MALICIOUS — Jumper_BOOT.IMA

MALICIOUS — Jumper_BOOT.IMA is a unknown sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (87/100), attributed to the UNOFFICIAL family. 2 of 47 detection engines flagged it.

Identification

• SHA-256: 1c93ca2836569b6cbeea3fc4103c7152403b5c049bad3e4d75ded311ffaee00e
• SHA-1: 51c356277e41a0e413c2883095fec35977bcd494
• MD5: de35afe288d64ea01f201e2a24f3a732
• ssdeep: 24576:Ei00N4FQeSt6OawQv4N0UYMUzbX0NgLw7e0yby8qW8:500N4pS4OaxANwvEGLw7e0gy8qW8
• TLSH: T1105623A859072E4AE048FEDCC3B6B66E1BF920F2978B557F4353461E47A84234464BF0
• Submitted as: Jumper_BOOT.IMA
• File type: unknown · Size: 1456128 bytes
• Verdict: malicious (87/100) · Family: UNOFFICIAL

Source: theZoo · first seen 2026-07-25T17:26:25.985Z · SHA-256 not source-verified

Detections (2 of 47 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• ClamAV (daily): {HEX}bin.trojan.generic.ee.50.UNOFFICIAL

Why this verdict

The malicious score of 87/100 is the fusion of 2 weighted signals:

• ClamAV (daily) flagged {HEX}bin.trojan.generic.ee.50.UNOFFICIAL (rule {HEX}bin.trojan.generic.ee.50.UNOFFICIAL) - engine signal, weight 0.90, confidence 0.95
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

File paths

• T:\CM
• C:\COREL50\CUSTOM\PNTAREA.BMP

More UNOFFICIAL samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report