diff --git a/modules/signatures/windows/network_c2_etherhiding.py b/modules/signatures/windows/network_c2_etherhiding.py
index 0f3eafe8..fcea7945 100644
--- a/modules/signatures/windows/network_c2_etherhiding.py
+++ b/modules/signatures/windows/network_c2_etherhiding.py
@@ -62,9 +62,9 @@ def on_call(self, call, process):
             # Look for the JSON-RPC payload format
             if '"jsonrpc"' in buffer_lower and '"method"' in buffer_lower:
                 if (
-                    '"eth_call"' in buffer_lower
-                    or '"eth_gettransactionbyhash"' in buffer_lower
-                    or '"eth_getstorageat"' in buffer_lower
+                    "eth_call" in buffer_lower
+                    or "eth_gettransactionbyhash" in buffer_lower
+                    or "eth_getstorageat" in buffer_lower
                 ):
                     proc_name = process.get("process_name", "unknown")