Categories: Malware

Jaik.206247 (file analysis)

The Jaik.206247 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.206247 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Performs HTTP requests potentially not found in PCAP.
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Attempts to modify proxy settings
Yara detections observed in process dumps, payloads or dropped files

How to determine Jaik.206247?


File Info:
name: 605052A5F7F347CB7753.mlwpath: /opt/CAPEv2/storage/binaries/b3b6b3a4bd74c0a27e505aabab3e150c5d36c230cc6aea4fc735f4583cb51e0dcrc32: AE370E35md5: 605052a5f7f347cb77532e4dfa1c6164sha1: 5038e0660056b3a04d6e0c49e4af6f14c9bf0c1csha256: b3b6b3a4bd74c0a27e505aabab3e150c5d36c230cc6aea4fc735f4583cb51e0dsha512: 563332890334501755c52ce749d8a30c1026f2d40a9fde8f45f3fbfe02984de2e75078f3d6a997de3454b8f363de8f5967670cc83a2b18481fc2ed3f5447b205ssdeep: 49152:6TcGYaKnSqkuCwlg5uP0DNw+l8VO6I2rOfq3KmmvkDoBSNM+aTSI3o1wt7yddXzP:yctaQpYwcNw2PDcOfqPLDoBSNx1wt4type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B4369E60B643C277D95110F1293DBAAF54297E150B3498D3E3C83F2E69B19D22A33E67sha3_384: e348a7abc79fad58b023514c6537fcc69588545ab7113ef2e90ca911332031df7daf694041d01fd59f4ce6af2568eeb7ep_bytes: e8a9080000e97afeffff558bec6a00fftimestamp: 2023-11-20 09:11:58
Version Info:
CompanyName: 2345移动科技FileDescription: 2345安全卫士在线安装程序FileVersion: 8.8.1.14353LegalCopyright: 版权所有 (C) 2023, 2345移动科技PrivateBuild: 0 0 0 1 1 1 830262 0 0 0 1 udg= ueO45sC5vdg= 0 1 1 1ProductName: 2345安全卫士在线安装程序ProductVersion: 8.8.1.14353Translation: 0x0804 0x04b0

Jaik.206247 also known as:

Bkav	W32.AIDetectMalware
Lionic	Adware.Win32.Ad2345.2!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Jaik.206247
FireEye	Gen:Variant.Jaik.206247
Skyhigh	Artemis
ALYac	Gen:Variant.Jaik.206247
Cylance	unsafe
Zillya	Adware.Ad2345.Win32.5610
K7AntiVirus	Adware ( 0055ce2c1 )
Alibaba	AdWare:Win32/2345_AGen.b3e8dc92
K7GW	Adware ( 0055ce2c1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/2345.H potentially unwanted
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Ad2345.gen
BitDefender	Gen:Variant.Jaik.206247
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Jaik.206247 (B)
VIPRE	Gen:Variant.Jaik.206247
Sophos	Generic Reputation PUA (PUA)
Ikarus	PUA.2345
GData	Gen:Variant.Jaik.206247
Varist	W32/ABRisk.WFKS-5876
MAX	malware (ai score=81)
Antiy-AVL	GrayWare/Win32.H
Arcabit	Trojan.Jaik.D325A7
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Ad2345.gen
Microsoft	PUAAdvertising:Win32/2345Cn
Cynet	Malicious (score: 100)
McAfee	Artemis!605052A5F7F3
VBA32	BScope.Adware.Hao
Malwarebytes	Generic.Malware.AI.DDS
TrendMicro-HouseCall	TROJ_GEN.R03BH0CB824
Rising	PUF.2345SoftBundler!1.DFF6 (CLOUD)
Yandex	PUA.Ad2345!L11HQk28f7Y
SentinelOne	Static AI – Suspicious PE
MaxSecure	Adware.W32.Ad2345.gen_274404
Fortinet	Riskware/2345
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_100% (D)