Categories: Malware

Jaik.41732 (file analysis)

The Jaik.41732 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.41732 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

aip.baidubce.com

ocsp.globalsign.com

crl.globalsign.com

ocsp2.globalsign.com

How to determine Jaik.41732?


File Info:
crc32: 9BF7F9E5md5: 7dda4a15bd9a0e2401fe5c69873bddb7name: 7DDA4A15BD9A0E2401FE5C69873BDDB7.mlwsha1: 48cdeb376e0bf10de0e80b716f7ec7eef6995cfbsha256: 69999e441cf5419eaa8bf24bbf9d02dd993980990415565a962cc1f60bd07fb4sha512: 8141b7cddd6ef9dc1afd1258c565d8a99ba6ce61ba02b20af7b64a431f2416b91334317af803075c80923c53d31bd6282c3cb9daa95fd08b13ecbf4409e429cbssdeep: 6144:b4TEWH8Ibw2INMlmPVzA8cYh7a4o/IMx7ZyKzkvK9UytX062Nu/xfLGe2kUQ:KNw21M1cYh7a4VMxDkvKtybCxfSeVUtype: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed
Version Info:
LegalCopyright: QQxff1a2371605990FileVersion: 1.5.0.0CompanyName: QQxff1a2371605990Comments: x622ax56fex7ffbx8bd1x5c0fx5de5x5177ProductName: x622ax56fex7ffbx8bd1x5c0fx5de5x5177ProductVersion: 1.5.0.0FileDescription: x622ax56fex7ffbx8bd1x5c0fx5de5x5177Translation: 0x0804 0x04b0

Jaik.41732 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005246d51 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader39.8341
ALYac	Gen:Variant.Jaik.41732
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Gen:Variant.Jaik.41732
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.5bd9a0
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Cynet	Malicious (score: 100)
MicroWorld-eScan	Gen:Variant.Jaik.41732
Ad-Aware	Gen:Variant.Jaik.41732
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34690.Ai0aai2IBkfb
FireEye	Generic.mg.7dda4a15bd9a0e24
Emsisoft	Gen:Variant.Jaik.41732 (B)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Jaik.DA304
GData	Gen:Variant.Jaik.41732
McAfee	Artemis!7DDA4A15BD9A
MAX	malware (ai score=87)
Malwarebytes	Malware.Heuristic.1001
TrendMicro-HouseCall	TROJ_GEN.R005H09EG21
Rising	Malware.Heuristic!ET#76% (RDMK:cmRtazraaPVn54e+1745rFE1UPGH)
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/Application
Paloalto	generic.ml