090819660a137e004e6660240d4f4a54_JaffaCakes118

General

Target

090819660a137e004e6660240d4f4a54_JaffaCakes118
Size

5.4MB
MD5

090819660a137e004e6660240d4f4a54
SHA1

7ced15cebc819397cd59adfb733deaa9998b31f9
SHA256

cf1d1c004639a0a584441a210c3c20c3d014e3584dccec7e338ec35a9dd3101a
SHA512

3414783afdd9b5fde76b2f4423da2b4e90d8421fa663f2f90af199d56a36b76921cc244e9c20b68f8a570f54089e10589a8a15c8583dcfbd6c1b5facc0afc47a
SSDEEP

98304:c3R8Rvrt0juf6e6RPE1pJzeUj4W/UHKjIpufvCjrScbFlJcInZVdXToG+Zt1XkEI:o8Vrv6jPGqUjm50fvCvSSlJcInZDXkZK

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

090819660a137e004e6660240d4f4a54_JaffaCakes118
.apk android arch:arm

com.yulong.android.coolmart

com.yulong.android.coolmart.ActivitySplash

Activities

com.yulong.android.coolmart.ActivitySplash

android.intent.action.MAIN

com.yulong.android.coolmart.MainActivity

com.yulong.android.coolmart.main

com.yulong.android.coolmart.search.SearchActivity

com.yulong.android.coolmart.search

com.yulong.android.coolmart.detailpage.AppDetailActivity

com.yulong.android.coolmart.appdetail

com.yulong.android.coolmart.common.AppListActivity

com.yulong.android.coolmart.applist

com.yulong.android.coolmart.boardList.BoardListActivity

com.yulong.android.coolmart.boardlist

com.yulong.android.coolmart.common.SpecialListActivity

com.yulong.android.coolmart.speciallist

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.yulong.android.coolmart.market.LinkProxyActivity

android.intent.action.VIEW

Permissions

android.permission.INSTALL_PACKAGES
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_COOLMART_DOWNLOAD
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.GET_ACCOUNTS
android.permission.INTERACT_ACROSS_USERS
android.permission.MANAGE_USERS
com.coolpadpush.permission.PUSH
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_USER_PRESENT
android.permission.GET_TASKS
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.CALL_PHONE
android.permission.CHANGE_WIFI_STATE
android.permission.RECEIVE_SMS
android.permission.WRITE_SETTINGS
android.permission.READ_SETTINGS
android.permission.SET_ACTIVITY_WATCHER
android.permission.REAL_GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.COPY_PROTECTED_DATA
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.FLASHLIGHT

Receivers

com.yulong.android.coolmart.download.DownloadReceiver

android.intent.action.MEDIA_MOUNTED
android.net.conn.CONNECTIVITY_CHANGE

com.yulong.android.coolmart.coolpush.UpdateCheckTriggerReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.SILENT_DOWNLOAD_COMPLETED

com.yulong.android.coolmart.manage.UpGradeTriggerReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.yulong.android.coolmart.manage.intalledinfo.AppInstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED

com.yulong.android.coolmart.coolcloud.CoolCloudBroadCastReceiver

com.coolcloud.uac.LOGIN
com.coolcloud.uac.LOGOUT
com.coolcloud.uac.modify_headIcon
com.coolcloud.account.modify_basicInfo
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

com.yulong.android.coolmart.coolpush.CoolPushSdkMsgReceiver

action_dispatch_push_message
com.android.coolpush.sdk.action.1012001

com.yulong.android.coolmart.coolpush.ZeusisSdkMsgReceiver

action_dispatch_push_message
action_notification_message_clicked

com.coolpad.sdk.receiver.SdkReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.huanju.floating.broadcastreceiver.BootBroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.yulong.android.coolmart.manage.RequestReceiver

yulong.intent.action.launcher.REQUEST_SHOW_NUM

com.huanju.wanka.asdk.receiver.HjReciver

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.BOOT_COMPLETED
com.huanju.asdk.intent.action.REBOOT_SERVICE
android.net.conn.CONNECTIVITY_CHANGE

com.yulong.appdata.uploadtjdataReceiver

android.intent.action.DATE_CHANGED
android.intent.action.TIME_SET

Services

Android Permissions

090819660a137e004e6660240d4f4a54_JaffaCakes118

Permissions

android.permission.INSTALL_PACKAGES

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_INTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_COOLMART_DOWNLOAD

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_ACCOUNTS

android.permission.INTERACT_ACROSS_USERS

android.permission.MANAGE_USERS

com.coolpadpush.permission.PUSH

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_USER_PRESENT

android.permission.GET_TASKS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.CALL_PHONE

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS

android.permission.SET_ACTIVITY_WATCHER

android.permission.REAL_GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.COPY_PROTECTED_DATA

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.FLASHLIGHT

Sharing

General

Malware Config

Signatures

Files

com.yulong.android.coolmart

com.yulong.android.coolmart.ActivitySplash

Activities

com.yulong.android.coolmart.ActivitySplash

com.yulong.android.coolmart.MainActivity

com.yulong.android.coolmart.search.SearchActivity

com.yulong.android.coolmart.detailpage.AppDetailActivity

com.yulong.android.coolmart.common.AppListActivity

com.yulong.android.coolmart.boardList.BoardListActivity

com.yulong.android.coolmart.common.SpecialListActivity

com.tencent.tauth.AuthActivity

com.yulong.android.coolmart.market.LinkProxyActivity

Permissions

Receivers

com.yulong.android.coolmart.download.DownloadReceiver

com.yulong.android.coolmart.coolpush.UpdateCheckTriggerReceiver

com.yulong.android.coolmart.manage.UpGradeTriggerReceiver

com.yulong.android.coolmart.manage.intalledinfo.AppInstallReceiver

com.yulong.android.coolmart.coolcloud.CoolCloudBroadCastReceiver

com.yulong.android.coolmart.coolpush.CoolPushSdkMsgReceiver

com.yulong.android.coolmart.coolpush.ZeusisSdkMsgReceiver

com.coolpad.sdk.receiver.SdkReceiver

com.huanju.floating.broadcastreceiver.BootBroadcastReceiver

com.yulong.android.coolmart.manage.RequestReceiver

com.huanju.wanka.asdk.receiver.HjReciver

com.yulong.appdata.uploadtjdataReceiver

Services

Android Permissions

090819660a137e004e6660240d4f4a54_JaffaCakes118