YaoLianSyncService[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

YaoLianSyncService.exe
Size

57KB
MD5

8bf374818d5466b3b86b0c188ac0c309
SHA1

b6323e7e5fd42f3e80ca7ba43717fe690d69dded
SHA256

b8a169fa1a45c7b9cee29d24ce25a80387662b3d3a31f1bd6a535ef4a3a17b7d
SHA512

4461d9446b45d3d7d66bf87af3d3fe0019a28b7931713eb19a9524ac955cd45d040e96c59f1caf249445378092075fc6911aec0ccaa0af34b9ca474a3c1a74f4
SSDEEP

768:j2tMF2fm0IZK/fZJm1pkXMVUipH4jqLvW5ite1zTUjZSEdFl:j2+SzR/fZJokmUoH7LvWkcTUjZhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
YaoLianSyncService.exe

Files

YaoLianSyncService.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ