04e7fa3edc60b680aec622cdc165936c_JaffaCakes118

General

Target

04e7fa3edc60b680aec622cdc165936c_JaffaCakes118
Size

21.9MB
MD5

04e7fa3edc60b680aec622cdc165936c
SHA1

afd3bf6b44b20343feea853b026d9eac50f43720
SHA256

afa28273b5a2c6afaa7b660d6ad8065bb14566db379d571b4e03e340b62c1210
SHA512

c19d63cbe6d79f2dd6f83487440c1898c8bac649c414fb9f74495c15dd6958af639eec5a7df7ee35f2b626c8cf960e29472ad5bee872e16dd27f44aff2785b42
SSDEEP

393216:DtS5odWoq9KwODrpYk/brm6AMhyY7RWX1beaQO5L0uT1eYCN+/JtPEla+gH1C1iR:DtSVo1p3brXT8YVcee5IuTgHN+falgHv

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

04e7fa3edc60b680aec622cdc165936c_JaffaCakes118
.apk android arch:arm64 arch:arm arch:x86

com.sys.ventbar

com.sys.ventbar.ui.WelcomeActivity

Activities

com.sys.ventbar.ui.HomeActivity

android.intent.action.VIEW

com.sys.ventbar.ui.AppraiseActivity

android.intent.action.VIEW

com.sys.ventbar.ui.WelcomeActivity

android.intent.action.MAIN

com.sys.ventbar.ui.RongYun.MyMultiVideoCallActivity

io.rong.intent.action.voip.MULTIVIDEO

com.sys.ventbar.ui.RongYun.MySingleCallActivity

io.rong.intent.action.voip.SINGLEVIDEO
io.rong.intent.action.voip.SINGLEAUDIO

com.sys.ventbar.ui.RongYun.MyMultiAudioCallActivity

io.rong.intent.action.voip.MULTIAUDIO

io.rong.imkit.tools.RongWebviewActivity

io.rong.imkit.intent.action.webview

io.rong.imkit.activity.PicturePagerActivity

io.rong.imkit.intent.action.picturepagerview

Permissions

android.permission.PROCESS_OUTGOING_CALLS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.FLASHLIGHT
android.permission.VIBRATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_PHONE_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CALL_PHONE
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_SETTINGS
android.permission.CHANGE_WIFI_STATE

Receivers

com.sys.ventbar.wxapi.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

com.sys.ventbar.service.RongCallReceiver

io.rong.intent.action.UI_READY
io.rong.intent.action.SDK_INIT
android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL
io.rong.push.intent.MESSAGE_ARRIVED
io.rong.push.intent.MI_MESSAGE_ARRIVED
io.rong.push.intent.MESSAGE_CLICKED
io.rong.push.intent.MI_MESSAGE_CLICKED

com.sys.ventbar.service.SealNotificationReceiver

io.rong.push.intent.MESSAGE_ARRIVED
io.rong.push.intent.MI_MESSAGE_ARRIVED
io.rong.push.intent.MESSAGE_CLICKED
io.rong.push.intent.MI_MESSAGE_CLICKED

io.rong.push.PushReceiver

io.rong.push.intent.action.HEART_BEAT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

Services

Android Permissions

04e7fa3edc60b680aec622cdc165936c_JaffaCakes118

Permissions

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CALL_PHONE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

Sharing

General

Malware Config

Signatures

Files

com.sys.ventbar

com.sys.ventbar.ui.WelcomeActivity

Activities

com.sys.ventbar.ui.HomeActivity

com.sys.ventbar.ui.AppraiseActivity

com.sys.ventbar.ui.WelcomeActivity

com.sys.ventbar.ui.RongYun.MyMultiVideoCallActivity

com.sys.ventbar.ui.RongYun.MySingleCallActivity

com.sys.ventbar.ui.RongYun.MyMultiAudioCallActivity

io.rong.imkit.tools.RongWebviewActivity

io.rong.imkit.activity.PicturePagerActivity

Permissions

Receivers

com.sys.ventbar.wxapi.AppRegister

com.sys.ventbar.service.RongCallReceiver

com.sys.ventbar.service.SealNotificationReceiver

io.rong.push.PushReceiver

Services

Android Permissions

04e7fa3edc60b680aec622cdc165936c_JaffaCakes118