0c4532a43086b126eb8e8d50c5f45885_JaffaCakes118

General

Target

0c4532a43086b126eb8e8d50c5f45885_JaffaCakes118
Size

21.7MB
MD5

0c4532a43086b126eb8e8d50c5f45885
SHA1

c5966169ad08c5dc8d9663dd2dc9e0f25ff14458
SHA256

a5e0686556d6c85bf7f9bb7c1e00423ffd3e02e0b5f16db90767822d1f2aed64
SHA512

2ff7e8748aec48b577e209c30ab0044b494c3475f5a34ebaf57b44ad11cca60f26c8fead7c9193228f276ead7486e65d031c76bb3b79931389bb9f7b24afe905
SSDEEP

393216:WlQTqpOgEf6rZayqTT9QRL1uWjk6Hmc4CdpxIMM4Tj9Zs3xDDgmO1fm4LKoa:4ULNfnyqTT9QRQWxHDIf4/9Zs3hj2a

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

0c4532a43086b126eb8e8d50c5f45885_JaffaCakes118
.apk android arch:arm arch:x86

com.imugou.android

com.imugou.android.AdActivity

Activities

com.imugou.android.AdActivity

android.intent.action.MAIN

com.imugou.android.MainActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.umeng.qq.tencent.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.VIBRATE
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.RECORD_AUDIO
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_FINE_LOCATION
android.permission.GET_TASKS
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
com.android.launcher.permission.READ_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.SYSTEM_ALERT_WINDOW
getui.permission.GetuiService.com.imugou.android

Receivers

com.hyphenate.chat.EMMonitorReceiver

android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

Services

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

Android Permissions

0c4532a43086b126eb8e8d50c5f45885_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

com.android.launcher.permission.READ_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.SYSTEM_ALERT_WINDOW

getui.permission.GetuiService.com.imugou.android

Sharing

General

Malware Config

Signatures

Files

com.imugou.android

com.imugou.android.AdActivity

Activities

com.imugou.android.AdActivity

com.imugou.android.MainActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.umeng.qq.tencent.AuthActivity

Permissions

Receivers

com.hyphenate.chat.EMMonitorReceiver

com.igexin.sdk.PushReceiver

Services

com.igexin.sdk.PushService

Android Permissions

0c4532a43086b126eb8e8d50c5f45885_JaffaCakes118