weave-free[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
weave-free.exe
Size 2.8MB
Sample260822-df7draea77
SHA256 e9e8403cbcac744e21913060cc05165fbe33a8826b6477abb896188e7115f9c1
MD5 76d03c74ba2be6e9ab3b22a456113fcb
SHA1 d2f362bf805febc4d96206de7327456d8c29af4f
SHA512 58382486472b0ee6d006286a57237b73f4e5ede1fcd29136930a28199ab7ac98b551a68bfd83b10e427c258df269917704d1cf7390681de51443653668abf8fa
SSDEEP 24576:0yMxjZk7Ap4nEsfeLI3RQh8RAUi2mBM+BWBKh9GfzmrhOK9ZrnhKA3zVHoqg5J2C:0jZCKLsfeL/h8SUmMe9bVrfKJeq0Qt7
TLSH
T114D5AE03F386C6DDD50AC1B44651A2239A63F045073BA3FF7B881E25AE56AE08F1D75E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
weave-free.exe

File Explorer

weave-free.exe

.exe 2.8MB

weave-free.exe

IMPHASH d4adbc60faaf932bd7e295165d8e66e9
SHA256 e9e8403cbcac744e21913060cc05165fbe33a8826b6477abb896188e7115f9c1
MD5 76d03c74ba2be6e9ab3b22a456113fcb
SHA1 d2f362bf805febc4d96206de7327456d8c29af4f
SHA512 58382486472b0ee6d006286a57237b73f4e5ede1fcd29136930a28199ab7ac98b551a68bfd83b10e427c258df269917704d1cf7390681de51443653668abf8fa
SSDEEP 24576:0yMxjZk7Ap4nEsfeLI3RQh8RAUi2mBM+BWBKh9GfzmrhOK9ZrnhKA3zVHoqg5J2C:0jZCKLsfeL/h8SUmMe9bVrfKJeq0Qt7
TLSH
T114D5AE03F386C6DDD50AC1B44651A2239A63F045073BA3FF7B881E25AE56AE08F1D75E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

WEAVEFREE2026

Minor OS version

Major OS version

Entry point

1020884

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

weave_free.pdb

kernel32

GetModuleHandleA GetModuleFileNameW CloseHandle SetThreadErrorMode GetLastError FreeLibrary Sleep GetProcAddress LoadLibraryExW InitializeSListHead SetUnhandledExceptionFilter GetSystemTimeAsFileTime CreateWaitableTimerExW DuplicateHandle GetFileAttributesW CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW CompareStringOrdinal FreeEnvironmentStringsW GetEnvironmentStringsW GetFileInformationByHandleEx GetFileInformationByHandle SwitchToThread WaitForSingleObject GetExitCodeProcess AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GlobalLock GlobalUnlock GetCurrentThreadId GlobalSize WideCharToMultiByte MultiByteToWideChar GlobalAlloc GlobalFree FormatMessageW LoadLibraryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex RtlVirtualUnwind SetLastError GetCurrentDirectoryW GetStdHandle GetConsoleMode GetConsoleOutputCP WriteConsoleW HeapAlloc GetEnvironmentVariableW ReadFileEx SleepEx WriteFileEx QueryPerformanceFrequency GetModuleHandleW QueryPerformanceCounter CreateThread GetFullPathNameW CreateFileW SetFileTime SetFileInformationByHandle FindFirstFileExW FindClose SetWaitableTimer

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

bcryptprimitives

ProcessPrng

opengl32

wglGetCurrentContext wglShareLists wglCreateContext wglGetCurrentDC wglDeleteContext wglGetProcAddress wglMakeCurrent

shlwapi

AssocQueryStringW

user32

SendInput GetMessageW DefWindowProcW ClientToScreen GetPropW CallWindowProcW OpenClipboard CloseClipboard SetCursorPos SetWindowTextW GetForegroundWindow GetActiveWindow SetWindowDisplayAffinity PostMessageW SendMessageW MonitorFromPoint SetWindowLongPtrW RemovePropW GetSystemMetrics CreateIconFromResourceEx ReleaseDC GetWindowLongPtrW GetDC RegisterClassExW CreateWindowExW RedrawWindow GetClientRect SetWindowPos InvalidateRgn RegisterTouchWindow GetKeyboardState MonitorFromWindow GetAsyncKeyState GetKeyState IsProcessDPIAware TrackMouseEvent GetMenu ScreenToClient DestroyWindow GetTouchInputInfo CloseTouchInputHandle GetWindowPlacement MonitorFromRect GetCursorPos CallNextHookEx SetCursor GetMonitorInfoW SetPropW PeekMessageW SetTimer KillTimer TranslateMessage DispatchMessageW RegisterRawInputDevices GetRawInputData ValidateRect MapVirtualKeyW CreateIcon GetWindowTextLengthW GetWindowTextW FlashWindowEx IsClipboardFormatAvailable GetClipboardData EmptyClipboard SetClipboardData GetClassNameW GetClassInfoExW DestroyIcon RegisterWindowMessageA SetCapture ReleaseCapture ChangeDisplaySettingsExW SetWindowPlacement ShowWindow GetSystemMenu EnableMenuItem SetWindowLongW GetClipCursor ClipCursor GetWindowRect ShowCursor GetWindowLongW AdjustWindowRectEx GetKeyboardLayout MapVirtualKeyExW ToUnicodeEx IsIconic SetForegroundWindow EnumDisplayMonitors SystemParametersInfoA LoadCursorW SetWindowsHookExW

shell32

DragFinish DragQueryFileW

gdi32

GetDeviceCaps SwapBuffers DeleteObject CreateRectRgn DescribePixelFormat SetPixelFormat ChoosePixelFormat

advapi32

ImpersonateAnonymousToken RevertToSelf

uiautomationcore

UiaRaiseAutomationPropertyChangedEvent UiaReturnRawElementProvider UiaRaiseAutomationEvent UiaHostProviderFromHwnd UiaGetReservedNotSupportedValue UiaLookupId

oleaut32

SafeArrayPutElement SafeArrayCreateVector SysFreeString SysStringLen GetErrorInfo SysAllocStringLen SetErrorInfo

dwmapi

DwmEnableBlurBehindWindow

ole32

CoInitializeEx RevokeDragDrop OleInitialize RegisterDragDrop CoCreateInstance CoUninitialize

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmAssociateContextEx ImmGetContext ImmGetCompositionStringW

ntdll

RtlNtStatusToDosError NtWriteFile NtOpenFile NtCreateNamedPipeFile

uxtheme

SetWindowTheme

vcruntime140

__CxxFrameHandler3 memmove memset memcmp __C_specific_handler __current_exception __current_exception_context memcpy

api-ms-win-crt-math-l1-1-0

sin cos trunc floor round expf powf fmax fmin floorf ceilf fmaxf fminf cosf sinf acosf cbrtf exp2f ceil atan2f roundf __setusermatherr _hypotf

api-ms-win-crt-string-l1-1-0

wcslen strlen

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _initterm_e _set_app_type _seh_filter_exe strerror exit _exit _c_exit _cexit __p___argc _initterm __p___argv terminate _crt_atexit _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free