowLongPtrW SetWindowLongPtrW CreateWindowExW RegisterClassExW DispatchMessageW TranslateMessage

shell32

DragQueryFileW DragFinish

gdi32

DescribePixelFormat SwapBuffers GetDeviceCaps ChoosePixelFormat DeleteObject CreateRectRgn SetPixelFormat

opengl32

wglGetCurrentDC wglCreateContext wglGetProcAddress wglMakeCurrent wglGetCurrentContext wglShareLists wglDeleteContext

dwmapi

DwmEnableBlurBehindWindow

shlwapi

AssocQueryStringW

uiautomationcore

UiaLookupId UiaRaiseAutomationPropertyChangedEvent UiaHostProviderFromHwnd UiaGetReservedNotSupportedValue UiaRaiseAutomationEvent UiaReturnRawElementProvider

imm32

ImmGetCompositionStringW ImmGetContext ImmSetCandidateWindow ImmReleaseContext ImmAssociateContextEx ImmSetCompositionWindow

uxtheme

SetWindowTheme

ntdll

NtCreateNamedPipeFile NtOpenFile NtWriteFile NtReadFile RtlNtStatusToDosError

vcruntime140

__current_exception __current_exception_context __C_specific_handler __CxxFrameHandler3 _CxxThrowException memset memcmp memcpy memmove

api-ms-win-crt-string-l1-1-0

wcslen strlen

api-ms-win-crt-math-l1-1-0

trunc atan2f exp2f ceilf acosf floor cos __setusermatherr floorf sin sinf ceil roundf cosf _hypotf powf cbrtf round expf

api-ms-win-crt-runtime-l1-1-0

__p___argv __p___argc _c_exit _exit exit _initterm_e _initterm strerror _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _register_thread_local_exe_atexit_callback _set_app_type _seh_filter_exe _initialize_onexit_table _register_onexit_function _crt_atexit terminate _cexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode