Categories: Malware

What is “Jaik.53485”?

The Jaik.53485 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.53485 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Uses Windows utilities for basic functionality

How to determine Jaik.53485?


File Info:
name: 0B2C97C785205DA103E1.mlwpath: /opt/CAPEv2/storage/binaries/ed31df75d1ca7c54873c4fd14c854e70b561e00aa2674eb280c0cc467ac6a08bcrc32: 57D17741md5: 0b2c97c785205da103e1b9f69a918ed1sha1: 6ab19f2e64cc9e2b59a8fd684ce05bdc8b9fc96csha256: ed31df75d1ca7c54873c4fd14c854e70b561e00aa2674eb280c0cc467ac6a08bsha512: dc12d842463fb0ae9948ae8da652ea185206acdaa285cc52dfac6e3f55b870a93fb80b259423355c81ad081e14daa6113610bb17d37fc6d1dbeffed62679648dssdeep: 6144:g61E/QSnxoEMTlXEulock9X+t40VMz7ebHoVpiQGuQ5WKXtDPc0gm9v4d:g6ErxJMTtEulg9X+t4qMnmc1Rg0vGatype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B094E112BAC08472D67229351EF69B30693CBC305B768EDB93942B5E5E311D0DA37B63sha3_384: d2d8590fd682aa94b8b107fd9ee65de794c02a059076d54699ea690163c4dda9c5d2696d8d98d9496c76674517a58e27ep_bytes: e80c060000e978feffffe97f450000cctimestamp: 2022-03-03 13:16:04
Version Info:
0: [No Data]

Jaik.53485 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Jaik.53485
FireEye	Generic.mg.0b2c97c785205da1
ALYac	Gen:Variant.Jaik.53485
Cylance	Unsafe
Sangfor	Trojan.Win32.Generic.ky
Alibaba	Backdoor:MSIL/Bladabindi.a03e3723
Cybereason	malicious.785205
Baidu	MSIL.Backdoor.Bladabindi.a
VirIT	Trojan.Win32.DownLoader21.BPQW
Cyren	W32/Trojan.BEYV-9196
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Bladabindi.AR
APEX	Malicious
ClamAV	Win.Packed.Bladabindi-7994427-0
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Gen:Variant.Jaik.53485
NANO-Antivirus	Trojan.Win32.Autoruner2.ebrjyu
Avast	MSIL:Bladabindi-JK [Trj]
Tencent	Msil.Trojan.Bladabindi.Eym
Ad-Aware	Gen:Variant.Jaik.53485
Sophos	Generic ML PUA (PUA)
Comodo	TrojWare.MSIL.Spy.Agent.CP@4pqytu
DrWeb	Trojan.MulDrop6.40595
TrendMicro	HEUR_RLOTRICK.A
McAfee-GW-Edition	BehavesLike.Win32.Dropper.gc
Emsisoft	Gen:Variant.Jaik.53485 (B)
Ikarus	Trojan.MSIL.Bladabindi
GData	MSIL.Trojan-Spy.Bladabindi.BQ
Jiangmin	TrojanDropper.Autoit.dce
Avira	TR/ATRAPS.Gen
Arcabit	Trojan.Jaik.DD0ED
Microsoft	Backdoor:MSIL/Bladabindi.B
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Artemis!2D18D3A8B9D3
MAX	malware (ai score=80)
VBA32	Trojan.Downloader
Malwarebytes	Backdoor.NJRat
TrendMicro-HouseCall	BKDR_BLADABI.SMC
Rising	Backdoor.njRAT!1.9E49 (CLASSIC)
Yandex	Trojan.AvsMofer.dd6520
SentinelOne	Static AI – Suspicious PE
Fortinet	MSIL/Bladabindi.AS!tr
BitDefenderTheta	Gen:NN.ZemsilF.34712.cmW@a4I8t7b
AVG	MSIL:Bladabindi-JK [Trj]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_90% (W)