06df37fb1ac623c04d220c3f8524eda1_JaffaCakes118

General

Target

06df37fb1ac623c04d220c3f8524eda1_JaffaCakes118
Size

31.5MB
MD5

06df37fb1ac623c04d220c3f8524eda1
SHA1

9e378bd23204f8a2246b89114fc6d49d3e9db62e
SHA256

fcf59f69a1d57265cc0f10c5cac6b6889637f908aa759e75ddd873d120c2be4c
SHA512

9b295f4820452fb4559cb535df19b6a4c936e654672d8fd0be3c476b92c48a9911fbabd810dbcafe8a67a0c3946773f2350d75c7c075735268cdab6ea18b94ec
SSDEEP

786432:95auD2D8ij1892NUHbs+NMtyZi8cLmXNjgiSp:9515ijy2Nasio+Rq

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

06df37fb1ac623c04d220c3f8524eda1_JaffaCakes118
.apk android arch:arm

com.dreamgame.world3d.origin

com.jc.jinchanlib.JCSDKSplashActivity

Activities

com.jc.plugin.JCSDKMainActivity

android.intent.action.VIEW

com.jc.jinchanlib.JCSDKSplashActivity

android.intent.action.MAIN

com.mcore.core.api.AdActivity

android.intent.action.MAIN

Permissions

com.android.vending.BILLING
android.permission.VIBRATE
android.permission.INTERNET
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_SETTINGS
android.permission.FOREGROUND_SERVICE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
com.dreamgame.stickman_cn.permission.KW_SDK_BROADCAST

Receivers

com.amazon.device.iap.ResponseReceiver

com.amazon.inapp.purchasing.NOTIFY

com.mintegral.msdk.click.AppReceiver

android.intent.action.PACKAGE_ADDED

com.android.bhtcore.exproxy.rec.BHTEXProxyReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.TIME_SET
android.provider.Telephony.SMS_RECEIVED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.net.conn.CONNECTIVITY_CHANGE

com.ksad.download.DownloadReceiver

download.intent.action.DOWNLOAD_PAUSE
download.intent.action.DOWNLOAD_RESUME
download.intent.action.DOWNLOAD_CANCEL

com.mcore.core.extra.MainReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.mplite.extra.api.tick
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.app.action.NEXT_ALARM_CLOCK_CHANGED
android.intent.action.TIME_SET

com.mcore.h5mob.rec.MobRec

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.net.conn.CONNECTIVITY_CHANGE

com.magich5.rec.MobRec

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.net.conn.CONNECTIVITY_CHANGE

Services

com.mintegral.msdk.shell.MTGService

com.mintegral.msdk.download.action

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.remote
bdxadsdk.jar
.apk android
gdtadv2.jar
.apk android arch:arm64 arch:arm

Android Permissions

06df37fb1ac623c04d220c3f8524eda1_JaffaCakes118

Permissions

com.android.vending.BILLING

android.permission.VIBRATE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.dreamgame.stickman_cn.permission.KW_SDK_BROADCAST

Sharing

General

Malware Config

Signatures

Files

com.dreamgame.world3d.origin

com.jc.jinchanlib.JCSDKSplashActivity

Activities

com.jc.plugin.JCSDKMainActivity

com.jc.jinchanlib.JCSDKSplashActivity

com.mcore.core.api.AdActivity

Permissions

Receivers

com.amazon.device.iap.ResponseReceiver

com.mintegral.msdk.click.AppReceiver

com.android.bhtcore.exproxy.rec.BHTEXProxyReceiver

com.ksad.download.DownloadReceiver

com.mcore.core.extra.MainReceiver

com.mcore.h5mob.rec.MobRec

com.magich5.rec.MobRec

Services

com.mintegral.msdk.shell.MTGService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

Android Permissions

06df37fb1ac623c04d220c3f8524eda1_JaffaCakes118