Static task
static1
Behavioral task
behavioral1
Sample
ETWESEProviderResources.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ETWESEProviderResources.dll
Resource
win10v2004-20240508-en
General
-
Target
ETWESEProviderResources.dll
-
Size
32KB
-
MD5
b84acc831171b251d5c3b196e3abf9d9
-
SHA1
4c0d9412151f1b2d02d2a4f3c65f51dcba63b2d0
-
SHA256
0d2662dc5626f0af785c586242fc06c7a1b0f10de7fa825718b1cdd551713b50
-
SHA512
4d4c05e81374900d5f2001c0125f4b11ba9ac94bd422b49378f9b34b40641b40b0c0f84f1b09da1956683e46dd9437c075675c2bb9a2da5a20adc5c27068b5f3
-
SSDEEP
384:2WK8SxwWQ9auif30lvRqpH4qIaiEQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQX:+Y9Fif3cvMpH4q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ETWESEProviderResources.dll
Files
-
ETWESEProviderResources.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ