065140de72af5ef3bd303e793733b264_JaffaCakes118

General

Target

065140de72af5ef3bd303e793733b264_JaffaCakes118
Size

9.7MB
MD5

065140de72af5ef3bd303e793733b264
SHA1

19f685bc9026b42fbe4951215df6d64bc8ad9c11
SHA256

6e8ddb8601f3fc192cd14b871084e708654b553ebf73229004a3a163a6bcb194
SHA512

0fb3b90bb9e0826a68f82a28f6502e3d468188b4f8aa1f097b2f356d62098d8173d2a8afd5e376c139a101ad6a2a1dd0ac2140b5936addca4269f8eaf77a067d
SSDEEP

196608:e0tMbuPlAnekmwi0WMOS4JbFf8JnmVsVJ2H1Z/i4fplDC:e2OuNAnJMImUEZ/i9

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

065140de72af5ef3bd303e793733b264_JaffaCakes118
.apk android arch:arm arch:mips

com.ximalaya.ting.android

.activity.login.WelcomeActivity

Activities

.activity.login.WelcomeActivity

com.gau.go.launcher.action.GO_WIDGET_CONVERT_3D
com.gau.go.launcherex.gowidget
android.intent.action.MAIN

.activity.MainTabActivity2

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.WAKE_LOCK
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RECORD_AUDIO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.GET_TASKS
android.permission.RESTART_PACKAGES
android.permission.READ_CONTACTS
android.permission.VIBRATE
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.ACCESS_COARSE_LOCATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
getui.permission.GetuiService

Receivers

.activity.setting.AlarmReceiver

com.ximalaya.ting.android.action.START_ALARM
com.ximalaya.ting.android.action.LOCAL_NOTIFY
com.ximalaya.ting.android.action.SCHEDULE_PAUSE_PLAYER

.broadcast.GlobalBroadcastReceiver

android.net.conn.CONNECTIVITY_CHANGE

.broadcast.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

.service.push.PushMessageReceiver

com.baidu.android.pushservice.action.MESSAGE
com.baidu.android.pushservice.action.RECEIVE
com.baidu.android.pushservice.action.notification.CLICK
com.igexin.sdk.action.PYl50KpbSK9irMiCfGfCR7

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

.appwidget.WidgetProviderSmall

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_DELETED
android.appwidget.action.APPWIDGET_DISABLED
android.appwidget.action.APPWIDGET_ENABLED
com.ximalaya.ting.android.action.ACTION_PLAY_START
com.ximalaya.ting.android.action.ACTION_PLAY_PAUSE
com.ximalaya.ting.android.action.ACTION_PLAY_CHANGE_SOUND
com.ximalaya.ting.android.ACTION_PLAY_PROGRESS_UPDATE

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls

com.igexin.sdk.PushReceiver

com.igexin.sdk.action.pushmanager

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.PYl50KpbSK9irMiCfGfCR7

Services

.service.play.LocalMediaService

com.ximalaya.ting.LocalMediaService
plugin-deploy.jar
.apk android

Android Permissions

065140de72af5ef3bd303e793733b264_JaffaCakes118

Permissions

android.permission.WAKE_LOCK

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.READ_CONTACTS

android.permission.VIBRATE

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_COARSE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

getui.permission.GetuiService

Sharing

General

Malware Config

Signatures

Files

com.ximalaya.ting.android

.activity.login.WelcomeActivity

Activities

.activity.login.WelcomeActivity

.activity.MainTabActivity2

com.tencent.tauth.AuthActivity

Permissions

Receivers

.activity.setting.AlarmReceiver

.broadcast.GlobalBroadcastReceiver

.broadcast.MediaButtonReceiver

.service.push.PushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

.appwidget.WidgetProviderSmall

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushReceiver

com.igexin.download.DownloadReceiver

com.igexin.getuiext.service.PayloadReceiver

Services

.service.play.LocalMediaService

Android Permissions

065140de72af5ef3bd303e793733b264_JaffaCakes118