Static task
static1
Behavioral task
behavioral1
Sample
ETWESEProviderResources.dll
Resource
win10v2004-20240426-en
General
-
Target
ETWESEProviderResources.dll
-
Size
77KB
-
MD5
8f85fd32cf4c9f901d5427582d9fb022
-
SHA1
3c0345eeee130ddd575cdf2b56f9e77aa1ad9aff
-
SHA256
12c740d4f6a302e9875db7fb2ff700b906a2b3e7357eef102733093d92b2a30f
-
SHA512
7e4ef53cc60f84b5c652b5af67e8fda9e19b9c20ba499624377ee4555a7b88c42196c29e3d5ce3c18beb435d008e76e8ed373b8dcf340529a9a8521e90b9e6b9
-
SSDEEP
768:WU9zWv/sdL+J8a6vAa+z6GW2FTdhmXNEFw5GT:WMCv/sdL+JJ6vAaj721d8XNEFw5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ETWESEProviderResources.dll
Files
-
ETWESEProviderResources.dll.dll windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ