058ad16ccd12cb7267f1dcf11572e880_JaffaCakes118

General

Target

058ad16ccd12cb7267f1dcf11572e880_JaffaCakes118
Size

4.7MB
MD5

058ad16ccd12cb7267f1dcf11572e880
SHA1

8706f5ef3014dcc004c606b44486417e0f9190df
SHA256

68bb1b1d989a3fa606ca842dc09fe812d5504a01be0d1f116ff61b124cb865ac
SHA512

e43219a65d51755158d489e9cbe23f6d6f9ae88511d345b1c39a29a8074a6b2b3b8629372e1ecc0fd895f5c7eb5ddda91bb10a63fec0e772093f9ed88f765e95
SSDEEP

98304:dqtaTuAUPUeWnxmdSl/4ejRHOBPmYPydaMwafNHSs4dutcV:dyaTWiIdSlACH2eXdSUdN4duSV

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

058ad16ccd12cb7267f1dcf11572e880_JaffaCakes118
.apk android arch:arm

com.jianwan.cjbgs

com.jianwan.h5.SplashActivity

Activities

com.jianwan.h5.SplashActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.wancms.sdk.ui.WeChatPayActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.shengpay.express.smc.ExpressSmcClientActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.CHANGE_NETWORK_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.MODE_WORLD_READABLE
android.permission.RECEIVE_SMS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT

Receivers

com.wancms.sdk.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

Services

com.snowfish.a.a.s.ABGSvc

com.snowfish.a.a.s.ABGSvc

com.wancms.sdk.WancmsSDKAppService

android.intent.action.RESPOND_VIA_MESSAGE
res.bin
.apk android

Android Permissions

058ad16ccd12cb7267f1dcf11572e880_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MODE_WORLD_READABLE

android.permission.RECEIVE_SMS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

com.jianwan.cjbgs

com.jianwan.h5.SplashActivity

Activities

com.jianwan.h5.SplashActivity

com.tencent.tauth.AuthActivity

com.wancms.sdk.ui.WeChatPayActivity

com.shengpay.express.smc.ExpressSmcClientActivity

Permissions

Receivers

com.wancms.sdk.AppRegister

Services

com.snowfish.a.a.s.ABGSvc

com.wancms.sdk.WancmsSDKAppService

Android Permissions

058ad16ccd12cb7267f1dcf11572e880_JaffaCakes118