Categories: Malware

Jaiko.2752 malicious file

The Jaiko.2752 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaiko.2752 virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Behavioural detection: Injection (Process Hollowing)
Behavioural detection: Injection (inter-process)
Behavioural detection: Injection with CreateRemoteThread in a remote process
Checks the presence of disk drives in the registry, possibly for anti-virtualization
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Jaiko.2752?


File Info:
name: 198BE379656E57B6E6C6.mlwpath: /opt/CAPEv2/storage/binaries/41cbd3764fe49b634b38d5b1084c638e688063947b793d30c7a2c9c827140f58crc32: 80388624md5: 198be379656e57b6e6c6fe3372fbbec8sha1: 304b156a65887af854539eea18d85bc81b85468dsha256: 41cbd3764fe49b634b38d5b1084c638e688063947b793d30c7a2c9c827140f58sha512: 8569640d50317ae8540efbeb9818a612a3eb6e104da735cd8398231ebede3b696de66762e49cbd24617dc3b12e4508113d7c2a2607280617114901f955df33cdssdeep: 6144:PQX3ubxZPmWDiVSiBKX2QJ8I7MRwvWv7qsCU9bYMaC:M3ubxZPmW2VSiBKGc8o+dlbYMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T131448D29B7F0A0B1E0F316B16EB996E59B757C316738801F3B58079D0E70BA48632767sha3_384: 39ca2fc1f994d1e7fe51be9520307bf4333790c7df36542c30e80dc0bcf92d18c72498d236bfd1a0d35f0a9d1459f20eep_bytes: e853580000e978feffffcccccccccccctimestamp: 2017-03-19 16:30:07
Version Info:
FileDescription: Internet Low-Mic Utility ToolCompanyName: Microsoft CorporationLegalTrademarks: © Microsoft Corporation. All rights reserved.ProductName: Internet ExplorerOriginalFilename: ielowutilLegalCopyright: © Microsoft Corporation. All rights reserved.Comments: Internet Low-Mic Utility ToolPrivateBuild: 8.5.6.7ProductVersion: 8.5.6.7Translation: 0x0409 0x04b0

Jaiko.2752 also known as:

Lionic	Trojan.Win32.Yakes.4!c
MicroWorld-eScan	Gen:Variant.Jaiko.2752
FireEye	Generic.mg.198be379656e57b6
Skyhigh	BehavesLike.Win32.Infected.dh
McAfee	Artemis!198BE379656E
Malwarebytes	Crypt.Trojan.Malicious.DDS
VIPRE	Gen:Variant.Jaiko.2752
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 004f85331 )
BitDefender	Gen:Variant.Jaiko.2752
K7GW	Trojan-Downloader ( 004f85331 )
Cybereason	malicious.a65887
BitDefenderTheta	Gen:NN.ZexaF.36792.qu0@aO4bWqni
VirIT	Trojan.Win32.Dnldr25.LLP
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Smokeloader.A
Cynet	Malicious (score: 99)
APEX	Malicious
Kaspersky	Trojan.Win32.Yakes.sutw
Alibaba	TrojanDownloader:Win32/Yakes.224dd582
NANO-Antivirus	Trojan.Win32.Yakes.emxlwf
Rising	Downloader.Zurgop!8.4BB (TFE:5:6bNNpv35fsS)
Emsisoft	Gen:Variant.Jaiko.2752 (B)
F-Secure	Trojan.TR/Crypt.XPACK.vqxpd
DrWeb	Trojan.DownLoader25.7737
Zillya	Trojan.Yakes.Win32.63314
TrendMicro	Mal_MiliCry-1h
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan-Spy.Remcos
GData	Gen:Variant.Jaiko.2752
Jiangmin	Trojan.Yakes.wdo
Avira	TR/Crypt.XPACK.vqxpd
Antiy-AVL	Trojan/Win32.Yakes
Kingsoft	malware.kb.a.996
Xcitium	Malware@#1j9p45guh56eu
Arcabit	Trojan.Jaiko.DAC0
ZoneAlarm	Trojan.Win32.Yakes.sutw
Microsoft	TrojanDownloader:Win32/Dofoil!rfn
Google	Detected
VBA32	BScope.Trojan.Fuerboos
ALYac	Gen:Variant.Jaiko.2752
MAX	malware (ai score=82)
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	Mal_MiliCry-1h
Tencent	Malware.Win32.Gencirc.114937b2
MaxSecure	Trojan.Malware.10813160.susgen
Fortinet	W32/Zurgop.CO!tr.dldr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (W)