NFA_tool_fix[.]exe

Resubmissions

31/05/2026, 04:19

260531-exldaabv3m3

31/05/2026, 04:17

260531-ewpdjsbv2r3

Sharing

Copy URL Twitter E-mail

General

Target
NFA_tool_fix.exe
Size 6.4MB
Sample260531-ewpdjsbv2r
SHA256 12517eaa3f5193fd8a3cf8adb9cbda90096c9dd7f27ef24d298d1a5939f27479
MD5 86cbdd99b36ed076859c8073880456fd
SHA1 e34c1e37aaaa16d89add4e24ec30edfb822cee19
SHA512 8a5544e185b0c228de51290116d12fd0ad3385029a70234a5f05d76524fc00fd45e806a7be98d7ba9769aa127ecba93ffa862c67155a0790d716d39a46df3898
SSDEEP 49152:Ux87sI/SsQ2s8984pUo71CZ3pNu4u4gsxLebOiOfZ7cfQEuIy9Yswd3eqh+Dl0pt:ELM4T7Z77Ezswdpz1AqawKXfbStOq
TLSH
T154667B03F76799ACC45AC4B0836647335A72B4CB0B35A9FF45C85538AE69AF01F38B19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NFA_tool_fix.exe

File Explorer

NFA_tool_fix.exe

.exe 6.4MB

NFA_tool_fix.exe

IMPHASH 466ced0ca52505d41bb0c292243787fb
SHA256 12517eaa3f5193fd8a3cf8adb9cbda90096c9dd7f27ef24d298d1a5939f27479
MD5 86cbdd99b36ed076859c8073880456fd
SHA1 e34c1e37aaaa16d89add4e24ec30edfb822cee19
SHA512 8a5544e185b0c228de51290116d12fd0ad3385029a70234a5f05d76524fc00fd45e806a7be98d7ba9769aa127ecba93ffa862c67155a0790d716d39a46df3898
SSDEEP 49152:Ux87sI/SsQ2s8984pUo71CZ3pNu4u4gsxLebOiOfZ7cfQEuIy9Yswd3eqh+Dl0pt:ELM4T7Z77Ezswdpz1AqawKXfbStOq
TLSH
T154667B03F76799ACC45AC4B0836647335A72B4CB0B35A9FF45C85538AE69AF01F38B19
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3602856

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

nfa_fix.pdb

kernel32

CloseHandle LocalFree SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent SetLastError WaitForSingleObject WideCharToMultiByte MultiByteToWideChar CreateEventW GetCurrentThread FormatMessageW LoadLibraryExW GetLastError FreeLibrary GetProcAddress HeapFree HeapAlloc GlobalLock GetProcessHeap LoadLibraryExA GlobalSize GetModuleHandleA Sleep LoadLibraryA CreateMutexA WaitForSingleObjectEx CreateThread WriteConsoleW GlobalUnlock GetFileAttributesW CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFullPathNameW WaitForMultipleObjects ReadFileEx CreateNamedPipeW ExitProcess GetModuleHandleW GetConsoleMode CancelIo ReadFile DeleteFileW FindFirstFileExW CreateDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle GetOverlappedResult CreateFileW FindClose GlobalAlloc GlobalFree LoadLibraryW GetConsoleOutputCP GetCurrentThreadId ReleaseMutex lstrlenW HeapReAlloc GetSystemTimePreciseAsFileTime QueryPerformanceFrequency SetThreadErrorMode GetExitCodeProcess SleepEx FreeEnvironmentStringsW GetModuleFileNameW AddVectoredExceptionHandler SetThreadStackGuarantee SwitchToThread CreateWaitableTimerExW SetWaitableTimer QueryPerformanceCounter GetSystemInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW WriteFileEx SetFileInformationByHandle GetCurrentProcess DuplicateHandle GetCurrentProcessId GetStdHandle CompareStringOrdinal

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

bcryptprimitives

ProcessPrng

advapi32

RegCloseKey RegQueryValueExW RevertToSelf RegSetValueExW RegOpenKeyExW ImpersonateAnonymousToken

crypt32

CryptProtectData

oleaut32

SysFreeString SafeArrayCreateVector SetErrorInfo GetErrorInfo SysAllocStringLen SysStringLen SafeArrayPutElement

ole32

CoInitializeEx RevokeDragDrop CoUninitialize OleInitialize RegisterDragDrop CoCreateInstance

user32

GetWindowLongW GetKeyboardLayout SetForegroundWindow SendInput AdjustWindowRectEx MapVirtualKeyW OpenClipboard GetClipboardData EmptyClipboard GetWindowTextW GetWindowTextLengthW EnableMenuItem GetSystemMenu SetWindowTextW MonitorFromPoint EnumDisplayMonitors CreateIcon DestroyIcon ShowCursor SetClipboardData ReleaseCapture SetCapture RegisterWindowMessageA KillTimer ReleaseDC SetTimer GetMessageW GetClipCursor ClipCursor RegisterRawInputDevices GetRawInputData GetDC GetKeyboardState GetAsyncKeyState GetKeyState CloseClipboard MapVirtualKeyExW IsIconic GetWindowRect PostMessageW ShowWindow GetMenu ScreenToClient IsProcessDPIAware SystemParametersInfoA RemovePropW SetPropW CallWindowProcW GetPropW SetWindowLongW RegisterClipboardFormatW IsClipboardFormatAvailable ToUnicodeEx FlashWindowEx SetCursorPos GetForegroundWindow ClientToScreen DestroyWindow SetWindowLongPtrW GetClassInfoExW GetClassNameW MonitorFromRect GetTouchInputInfo CloseTouchInputHandle CreateIconFromResourceEx SendMessageW GetActiveWindow GetClientRect SetWindowDisplayAffinity TrackMouseEvent GetCursorPos RegisterTouchWindow GetSystemMetrics CreateWindowExW RegisterClassExW MonitorFromWindow InvalidateRgn SetWindowPlacement GetWindowPlacement ChangeDisplaySettingsExW DispatchMessageW TranslateMessage PeekMessageW GetWindowLongPtrW ValidateRect RedrawWindow DefWindowProcW SetCursor LoadCursorW SetWindowPos GetMonitorInfoW

shell32

DragFinish DragQueryFileW

gdi32

SetPixelFormat ChoosePixelFormat DescribePixelFormat GetDeviceCaps DeleteObject SwapBuffers CreateRectRgn

opengl32

wglGetCurrentDC wglGetCurrentContext wglDeleteContext wglGetProcAddress wglMakeCurrent wglCreateContext wglShareLists

dwmapi

DwmEnableBlurBehindWindow

shlwapi

AssocQueryStringW

uiautomationcore

UiaReturnRawElementProvider UiaRaiseAutomationPropertyChangedEvent UiaRaiseAutomationEvent UiaHostProviderFromHwnd UiaGetReservedNotSupportedValue UiaLookupId

uxtheme

SetWindowTheme

imm32

ImmSetCompositionWindow ImmGetCompositionStringW ImmGetContext ImmAssociateContextEx ImmSetCandidateWindow ImmReleaseContext

ntdll

NtOpenFile NtReadFile RtlNtStatusToDosError NtWriteFile

vcruntime140

memset __current_exception __current_exception_context memmove memcmp __C_specific_handler __CxxFrameHandler3 memcpy _CxxThrowException

api-ms-win-crt-string-l1-1-0

strlen wcslen

api-ms-win-crt-math-l1-1-0

expf truncf powf cos sin exp2f ceil _hypotf cosf floor round ceilf floorf atan2f acosf trunc cbrtf roundf sinf __setusermatherr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _c_exit _set_app_type _seh_filter_exe _register_thread_local_exe_atexit_callback terminate _initialize_onexit_table _register_onexit_function strerror _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free