General

  • Target

    00f74df66fcf3184d39ab8c179e24e09_JaffaCakes118

  • Size

    26.9MB

  • MD5

    00f74df66fcf3184d39ab8c179e24e09

  • SHA1

    5659afdf33cc232265b532e33687409d6631c885

  • SHA256

    a60c25fe7f56882bc2897ea793dea9b0dc4fe1364a9f08f66802e803a3ab622a

  • SHA512

    6059fa950eaf4eaf7ed33dc8429d9657c4ba8e239dbe7a9cd8fd4786a171c2b1884db6fdf985cc836f6ac1e1371ffc6db32a803844ba67750fe50f18d5befc16

  • SSDEEP

    786432:rOaA+/8X4dRPNUvnS3Pj7ixPsAUC3fFaVSZqZGw:yaAiAktNUvnWPjGGRSIX

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 4 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 6 IoCs

Files

  • 00f74df66fcf3184d39ab8c179e24e09_JaffaCakes118
    .apk android arch:arm arch:x64

    com.douziit.locator

    com.douziit.locator.activity.MainActivity


  • amap_resource1_0_0.png
    .apk android

    com.example.amapsdkv2

    com.amap.api.maps.offlinemap.OfflineMapActivity


  • autonavi_Resource1_1_0.png
    .apk android

    com.example.navigationsdk

    .WelcomeActivity


Android Permissions

00f74df66fcf3184d39ab8c179e24e09_JaffaCakes118

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CAMERA

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE