04251c29c87520e030b32d19366c2660_JaffaCakes118

General

Target

04251c29c87520e030b32d19366c2660_JaffaCakes118
Size

974KB
MD5

04251c29c87520e030b32d19366c2660
SHA1

0080c89c2dbac195cff7dd2c2e14f2a2f910b989
SHA256

9402f28be6fb49d304567c604077630cabbb44010092b401ed4bf4d4ef2c1967
SHA512

c9a1b7cc7adc51f890709cc92af83d4cc79a9d117a2665406b715186f1a69c0bddb3bc6ef256802072921a3e7e9321d6bb4bd8957553aa49c5810741f0884699
SSDEEP

24576:f2M6A0vVm2fH4hg9DUkEP1oay2kRupBMdlcRR0nynsxg:f2FAsE6C1oPBupBMx6sxg

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

04251c29c87520e030b32d19366c2660_JaffaCakes118
.apk android arch:arm arch:x86

com.forever.smart.cover

com.qihoo.util.StartActivity

Activities

smart.cover.Inzeong_goo

android.intent.action.MAIN

com.qihoo.util.StartActivity

android.intent.action.MAIN

ToggleWidgetConfig

android.appwidget.action.APPWIDGET_CONFIGURE

Permissions

android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.GET_TASKS
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.WAKE_LOCK
com.android.vending.CHECK_LICENSE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

com.qihoo.util.CommonReceiver

com.qihoo.commonreceiver.ARRIVED
com.qihoo.commonreceiver.CLEARED

smart.cover.Rcv

android.app.action.DEVICE_ADMIN_ENABLED

smart.cover.Bcr

android.intent.action.BOOT_COMPLETED

ToggleWidget

android.appwidget.action.APPWIDGET_UPDATE

com.chase.dream.park.DreamRec

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.heiro.uview.sjwc.SjRec

android.intent.action.USER_PRESENT

Services

com.qihoo.util.CommonService

com.qihoo.commonservice.SERVICE

Android Permissions

04251c29c87520e030b32d19366c2660_JaffaCakes118

Permissions

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WAKE_LOCK

com.android.vending.CHECK_LICENSE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

Sharing

General

Malware Config

Signatures

Files

com.forever.smart.cover

com.qihoo.util.StartActivity

Activities

smart.cover.Inzeong_goo

com.qihoo.util.StartActivity

ToggleWidgetConfig

Permissions

Receivers

com.qihoo.util.CommonReceiver

smart.cover.Rcv

smart.cover.Bcr

ToggleWidget

com.chase.dream.park.DreamRec

com.heiro.uview.sjwc.SjRec

Services

com.qihoo.util.CommonService

Android Permissions

04251c29c87520e030b32d19366c2660_JaffaCakes118