f353131cb81f52d0d6a6a6dd54c24f6f_JaffaCakes118

General

Target

f353131cb81f52d0d6a6a6dd54c24f6f_JaffaCakes118
Size

4.5MB
MD5

f353131cb81f52d0d6a6a6dd54c24f6f
SHA1

98e98351a32219a530ab31cb06a7a062ec2b0d08
SHA256

51f5006d6f59e07aca8c8c01fd21db36dd86afd693f5fcd4ef8b950d11ab093c
SHA512

d607897d5159894d985247152e590f3eb97518c23c7a5541001f418b91afdb958a3ef88325bb9a6be2b03d25806647ac6ac65cd5e026d150220c8e5f4bdc9132
SSDEEP

98304:mgemFCYaYxLyIiUeDt9uDT6S7BKL5XOycsJEWlBsH:dlLyIiUebXX2sJWH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

Files

f353131cb81f52d0d6a6a6dd54c24f6f_JaffaCakes118
.apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

tobetheonlyone.wifip2papplication

tobetheonlyone.wifip2papplication.MainActivity

Activities

tobetheonlyone.wifip2papplication.MainActivity

android.intent.action.MAIN

tobetheonlyone.wifip2papplication.ZXing.CaptureActivity

com.google.zxing.client.android.SCAN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

tobetheonlyone.wifip2papplication.ZXing.encode.EncodeActivity

com.google.zxing.client.android.ENCODE
android.intent.action.SEND
android.intent.action.SEND

tobetheonlyone.wifip2papplication.ZXing.book.SearchBookContentsActivity

com.google.zxing.client.android.SEARCH_BOOK_CONTENTS

tobetheonlyone.wifip2papplication.ZXing.share.CreateQRCodeActivity

com.google.zxing.client.android.SHARE

com.mob.tools.MobUIShell

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY
android.intent.action.VIEW

Permissions

android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.INTERNET
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.READ_CONTACTS
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.FLASHLIGHT
android.permission.FLASHLIGHT
android.permission.CAMERA
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.PACKAGE_USAGE_STATS
com.android.launcher.permission.INSTALL_SHORTCUT

Receivers

awty.enr.pweu.CJTV

android.intent.action.PACKAGE_ADDED

Services
gdtadv2.jar
.apk android arch:arm arch:arm64

Android Permissions

f353131cb81f52d0d6a6a6dd54c24f6f_JaffaCakes118

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.INTERNET

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.READ_CONTACTS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.CAMERA

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.PACKAGE_USAGE_STATS

com.android.launcher.permission.INSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

tobetheonlyone.wifip2papplication

tobetheonlyone.wifip2papplication.MainActivity

Activities

tobetheonlyone.wifip2papplication.MainActivity

tobetheonlyone.wifip2papplication.ZXing.CaptureActivity

tobetheonlyone.wifip2papplication.ZXing.encode.EncodeActivity

tobetheonlyone.wifip2papplication.ZXing.book.SearchBookContentsActivity

tobetheonlyone.wifip2papplication.ZXing.share.CreateQRCodeActivity

com.mob.tools.MobUIShell

Permissions

Receivers

awty.enr.pweu.CJTV

Services

Android Permissions

f353131cb81f52d0d6a6a6dd54c24f6f_JaffaCakes118