Overview

overview

8

Static

static

8

0334f2c4c0...18.apk

android-9-x86

1

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    0334f2c4c05d1b77d6d2fe3de3430566_JaffaCakes118

  • Size

    21.8MB

  • MD5

    0334f2c4c05d1b77d6d2fe3de3430566

  • SHA1

    34ce7d506c33f74022ea22990a821429dca6015c

  • SHA256

    304b1463132ca8c7ffce8a13ae29819a0890e275ea82b619c18859938962133f

  • SHA512

    eeab2bd87c2904f15f26e164f65a55939c6994d1aa41214da7cd7f6195d4997a171753821330e62be716258c353573989d69f0e231315d5f75f156c5166727c4

  • SSDEEP

    393216:dDTz2cFRPwsIeKhT0pk6JIAfao7jUxyUEncgoJARWPpHF1ZACt7Erb85baPfBvZ/:FFNwsn8EJpagUTYoARWBHHZ/t0I5WPfX

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 9 IoCs

Files

  • 0334f2c4c05d1b77d6d2fe3de3430566_JaffaCakes118
    .apk android arch:arm

    im.zuber.app

    im.zuber.app.controller.activitys.StartActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

0334f2c4c05d1b77d6d2fe3de3430566_JaffaCakes118

Permissions

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

android.permission.SYSTEM_OVERLAY_WINDOW

im.zuber.app.permission.MIPUSH_RECEIVE

com.meizu.flyme.push.permission.RECEIVE

im.zuber.app.push.permission.MESSAGE

com.meizu.c2dm.permission.RECEIVE

im.zuber.app.permission.C2D_MESSAGE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

android.permission.READ_PHONE_STATE

android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME