com.android.internal.app.ChooserActivity
android.intent.action.CHOOSER
com.android.internal.app.ShutdownActivity
android.intent.action.ACTION_REQUEST_SHUTDOWN
android.intent.action.REBOOT
Overview
overview
6Static
static
6Spy Note v...R1.dll
windows7-x64
1Spy Note v...R1.dll
windows10-2004-x64
1Spy Note v...R2.dll
windows7-x64
1Spy Note v...R2.dll
windows10-2004-x64
1Spy Note v...R3.dll
windows7-x64
1Spy Note v...R3.dll
windows10-2004-x64
1Spy Note v...R4.dll
windows7-x64
1Spy Note v...R4.dll
windows10-2004-x64
1Spy Note v...R5.dll
windows7-x64
1Spy Note v...R5.dll
windows10-2004-x64
1Spy Note v...R7.dll
windows7-x64
1Spy Note v...R7.dll
windows10-2004-x64
1Spy Note v...rk.apk
android-9-x86
Spy Note v...rk.apk
android-10-x64
Spy Note v...rk.apk
android-11-x64
Spy Note v...e.html
windows7-x64
1Spy Note v...e.html
windows10-2004-x64
1Spy Note v...e.html
windows7-x64
1Spy Note v...e.html
windows10-2004-x64
1Spy Note v...to.vbs
windows7-x64
1Spy Note v...to.vbs
windows10-2004-x64
1Spy Note v...2/aapt
ubuntu-18.04-amd64
Spy Note v...4/aapt
ubuntu-18.04-amd64
1Spy Note v...2/aapt
macos-10.15-amd64
1Spy Note v...4/aapt
macos-10.15-amd64
4Spy Note v...ib.dll
windows7-x64
1Spy Note v...ib.dll
windows10-2004-x64
1Spy Note v...il.dll
windows7-x64
1Spy Note v...il.dll
windows10-2004-x64
1Spy Note v....0.exe
windows7-x64
6Spy Note v....0.exe
windows10-2004-x64
1Spy Note v...ub.exe
windows7-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Spy Note v7.0d/Android/DIR1.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Spy Note v7.0d/Android/DIR1.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
Spy Note v7.0d/Android/DIR2.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Spy Note v7.0d/Android/DIR2.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
Spy Note v7.0d/Android/DIR3.dll
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
Spy Note v7.0d/Android/DIR3.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
Spy Note v7.0d/Android/DIR4.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
Spy Note v7.0d/Android/DIR4.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
Spy Note v7.0d/Android/DIR5.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Spy Note v7.0d/Android/DIR5.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
Spy Note v7.0d/Android/DIR7.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Spy Note v7.0d/Android/DIR7.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
Spy Note v7.0d/Android/brut/androlib/android-framework.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral14
Sample
Spy Note v7.0d/Android/brut/androlib/android-framework.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral15
Sample
Spy Note v7.0d/Android/brut/androlib/android-framework.apk
Resource
android-x64-arm64-20240221-en
Behavioral task
behavioral16
Sample
Spy Note v7.0d/Android/org/hamcrest/core/package.html
Resource
win7-20240220-en
Behavioral task
behavioral17
Sample
Spy Note v7.0d/Android/org/hamcrest/core/package.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral18
Sample
Spy Note v7.0d/Android/org/hamcrest/package.html
Resource
win7-20240221-en
Behavioral task
behavioral19
Sample
Spy Note v7.0d/Android/org/hamcrest/package.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral20
Sample
Spy Note v7.0d/Android/org/jf/dexlib2/analysis/ClassProto.vbs
Resource
win7-20240221-en
Behavioral task
behavioral21
Sample
Spy Note v7.0d/Android/org/jf/dexlib2/analysis/ClassProto.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral22
Sample
Spy Note v7.0d/Android/prebuilt/aapt/linux/32/aapt
Resource
ubuntu1804-amd64-20240418-en
Behavioral task
behavioral23
Sample
Spy Note v7.0d/Android/prebuilt/aapt/linux/64/aapt
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral24
Sample
Spy Note v7.0d/Android/prebuilt/aapt/macosx/32/aapt
Resource
macos-20240410-en
Behavioral task
behavioral25
Sample
Spy Note v7.0d/Android/prebuilt/aapt/macosx/64/aapt
Resource
macos-20240410-en
Behavioral task
behavioral26
Sample
Spy Note v7.0d/Interop.WMPLib.dll
Resource
win7-20240221-en
Behavioral task
behavioral27
Sample
Spy Note v7.0d/Interop.WMPLib.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral28
Sample
Spy Note v7.0d/Mono.Cecil.dll
Resource
win7-20240221-en
Behavioral task
behavioral29
Sample
Spy Note v7.0d/Mono.Cecil.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral30
Sample
Spy Note v7.0d/Spy Note v7.0.exe
Resource
win7-20240220-en
Behavioral task
behavioral31
Sample
Spy Note v7.0d/Spy Note v7.0.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral32
Sample
Spy Note v7.0d/Stub.exe
Resource
win7-20240221-en
Target
0348b77622ea9e70dd78bfbaf2633d64_JaffaCakes118
Size
22.5MB
MD5
0348b77622ea9e70dd78bfbaf2633d64
SHA1
87ab087fbd2932b6b2a2e0e9e23d8f4a7bfb06d9
SHA256
bc905eed78a47c1e390023fbee48b035c5af6fc9dd9a9b065f42ce1250fc1b8f
SHA512
bd24532dbf2d832486e91fa4a9efe1d2a82a1551566daef98468ca350c83b68afff703925aee3a3eb1d5e5e3c8f9267b285a73b5de4dd4971301e3613618b920
SSDEEP
393216:/wY6abdEaM7r9ULerNl+8aMOTJxGl4ZJ+z42CFdsFq1a40znaoBnvDRZKPocani:o2yaM7r99N6Ul4G+FWFq1cna2nrjoBai
description | ioc |
---|---|
Allows an application to collect component usage statistics. | android.permission.PACKAGE_USAGE_STATS |
Checks for missing Authenticode signature.
resource |
---|
unpack001/Spy Note v7.0d/Android/DIR1.il |
unpack001/Spy Note v7.0d/Android/DIR2.il |
unpack001/Spy Note v7.0d/Android/DIR3.il |
unpack001/Spy Note v7.0d/Android/DIR4.il |
unpack001/Spy Note v7.0d/Android/DIR5.il |
unpack001/Spy Note v7.0d/Android/DIR7.il |
unpack001/Spy Note v7.0d/Interop.WMPLib.dll |
unpack001/Spy Note v7.0d/Mono.Cecil.dll |
unpack001/Spy Note v7.0d/Spy Note v7.0.exe |
unpack001/Spy Note v7.0d/Stub.apk |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
android.intent.action.CHOOSER
android.intent.action.ACTION_REQUEST_SHUTDOWN
android.intent.action.REBOOT
android.permission.LOCATION_HARDWARE
android.permission.BIND_JOB_SERVICE
android.permission.CONTROL_VPN
android.permission.PACKAGE_USAGE_STATS
android.intent.category.MASTER_CLEAR.permission.C2D_MESSAGE
android.permission.CONFIRM_FULL_BACKUP
android.intent.action.BOOT_COMPLETED
android.intent.action.UPDATE_PINS
android.intent.action.UPDATE_INTENT_FIREWALL
android.intent.action.UPDATE_SMS_SHORT_CODES
android.intent.action.UPDATE_CARRIER_PROVISIONING_URLS
android.intent.action.UPDATE_TZDATA
android.intent.action.UPDATE_SEPOLICY
android.intent.action.MASTER_CLEAR
com.google.android.c2dm.intent.RECEIVE
android.backup.TRANSPORT_HOST
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\Users\njq8\Desktop\jbevain-cecil-0.9.5-73-ga5ffcc0\jbevain-cecil-a5ffcc0\obj\net_2_0_Debug\Mono.Cecil.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ