fabda4ee7ca3a72d5c30024888f7de91_JaffaCakes118

General

Target

fabda4ee7ca3a72d5c30024888f7de91_JaffaCakes118
Size

3.3MB
MD5

fabda4ee7ca3a72d5c30024888f7de91
SHA1

7641815274dcf73af596b12d48f944ab617de0b6
SHA256

89e6bcb6c293ec2e6047fdb4fda5ad2ea18d98962a60fa79d3ee1a307583b858
SHA512

f47fc952b4025a1f9b624ee08304acd5e25fd902fa8c0ff613035afcaf6d7a81abf62093f9eb0f1fb949e26c291362023e28de43c35b4d5ec72e9c72cb2650f5
SSDEEP

98304:2cqjmWHDuoEN5bswjsaPIkRABSqFp/ZYlptm0fB:2cqbHDuBXbswFRoDzeftDfB

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

fabda4ee7ca3a72d5c30024888f7de91_JaffaCakes118
.apk android arch:arm arch:mips arch:x86

ickd.expressx

ickd.express.Activity.WelcomeActivity

Activities

ickd.express.Activity.WelcomeActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

ickd.express.Activity.c.Ru

android.intent.action.CREATE_SHORTCUT

Permissions

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_CONTACTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD
android.permission.CALL_PHONE
android.permission.CHANGE_CONFIGURATION
android.permission.RECORD_AUDIO
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.GET_TASKS

Receivers

ickd.express.BaiduPush.MyPushMessageReceiver

com.baidu.android.pushservice.action.MESSAGE
com.baidu.android.pushservice.action.RECEIVE
com.baidu.android.pushservice.action.notification.CLICK

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

ickd.express.Activity.w.Ae

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

ickd.express.Activity.p.Hj

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

ickd.express.Activity.c.Wmz

android.intent.action.PACKAGE_ADDED
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

ickd.express.Activity.a.Yfx

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

Services

com.baidu.android.pushservice.PushService

com.baidu.android.pushservice.action.PUSH_SERVICE
plugin-deploy.jar
.apk android

Android Permissions

fabda4ee7ca3a72d5c30024888f7de91_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.DISABLE_KEYGUARD

android.permission.CALL_PHONE

android.permission.CHANGE_CONFIGURATION

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

Sharing

General

Malware Config

Signatures

Files

ickd.expressx

ickd.express.Activity.WelcomeActivity

Activities

ickd.express.Activity.WelcomeActivity

com.tencent.tauth.AuthActivity

ickd.express.Activity.c.Ru

Permissions

Receivers

ickd.express.BaiduPush.MyPushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

ickd.express.Activity.w.Ae

ickd.express.Activity.p.Hj

ickd.express.Activity.c.Wmz

ickd.express.Activity.a.Yfx

Services

com.baidu.android.pushservice.PushService

Android Permissions

fabda4ee7ca3a72d5c30024888f7de91_JaffaCakes118