YaoLianSyncService[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

YaoLianSyncService.exe
Size

80KB
MD5

307656706cdaf03586a5fe05173aecaa
SHA1

78154d4506ee37c3e822967aa509aa03c7cf5715
SHA256

902d80084ce3bf90ebd243b2d523ff970b7f7887f51b138ab2fe9b8023b83219
SHA512

ec22734f5a18e3ca858187cc140ce4bc879467ce2e6cf8be452642008a6ce3cfd8d6e797f46967e811155e3c4239b6dec5fa1ace22baffae5e47cdca8fa7e6c0
SSDEEP

1536:mnAyXWbOQiL/3XKbKT9u3xgVXKaHyLvFyx8wu8GfP6:mA7bOQsHK13xgGFyx8wu8GH6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
YaoLianSyncService.exe

Files

YaoLianSyncService.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ