General

  • Target

    592d28e8ee3cf17017835a6d3845225d6b729ed4a79fa9a420491ed1bfc27b17

  • Size

    15.7MB

  • MD5

    c119fd431c57def4205464e000ce5972

  • SHA1

    3cc8510fdc286d69d778b30082a6115b17faa758

  • SHA256

    592d28e8ee3cf17017835a6d3845225d6b729ed4a79fa9a420491ed1bfc27b17

  • SHA512

    edff5be68a1311896f96030f1969a4e4daa78501e0282feb41571c1597085e91da895b8647f7cb88eeb1d42adbe6ac554014842926f97a895d715fd4036fb287

  • SSDEEP

    393216:/+avuEo/5DeCLLb+tJV132yl4zqJzEVMzxhWgTJjHegBz+FCDuhm:/+avvs5DHMVl2S4zq9xlRHegV+cDuc

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 20 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 20 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 8 IoCs

Files

  • 592d28e8ee3cf17017835a6d3845225d6b729ed4a79fa9a420491ed1bfc27b17
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    com.jzyj.poker

    com.jzyj.poker.Activity.SplashActivity


Android Permissions

592d28e8ee3cf17017835a6d3845225d6b729ed4a79fa9a420491ed1bfc27b17

Permissions

com.jzyj.poker.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.CALL_PHONE

android.permission.READ_CONTACTS