dfab45a4e9bf123d2a516bd4f007017c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dfab45a4e9bf123d2a516bd4f007017c_JaffaCakes118
Size

23.5MB
MD5

dfab45a4e9bf123d2a516bd4f007017c
SHA1

d74fdbf1ccf133b74fa313b39a86f8648a816d2b
SHA256

9ef2e27da294a1b0caf64c4b4b3db786f12ebf2624b6e2433384c234862926b8
SHA512

ba57bd4b1e6071276ce5b410363f8a0555360e33b7fdd51e30b4829c3de58486cf17483b567ceebcfbd16e3ad9d5b55c3aaf3b31f902ab6e7d126847a63b44f1
SSDEEP

393216:elC2EQNzjTMhSQ5Vl9FqFUbzYA4aotE5aY+JQP0Ac7ea/+GPJY5hC5Il27tZv5kR:4CvQNISQbz2tE92Qdci8lPJYzAE27nNm

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Requests dangerous framework permissions 26 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

dfab45a4e9bf123d2a516bd4f007017c_JaffaCakes118
.apk android arch:arm

com.zsfz.yxpkdzz.mi

com.mydefinemmpay.tool.logoAct

Activities

cn.cmgame.billing.api.GameOpenActivity

android.intent.action.CHINAMOBILE_OMS_GAME

cn.cmgame2_0.launch_model.shortcut.main.MiguHomeActivity

android.intent.action.MAIN

cn.egame.terminal.sdk.EgameCoreActivity

android.intent.action.MAIN

com.mydefinemmpay.tool.logoAct

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SEND_SMS
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.GET_PACKAGE_SIZE
android.permission.WRITE_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CALL_PHONE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.DISABLE_KEYGUARD
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_CONTACTS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
com.xiaomi.sdk.permission.PAYMENT
android.permission.READ_PHONE_STATE
android.permission.GET_ACCOUNTS

Receivers

cn.egame.terminal.sdk.EgameCoreReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
cn.egame.terminal.sdk.RECEIVER_CMD

Services

cn.egame.terminal.sdk.EgameCoreService

cn.egame.terminal.sdk.SERVICE_CMD
MiGameCenterSDKService.apk
.apk android

com.xiaomi.gamecenter.sdk.service

com.xiaomi.gamecenter.sdk.ui.actlayout.ViewForChooseAccountType

Activities

com.xiaomi.payment.CommonEntryActivity

android.intent.action.VIEW

com.xiaomi.passport.ui.LoginActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_LOGIN

com.xiaomi.passport.ui.QuickLoginActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_QUICK_LOGIN

com.xiaomi.passport.ui.WelcomeActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_WELCOME

com.xiaomi.passport.ui.RegisterAccountActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_REG

com.xiaomi.passport.ui.AreaCodePickerActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_AREA_CODE

com.xiaomi.passport.ui.AccountUnactivatedActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_UNACTIVATED

com.xiaomi.passport.ui.LicenseActivity

com.xiaomi.account.action.VIEW_LICENSE

Permissions

android.permission.INTERNET
android.permission.READ_LOGS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SEND_SMS
android.permission.GET_TASKS
android.permission.INSTALL_PACKAGES
android.permission.CHANGE_WIFI_STATE
com.xiaomi.channel.GAME_SERVICE_PERMISSION
com.xiaomi.gamecenter.sdk.service.permission.MIPUSH_RECEIVE
android.permission.MODIFY_AUDIO_SETTINGS
com.xiaomi.gamecenter.webkit
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.CALL_PHONE
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
com.xiaomi.permission.CLOUD_MANAGER
android.permission.ACCESS_COARSE_LOCATION
com.xiaomi.xmsf.permission.PAYMENT
android.permission.BLUETOOTH
android.permission.ACCESS_FINE_LOCATION

Receivers

com.xiaomi.gamecenter.sdk.service.GlobalReceiver

com.xiaomi.gamecenter.sdk.report
android.accounts.LOGIN_ACCOUNTS_CHANGED
com.xiaomi.gamecenter.sdk.updatesdk
com.xiaomi.gamecenter.sdk.activity.msg
com.xiaomi.gamecenter.sdk.report.jarinit

com.xiaomi.mipush.sdk.PushServiceReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

Services

com.xiaomi.gamecenter.sdk.Service4SDK

com.xiaomi.gamecenter.sdk.service

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowService

com.xiaomi.gamecenter.sdk.float

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowActService

com.xiaomi.gamecenter.sdk.float.act

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowConfigService

com.xiaomi.gamecenter.sdk.service.float.config

com.xiaomi.licensinglibrary.LicenseService

com.xiaomi.licensinglibrary.authfileinfo

com.xiaomi.passport.accountmanager.MiAuthenticatorService

com.xiaomi.accounts.AccountAuthenticator

com.xiaomi.payment.PaymentService

miuipub.intent.action.PAYMENT
unicom_resource.dat
.apk android

com.xiaowo.resourcepro
unicom_channel_resource.dat
.apk android

com.xiaowo.resourcepro

Android Permissions

dfab45a4e9bf123d2a516bd4f007017c_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.GET_PACKAGE_SIZE

android.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CALL_PHONE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.DISABLE_KEYGUARD

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

Sharing

General

Malware Config

Signatures

Files

com.zsfz.yxpkdzz.mi

com.mydefinemmpay.tool.logoAct

Activities

cn.cmgame.billing.api.GameOpenActivity

cn.cmgame2_0.launch_model.shortcut.main.MiguHomeActivity

cn.egame.terminal.sdk.EgameCoreActivity

com.mydefinemmpay.tool.logoAct

Permissions

Receivers

cn.egame.terminal.sdk.EgameCoreReceiver

Services

cn.egame.terminal.sdk.EgameCoreService

com.xiaomi.gamecenter.sdk.service

com.xiaomi.gamecenter.sdk.ui.actlayout.ViewForChooseAccountType

Activities

com.xiaomi.payment.CommonEntryActivity

com.xiaomi.passport.ui.LoginActivity

com.xiaomi.passport.ui.QuickLoginActivity

com.xiaomi.passport.ui.WelcomeActivity

com.xiaomi.passport.ui.RegisterAccountActivity

com.xiaomi.passport.ui.AreaCodePickerActivity

com.xiaomi.passport.ui.AccountUnactivatedActivity

com.xiaomi.passport.ui.LicenseActivity

Permissions

Receivers

com.xiaomi.gamecenter.sdk.service.GlobalReceiver

com.xiaomi.mipush.sdk.PushServiceReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

Services

com.xiaomi.gamecenter.sdk.Service4SDK

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowService

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowActService

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowConfigService

com.xiaomi.licensinglibrary.LicenseService

com.xiaomi.passport.accountmanager.MiAuthenticatorService

com.xiaomi.payment.PaymentService

com.xiaowo.resourcepro

com.xiaowo.resourcepro

Android Permissions

dfab45a4e9bf123d2a516bd4f007017c_JaffaCakes118