0b9f49c3d8cc0150bc8f5720231f2e35_JaffaCakes118

General

Target

0b9f49c3d8cc0150bc8f5720231f2e35_JaffaCakes118
Size

7.2MB
MD5

0b9f49c3d8cc0150bc8f5720231f2e35
SHA1

371f6f3bd3becf37a0293820ce3652220d15e416
SHA256

0f49f43330f0ed8e5cf35e37d9208cef4c273374c6dd587f5ac7550df6144b15
SHA512

8d1414a54d02579d848652cb0d7760207940f91269b77fdb1950296e56304b5ce771655e593aafc9b5ba27e09a35675ec66a1cbdc6e8e5e6fa767d729bfa2893
SSDEEP

98304:dafmKcxXIg7xzVV5rtMhGAJzi4MzJl863hUAwJx4rfie:dH3xzzttMPJzrMbBadxEfie

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

0b9f49c3d8cc0150bc8f5720231f2e35_JaffaCakes118
.apk android

com.asus.email

com.android.email.activity.Welcome

Activities

com.android.email.activity.Welcome

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.MAIN

com.android.email.activity.setup.AccountSetupBasics

com.asus.email.CREATE_ACCOUNT

com.android.email.activity.setup.AccountSetupChooser

com.asus.email.CREATE_ACCOUNT_CHOOSER

com.android.email.activity.setup.AccountSettings

com.asus.email.activity.setup.ACCOUNT_MANAGER_ENTRY
android.intent.action.EDIT
android.intent.action.MANAGE_NETWORK_USAGE

com.android.email.activity.ShortcutPicker

android.intent.action.CREATE_SHORTCUT

com.android.email.activity.EmailActivity

com.asus.email.activity.EmailActivity.ViewMessage
com.asus.email.activity.EmailActivity.AutoReply
android.intent.action.SEARCH

com.android.email.activity.MessageFileView

android.intent.action.VIEW

com.android.email.activity.MessageCompose

android.intent.action.VIEW
android.intent.action.SENDTO
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
com.asus.email.intent.action.REPLY

com.android.email.activity.MessageList

android.intent.action.MAIN

com.uservoice.uservoicesdk.activity.PortalActivity

android.intent.action.SEARCH

com.android.exchange.EasCertificateRequestor

com.asus.emailcommon.REQUEST_CERT

com.android.exchange.SettingsRedirector

android.intent.action.MANAGE_NETWORK_USAGE

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.WRITE_CONTACTS
android.permission.READ_CONTACTS
android.permission.READ_PROFILE
android.permission.WRITE_PROFILE
android.permission.NFC
android.permission.READ_TASK
android.permission.WRITE_TASK
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
com.google.android.gallery3d.permission.GALLERY_PROVIDER
com.asus.email.permission.READ_ATTACHMENT
android.permission.USE_CREDENTIALS
com.asus.email.permission.ACCESS_PROVIDER
android.permission.SYSTEM_ALERT_WINDOW
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher.permission.READ_SETTINGS
com.android.email.permission.ECHO
android.permission.WRITE_SETTINGS
android.permission.READ_SETTINGS

Receivers

com.android.email.service.EmailUpgradeBroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED

com.android.email.service.EmailBroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
android.accounts.LOGIN_ACCOUNTS_CHANGED
android.provider.Telephony.SECRET_CODE

com.android.email.SecurityPolicy$PolicyAdmin

android.app.action.DEVICE_ADMIN_ENABLED

com.android.email.widget.AsusWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.intent.action.LOCALE_CHANGED
com.asus.email.MESSAGE_LIST_DATASET_CHANGED

com.android.email.provider.WidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
com.asus.email.MESSAGE_LIST_DATASET_CHANGED

com.android.email.service.LauncherBadgeUpdateReceiver

com.asus.email.MESSAGE_LIST_DATASET_CHANGED
com.android.email.MESSAGE_LIST_DATASET_CHANGED

com.android.email.service.FeedbackReceiver

com.asus.email.intent.action.USERFEEDBACK

com.android.exchange.service.ExchangeBroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
android.accounts.LOGIN_ACCOUNTS_CHANGED

Services

com.android.email.service.PopImapAuthenticatorService

android.accounts.AccountAuthenticator

com.android.email.service.LegacyPopImapAuthenticatorService

android.accounts.AccountAuthenticator

com.android.email.service.PopImapSyncAdapterService

android.content.SyncAdapter

com.android.email.service.EasAuthenticatorService

android.accounts.AccountAuthenticator

com.android.email.service.LegacyEasAuthenticatorService

android.accounts.AccountAuthenticator

com.android.email.service.EasTestAuthenticatorService

android.accounts.AccountAuthenticator

com.android.email.service.EasAuthenticatorServiceAlternate

android.accounts.AccountAuthenticator

com.android.email.service.LegacyEasAuthenticatorServiceAlternate

android.accounts.AccountAuthenticator

com.android.exchange.EmailSyncAdapterService

android.content.SyncAdapter

com.android.exchange.ContactsSyncAdapterService

android.content.SyncAdapter

com.android.exchange.CalendarSyncAdapterService

android.content.SyncAdapter

com.android.exchange.TaskSyncAdapterService

android.content.SyncAdapter

com.android.email.service.Ready2GoAccountService

com.asus.email.intent.action.R2G_REQUEST_VERIFY_ACCOUNT
com.asus.email.intent.action.R2G_CONTINUE_CREATE_ACCOUNT
com.asus.email.intent.action.R2G_CANCEL_VERIFY_ACCOUNT

com.asus.dummyemail.server.DummyEmailServer

com.android.email.service.DummyEmailServer

Android Permissions

0b9f49c3d8cc0150bc8f5720231f2e35_JaffaCakes118

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.WRITE_PROFILE

android.permission.NFC

android.permission.READ_TASK

android.permission.WRITE_TASK

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

com.google.android.gallery3d.permission.GALLERY_PROVIDER

com.asus.email.permission.READ_ATTACHMENT

android.permission.USE_CREDENTIALS

com.asus.email.permission.ACCESS_PROVIDER

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.email.permission.ECHO

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.asus.email

com.android.email.activity.Welcome

Activities

com.android.email.activity.Welcome

com.android.email.activity.setup.AccountSetupBasics

com.android.email.activity.setup.AccountSetupChooser

com.android.email.activity.setup.AccountSettings

com.android.email.activity.ShortcutPicker

com.android.email.activity.EmailActivity

com.android.email.activity.MessageFileView

com.android.email.activity.MessageCompose

com.android.email.activity.MessageList

com.uservoice.uservoicesdk.activity.PortalActivity

com.android.exchange.EasCertificateRequestor

com.android.exchange.SettingsRedirector

Permissions

Receivers

com.android.email.service.EmailUpgradeBroadcastReceiver

com.android.email.service.EmailBroadcastReceiver

com.android.email.SecurityPolicy$PolicyAdmin

com.android.email.widget.AsusWidgetProvider

com.android.email.provider.WidgetProvider

com.android.email.service.LauncherBadgeUpdateReceiver

com.android.email.service.FeedbackReceiver

com.android.exchange.service.ExchangeBroadcastReceiver

Services

com.android.email.service.PopImapAuthenticatorService

com.android.email.service.LegacyPopImapAuthenticatorService

com.android.email.service.PopImapSyncAdapterService

com.android.email.service.EasAuthenticatorService

com.android.email.service.LegacyEasAuthenticatorService

com.android.email.service.EasTestAuthenticatorService

com.android.email.service.EasAuthenticatorServiceAlternate

com.android.email.service.LegacyEasAuthenticatorServiceAlternate

com.android.exchange.EmailSyncAdapterService

com.android.exchange.ContactsSyncAdapterService

com.android.exchange.CalendarSyncAdapterService

com.android.exchange.TaskSyncAdapterService

com.android.email.service.Ready2GoAccountService

com.asus.dummyemail.server.DummyEmailServer

Android Permissions

0b9f49c3d8cc0150bc8f5720231f2e35_JaffaCakes118