Static task
static1
Behavioral task
behavioral1
Sample
ETWESEProviderResources.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ETWESEProviderResources.dll
Resource
win10v2004-20240426-en
General
-
Target
ETWESEProviderResources.dll
-
Size
32KB
-
MD5
b714982ebc44f406996fb0450af482b6
-
SHA1
d5267806bd1fc016de2a942bd6e35dc30ffb5814
-
SHA256
eda60216b6c1315fb39938db1b61047a0fbc2382fdeaea64051770d692a80c94
-
SHA512
2e6f2b7c507157400c80874a756771f6b705e41a381803476d5c353afad2e095a177a9a1a0e2cb15638bc088dab1e3854f06334c86795cba0ba283bf5effdfb8
-
SSDEEP
384:FWK8SxwWQ9auif30lvRqpH4qIaiEQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQX:DY9Fif3cvMpH4q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ETWESEProviderResources.dll
Files
-
ETWESEProviderResources.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ