010b2d20f799b9abf75637d49b9d0ffe_JaffaCakes118

General

Target

010b2d20f799b9abf75637d49b9d0ffe_JaffaCakes118
Size

31.9MB
MD5

010b2d20f799b9abf75637d49b9d0ffe
SHA1

3f54fb4f1fe3b90baba341f3a1b623da6de37641
SHA256

ccc0086a1a3d21b3b5129529d5131d390f9b12113aa2fd0673aaaa4f2e28d841
SHA512

5dbacd056538b2c03e6d8d9889cb076276a83d899f61165a628ee850c38b7c575614f27bbd23b02453688a28b0912bea3af39bed51b376bae2881ef2a45aff46
SSDEEP

786432:ptIlf4R3tcOUPL+5cu7xGKlUTmdLrE+8o8uVfncz:pW3w5blGcySLrfY

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

010b2d20f799b9abf75637d49b9d0ffe_JaffaCakes118
.apk android arch:arm

com.tencent.portfolio

com.tencent.portfolio.CSplashActivity

Activities

com.tencent.portfolio.CSplashActivity

android.intent.action.MAIN

com.tencent.portfolio.QQStockActivity

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.portfolio.news2.ui.NewsBlankJumpActivity

android.intent.action.VIEW

com.tencent.midas.qq.APMidasQQWalletActivity

android.intent.action.VIEW

com.tencent.portfolio.promotiondialog.PromoteDialogActivity

android.intent.action.ACTION_PROMOTE

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BATTERY_STATS
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_LOGS
android.permission.RESTART_PACKAGES
android.permission.WRITE_SETTINGS
android.permission.READ_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.DISABLE_KEYGUARD
android.permission.BROADCAST_STICKY
android.permission.REORDER_TASKS
android.permission.MODIFY_AUDIO_SETTINGS
com.tencent.portfolio.appwidgetnew2.permission.WIDGET_RECEIVER
com.tencent.portfolio.permission.BROADCAST_RECEIVER
com.tencent.portfolio.permission.APP_GO_FOREGROUND_BROADCAST
com.tencent.portfolio.permission.TRANSACTION_BROADCAST_PERMISSION
com.tencent.portfolio.permission.ACCOUNT_BROADCAST_PERMISSION
com.tencent.portfolio.permission.MATCH_BROADCAST_PERMISSION
com.tencent.portfolio.permission.USERINFO_RECEIVER
com.tencent.portfolio.permission.UI_UPDATE_RECEIVER
com.tencent.portfolio.permission.SYSTEM_BROADCAST
com.tencent.portfolio.permission.H5_QQOPENID_BROADCAST_PERMISSION
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.htc.launcher.permission.INSTALL_SHORTCUT
com.htc.launcher.permission.UNINSTALL_SHORTCUT
com.htc.launcher.permission.WRITE_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.sec.android.app.twlauncher.INSTALL_SHORTCUT
com.sec.android.app.twlauncher.UNINSTALL_SHORTCUT
com.sec.android.app.twlauncher.WRITE_SETTINGS
com.sec.android.app.twlauncher.READ_SETTINGS
org.adw.launcher.permission.INSTALL_SHORTCUT
org.adw.launcher.permission.UNINSTALL_SHORTCUT
org.adw.launcher.permission.READ_SETTINGS
org.adw.launcher.permission.WRITE_SETTINGS
org.adwfreak.launcher.permission.INSTALL_SHORTCUT
org.adwfreak.launcher.permission.UNINSTALL_SHORTCUT
org.adwfreak.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.WRITE_SETTINGS
com.gau.go.launcherex.permission.INSTALL_SHORTCUT
com.gau.go.launcherex.permission.UNINSTALL_SHORTCUT
com.gau.go.launcherex.permission.READ_SETTINGS
com.gau.go.launcherex.permission.WRITE_SETTINGS
com.fede.launcher.permission.INSTALL_SHORTCUT
com.fede.launcher.permission.UNINSTALL_SHORTCUT
com.fede.launcher.permission.READ_SETTINGS
com.fede.launcher.permission.WRITE_SETTINGS
com.motorola.dlauncher.permission.INSTALL_SHORTCUT
com.motorola.dlauncher.permission.UNINSTALL_SHORTCUT
com.motorola.dlauncher.permission.READ_SETTINGS
com.motorola.dlauncher.permission.WRITE_SETTINGS
com.motorola.mmsp.motoswitch.permission.INSTALL_SHORTCUT
com.motorola.mmsp.motoswitch.permission.UNINSTALL_SHORTCUT
com.motorola.mmsp.motoswitch.permission.READ_SETTINGS
com.motorola.mmsp.motoswitch.permission.WRITE_SETTINGS
com.aspire.mm.permission.INSTALL_SHORTCUT
com.aspire.mm.permission.UNINSTALL_SHORTCUT
com.aspire.mm.permission.READ_SETTINGS
com.aspire.mm.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.INSTALL_SHORTCUT
com.qihoo360.launcher.permission.UNINSTALL_SHORTCUT
com.qihoo360.launcher.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.ty.launcher.permission.INSTALL_SHORTCUT
com.ty.launcher.permission.UNINSTALL_SHORTCUT
com.ty.launcher.permission.READ_SETTINGS
com.ty.launcher.permission.WRITE_SETTINGS
com.sonyericsson.homescreen.permission.INSTALL_SHORTCUT
com.sonyericsson.homescreen.permission.UNINSTALL_SHORTCUT
com.sonyericsson.homescreen.permission.READ_SETTINGS
com.sonyericsson.homescreen.permission.WRITE_SETTINGS
com.oppo.launcher.permission.INSTALL_SHORTCUT
com.oppo.launcher.permission.UNINSTALL_SHORTCUT
com.oppo.launcher.permission.WRITE_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.mediatek.launcherplus.permission.INSTALL_SHORTCUT
com.mediatek.launcherplus.permission.UNINSTALL_SHORTCUT
com.mediatek.launcherplus.permission.READ_SETTINGS
com.mediatek.launcherplus.permission.WRITE_SETTINGS
com.huawei.launcher2.permission.INSTALL_SHORTCUT
com.huawei.launcher2.permission.UNINSTALL_SHORTCUT
com.huawei.launcher2.permission.READ_SETTINGS
com.huawei.launcher2.permission.WRITE_SETTINGS
com.huawei.launcher3.permission.INSTALL_SHORTCUT
com.huawei.launcher3.permission.UNINSTALL_SHORTCUT
com.huawei.launcher3.permission.READ_SETTINGS
com.huawei.launcher3.permission.WRITE_SETTINGS
com.baiqi.weather.permission.INSTALL_SHORTCUT
com.baiqi.weather.permission.UNINSTALL_SHORTCUT
com.baiqi.weather.permission.READ_SETTINGS
com.baiqi.weather.permission.WRITE_SETTINGS
mobi.SyndicateApps.ICS.launcher.permission.INSTALL_SHORTCUT
mobi.SyndicateApps.ICS.launcher.permission.UNINSTALL_SHORTCUT
mobi.SyndicateApps.ICS.launcher.permission.READ_SETTINGS
mobi.SyndicateApps.ICS.launcher.permission.WRITE_SETTINGS
com.motorola.dock.DesktopDock.permission.INSTALL_SHORTCUT
com.motorola.dock.DesktopDock.permission.UNINSTALL_SHORTCUT
com.motorola.dock.DesktopDock.permission.READ_SETTINGS
com.motorola.dock.DesktopDock.permission.WRITE_SETTINGS
com.lge.launcher.permission.INSTALL_SHORTCUT
com.lge.launcher.permission.UNINSTALL_SHORTCUT
com.lge.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.WRITE_SETTINGS
com.thunderst.launcher.permission.INSTALL_SHORTCUT
com.thunderst.launcher.permission.UNINSTALL_SHORTCUT
com.thunderst.launcher.permission.READ_SETTINGS
com.thunderst.launcher.permission.WRITE_SETTINGS
android.permission.RECORD_AUDIO
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
com.tencent.portfolio.permission.MIPUSH_RECEIVE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE

Receivers

com.tencent.portfolio.appwidgetnew2.PortfolioWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
com.tencent.portfolio.appwidgetnew2.action.PORTFOLIO_WIDGET_REFRESH_ACTION
com.tencent.portfolio.appwidgetnew2.action.PORTFOLIO_WIDGET_UPDATE_ALLVIEWS_ACTION

com.tencent.portfolio.pushsdk.receiver.NotifyReceiver

com.tencent.portfolio.pushsdk.NOTIFICATION_NOTIFY_ATCION
com.tencent.portfolio.pushsdk.NOTIFICATION_CANCEL_ATCION
com.tencent.portfolio.pushsdk.NOTIFICATION_CLEARCACHE_ATCION

com.tencent.portfolio.pushsdk.receiver.DaemonReciever

android.intent.action.BOOT_COMPLETED

com.tencent.portfolio.pushsdk.receiver.NetStateChangedReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.tencent.portfolio.common.report.BossReportReceiver

com.tencent.portfolio.bossreport.INVOKEACTION

com.tencent.portfolio.pushsdk.thirdPush.MiMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.tencent.portfolio.pushsdk.thirdPush.HuaweiPushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE
com.huawei.android.push.intent.CLICK
com.huawei.intent.action.PUSH_STATE

com.huawei.hms.support.api.push.PushEventReceiver

com.huawei.intent.action.PUSH

Services
PluginExample.jar
.apk android

com.tencent.pluginexample
skin_res_301.skin
.apk android

com.tencent.portfolio.whiteskin

Android Permissions

010b2d20f799b9abf75637d49b9d0ffe_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BATTERY_STATS

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_LOGS

android.permission.RESTART_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.DISABLE_KEYGUARD

android.permission.BROADCAST_STICKY

android.permission.REORDER_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

com.tencent.portfolio.appwidgetnew2.permission.WIDGET_RECEIVER

com.tencent.portfolio.permission.BROADCAST_RECEIVER

com.tencent.portfolio.permission.APP_GO_FOREGROUND_BROADCAST

com.tencent.portfolio.permission.TRANSACTION_BROADCAST_PERMISSION

com.tencent.portfolio.permission.ACCOUNT_BROADCAST_PERMISSION

com.tencent.portfolio.permission.MATCH_BROADCAST_PERMISSION

com.tencent.portfolio.permission.USERINFO_RECEIVER

com.tencent.portfolio.permission.UI_UPDATE_RECEIVER

com.tencent.portfolio.permission.SYSTEM_BROADCAST

com.tencent.portfolio.permission.H5_QQOPENID_BROADCAST_PERMISSION

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.INSTALL_SHORTCUT

com.htc.launcher.permission.UNINSTALL_SHORTCUT

com.htc.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.sec.android.app.twlauncher.INSTALL_SHORTCUT

com.sec.android.app.twlauncher.UNINSTALL_SHORTCUT

com.sec.android.app.twlauncher.WRITE_SETTINGS

com.sec.android.app.twlauncher.READ_SETTINGS

org.adw.launcher.permission.INSTALL_SHORTCUT

org.adw.launcher.permission.UNINSTALL_SHORTCUT

org.adw.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.WRITE_SETTINGS

org.adwfreak.launcher.permission.INSTALL_SHORTCUT

org.adwfreak.launcher.permission.UNINSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

com.tencent.portfolio

com.tencent.portfolio.CSplashActivity

Activities

com.tencent.portfolio.CSplashActivity

com.tencent.portfolio.QQStockActivity

com.tencent.tauth.AuthActivity

com.tencent.portfolio.news2.ui.NewsBlankJumpActivity

com.tencent.midas.qq.APMidasQQWalletActivity

com.tencent.portfolio.promotiondialog.PromoteDialogActivity

Permissions

Receivers

com.tencent.portfolio.appwidgetnew2.PortfolioWidgetProvider

com.tencent.portfolio.pushsdk.receiver.NotifyReceiver

com.tencent.portfolio.pushsdk.receiver.DaemonReciever

com.tencent.portfolio.pushsdk.receiver.NetStateChangedReceiver

com.tencent.portfolio.common.report.BossReportReceiver

com.tencent.portfolio.pushsdk.thirdPush.MiMessageReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.tencent.portfolio.pushsdk.thirdPush.HuaweiPushReceiver

com.huawei.hms.support.api.push.PushEventReceiver

Services

com.tencent.pluginexample

com.tencent.portfolio.whiteskin

Android Permissions

010b2d20f799b9abf75637d49b9d0ffe_JaffaCakes118