HELIOS[.]exe | Triage™

General

Target
HELIOS.exe
Size 8.8MB
Sample260620-cll5bscy3j
SHA256 82446cbfe8e26b0e322c366a7b4b374fff0c7a120e8e64226c099e4402e67cbe
MD5 7614be6b29c93b99de4636a19482947e
SHA1 971f27ef11c2c47db8f0ef6cb27dd10d461b4a25
SHA512 d443bdbdf8e034f75420e0edbcaea35415e140de84ddbe802e3e14360c55580db586fe8ed336d3451180f292f909a72e2c1b5ad8f7636a8f83f304eed31331b7
SSDEEP 196608:xTAdhbAMBw4uPVh9ZjyUpUp9arrfjJT/qTP8sHmDbK:mdtAb4sVJ169URT/aP8UA
TLSH
T1C7963315BD795546CA31F03B46ABD238D76B0E92E9D2C203DAA13F9B367A10D2C4F346
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HELIOS.exe

File Explorer

HELIOS.exe

.exe 8.8MB

HELIOS.exe

SHA256 82446cbfe8e26b0e322c366a7b4b374fff0c7a120e8e64226c099e4402e67cbe
MD5 7614be6b29c93b99de4636a19482947e
SHA1 971f27ef11c2c47db8f0ef6cb27dd10d461b4a25
SHA512 d443bdbdf8e034f75420e0edbcaea35415e140de84ddbe802e3e14360c55580db586fe8ed336d3451180f292f909a72e2c1b5ad8f7636a8f83f304eed31331b7
SSDEEP 196608:xTAdhbAMBw4uPVh9ZjyUpUp9arrfjJT/qTP8sHmDbK:mdtAb4sVJ169URT/aP8UA
TLSH
T1C7963315BD795546CA31F03B46ABD238D76B0E92E9D2C203DAA13F9B367A10D2C4F346
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

42812772

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

��Q��(�8|.z҈�$��ܔ��'��]�+�$��`��'��CN#��b ;��A$��4�y�J)R��O�u��Ќe��[��敬��]�-&q6OI�u�(�o]k1��-��EV*��u��2��+rX�D*��Ixiw�AS�ʣH5[�^VO�h�F��$� bs�jjH� 1i;��L�AHf�"��v��9]�k�R�J>��h��l^��¤��0�y��n��l�4h� ��Sj�@�ڐ��U/X$��)m߄� �Q�q��%F��5��lp��>�@��\��}K��o��.��E��~vq��U��1�L辟��mk��S�+o[a,�N`��B��6�(5�]\o� ��kW��r��F�v�^�}ѹSl�"#�p��Tc��Ad�� 4��Y��J��C<;~Ņ��kg�w~��+U�Q�`��.��U��!��b9�ہ� ��2�9��6}ք� X��`��fv��ߪ�K�#��4��-d��tɋ6.�}�)�u��͑m��S؀.M�$w��fT6Kc�XC��搹�M��I4X��<(ҢG�1I<�h��;�)U��-g�f0�6�6I�X�H�4�9��R��y缨�WY�Z��2��*�(Y��c:�:�(-�� ⪎��b�k��7�Q�A��ڐt��5�KHo;W�F� ;Ƕ�6ڣ��09J��B\Y�L]��e�<�{@z�ƣb��i)3�׿`՘<��?v ��U��u�s]r��#J�i��|��n��a�� Mn,A��:��$��x��z\��|�5��1�%@4u��q��ʥ�?�%SdA� ��C^��U@l�u��/��U.�኉�P�.kR�/��eWT^��qGD-W-��P��p�� u�hIyt�_��߀sOn��.�@��T{~>9��=�$��E��蛏�I�j�aB��5�ا�o��$R�'�?�4� �&��#��U(Ԫ4�x?�_�и��ĒP��|�)�?{(a��Ã��7�>��@Z�t��K"6��ɗO��w�S2��M��i��jE~��æHf�b��N�o�J�𓐂��I=lY�6�mX��Z�t��f\��݆��%�H��/ü��o�U�,�|$]�"|��:&��҆Ww8�X�Gɷ{Q��l�E��%��Q�|��0�c[��y��cZ��JZ��XO��g�LorkG-�r��)8�/�q��T>c)��:��i�b��˯��2�J%i^׾hv�"�?e��m��r.2�4�N��/��;�Xq��y��/�zrt��,�5��t�`�hr��ѫ��~�T��@�0��E ��|y�?-��ՀCK|;�e�L�1X(^-�H�ς]g��4oH�nh��:��ə�ԇ;��W�?�(pq0�X0JKp�y#��\�p��b�F�j��.��0v�o�ov9�|%��W��_� �T�5 ��{ݗo}wu�-�`��q�Q P�H,~%�:M��у�f�p��d:B�s%��Қ#E�ݣ��H6�tY[��s��`�bLp'z�p�\z��P}��.��`S�8�5�]MUP+��4�o��m��Sy�R�:��f# ��k��'B�8 ��߿QUi��I�4s�a��=�T��y0�Z��L�u�OHTs�oO��@�r�_��E1��? u��A�;!��$A�Pn��/��Xc}9��u�� sJh��'��e��>��ҖK��JTӗ㫴S�<�O0D,�նga��t-��@��ԛ.>�N��F"��f��poe��"g<��k��6��.��MJ!��-�\r��o9��ؔYU��T'�g @�j��a9'jr�2�QX��9gCXS��~4��mU!�~��G��6"?Sd�$��E� �׮ɂ��Q?�Ot]��*o9s��n��W�q��r��$~�X��/U"��h,n[^��:��Z��娼r��"@��3%��h1´��-M��jGپ !��J��f�:Wh��|J�$�,h��_�C��M��6]o��rlԝ:��"�z�fAo��S�Y�VӺyP�ԋ/��-��tr��Ձ#GA�Ʀ��lK�(Z,=i��2s��K<�B�x�䴄��]Ll9�T�)��_0�e{��5��.Y!�D׻��]��p#��1~/��P�+�~iW��ަ^�[�sdui�\�r8��$=%uɶ�q7ʩk�� r@��D@n�5H:��̈�̸d�=� ��)�?��M`0�G��x�w�VU0ԇ8�Yf~c02��r�E7Ɛ��4j��{ٯB�b@��gY�#l I�a�cQO�#ؔ�� ;��0�575k�C� 8��`W��d8wl}�7[[��N`�!'��(y��M��Iڦ>nl�o�U%h(4,��[��x\��m߅��=s��;��͵Z>pn;��-�#au1��쥾X�8G5"��v�rI]� !O�<i��aE'r=@��\�?�FYC��k��4ń?qIqd�8�Dpܶ��<P�w>e02|��2tA��V}��Ww�� 1��ׁ\m� x��υF�0�H�GQ8��q��RtS�;��>\�\9�Fm0�s�s9�'z��o�m�#p,��X�"}-�_�4��y��nߝ��&�ĊR� �ي*��B�d(m>JW �C$�t%�R5sMoѴ�d�j�_x|(��E�� F[i{�/��[6�jƞ��_��b��=/��J�NjĦtƺ�!��%A�!� �� U3Բ*��PP@�a_0�T*�O.��# !e�&_3�+2�zS�L��E��u��jO9��o,�Ҽ��}�c��D,� ��ǞY�o��O%�%Q0l��gȣ0��4��s��7p��`7ǖ��;�ڈX��GG�^��r�^��Ⱦr�]nY�8l�c�*��tR lC��VXA'W� ��#@� ��^k!pȔ_^9�eE.��M.��rpv��.1�H��7�9��$Sv�T��K�n�g?i3#k��ajי�ߍPT�X��y��UOӏHҺ��B^��ǻ�e+��=�V[g7�< �k8�+l@{��D��h ��K�ڢH�5��D_7�4��o;ۨ �b�.��l}�-��l��]��y+��h._�ɠV �#[M�BHC��Nk ��7��T��we|s��Xaיբ��)�Y �?��a)��.��=�&�i#9�;�CO��^��,�&)7!��J��V�]�c�e]�)]�

Sharing

General

Malware Config

Signatures

File Explorer

HELIOS.exe

generic