General

  • Target

    fe4d961ec18da7ee9d2df3d7d3a60f64_JaffaCakes118

  • Size

    29.2MB

  • MD5

    fe4d961ec18da7ee9d2df3d7d3a60f64

  • SHA1

    33ba50369897b79df22488a0b12cc3c45a9260ec

  • SHA256

    3d28c2a6c092913d8d32d3b5b86de308e39e69dfabaa0b266d3ae032f39f022d

  • SHA512

    a41c151e94777e1b52bc21ef467f351b998bd26330c46799c0aaa34849155cf99a2164c9bd2b89f481e34dca77830399d1e63ea794c62b2d6ddcf67229de2cc8

  • SSDEEP

    786432:D7AH8qryV48fBbJNq93WyXbOtJgi7DN6Q9yENQTU1Vj3J+:DscFV48fJq9myLOtJgUKg1Vzc

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 10 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 10 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 11 IoCs

Files

  • fe4d961ec18da7ee9d2df3d7d3a60f64_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.maipu.tourist

    com.maipu.tourist.activity.GuideActivity


  • autonavi_Resource1_1_0.png
    .apk android

    com.example.navigationsdk

    .WelcomeActivity


Android Permissions

fe4d961ec18da7ee9d2df3d7d3a60f64_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.CAMERA

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.VIBRATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE