Static task
static1
Behavioral task
behavioral1
Sample
ETWESEProviderResources.dll
Resource
win10v2004-20240508-en
General
-
Target
ETWESEProviderResources.dll
-
Size
50KB
-
MD5
5f500cbc90a2de2aa28200013d6c2ab9
-
SHA1
976ac55350af2a0d407d350c21c69536393bbd52
-
SHA256
eddf8ec83afcdea6693004d44b954c7810888064cb9c45a422d356c838bc8fe9
-
SHA512
ed95154b708267f3c8b0d75019de7ae76857fb232e90bde7567b5f9123541a541b09fbc1c2193e2cd71d3de1fe8dda8e9040c146f25d8ca89e28e7418d50969e
-
SSDEEP
384:qWKvxwWEWm79aL9yFALcpy3H7iVGlKatd9944ZqzUUA9L+A2VdK:0c9w9yKLcpy3wGlKatdT4aqzUb5+A2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ETWESEProviderResources.dll
Files
-
ETWESEProviderResources.dll.dll windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ