0ffd4124786d4eef3eb4611b217d19a8_JaffaCakes118

General

Target
0ffd4124786d4eef3eb4611b217d19a8_JaffaCakes118
Size 29.2MB
Sample240503-jc424saa4x
SHA256 d4a068fb20501d18a5d55c7ce5aee30e4130e380cba8c9fc0e969d701f46bcbb
MD5 0ffd4124786d4eef3eb4611b217d19a8
SHA1 a7af2714c43fa52a3634cfcd8b120d3e9567110e
SHA512 b883b1dd9adb4e1ca84c9a0cf6c81c167f9d290ee7047d155afaf1306a7d0482f53d6c1c183d578f234f70cc35eed44e6079ae2327c58ce285a7cb7ec32833dd
SSDEEP 786432:96Q07tmga9twC3Ct//up/WUt3FkmM+oe2n:96Q6totwC3Ct//+/9rkmMBn
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

0ffd4124786d4eef3eb4611b217d19a8_JaffaCakes118

.apk 29.2MB

0ffd4124786d4eef3eb4611b217d19a8_JaffaCakes118

SHA256 d4a068fb20501d18a5d55c7ce5aee30e4130e380cba8c9fc0e969d701f46bcbb
MD5 0ffd4124786d4eef3eb4611b217d19a8
SHA1 a7af2714c43fa52a3634cfcd8b120d3e9567110e
SHA512 b883b1dd9adb4e1ca84c9a0cf6c81c167f9d290ee7047d155afaf1306a7d0482f53d6c1c183d578f234f70cc35eed44e6079ae2327c58ce285a7cb7ec32833dd
SSDEEP 786432:96Q07tmga9twC3Ct//up/WUt3FkmM+oe2n:96Q6totwC3Ct//+/9rkmMBn
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.jiaming.ko

com.jiaming.bdc.EntryActivity

android.intent.action.VIEW android.intent.action.oppopush android.intent.action.SEND android.intent.action.MAIN

io.dcloud.PandoraEntryActivity

android.intent.action.VIEW

com.jiaming.ko.wxapi.WXPayEntryActivity

com.jiaming.ko.wxapi.WXEntryActivity

android.intent.action.VIEW

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.alipay.sdk.app.AlipayResultActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.huawei.android.hms.agent.common.HMSAgentActivity

com.huawei.hms.activity.BridgeActivity

com.vivo.push.sdk.LinkProxyClientActivity

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.appstream.StreamAppMainActivity

android.intent.action.MAIN android.intent.action.VIEW

io.dcloud.WebAppActivity

io.dcloud.multiprocess.activity.WebAppActivity1

io.dcloud.appstream.OpenStreamAppTransferActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.sina.weibo.sdk.web.WeiboSdkWebActivity

com.sina.weibo.sdk.share.WbShareResultActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.share.WbShareToStoryActivity

com.android.billingclient.api.ProxyBillingActivity

io.dcloud.feature.unipush.GTNotificationReceiver

android.intent.action.BOOT_COMPLETED com.jiaming.ko.__CREATE_NOTIFICATION com.jiaming.ko.__REMOVE_NOTIFICATION com.jiaming.ko.__CLEAR_NOTIFICATION com.jiaming.ko.__CLILK_NOTIFICATION

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT com.igexin.sdk.action.refreshls android.intent.action.MEDIA_MOUNTED android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

com.meizu.cloud.pushsdk.SystemReceiver

com.meizu.cloud.pushservice.action.PUSH_SERVICE_START

com.igexin.sdk.FlymePushReceiver

com.meizu.flyme.push.intent.MESSAGE com.meizu.flyme.push.intent.REGISTER.FEEDBACK com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK com.meizu.c2dm.intent.REGISTRATION com.meizu.c2dm.intent.RECEIVE

com.igexin.sdk.MiuiPushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.MESSAGE_ARRIVED com.xiaomi.mipush.ERROR

com.igexin.sdk.HmsPushReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE com.huawei.intent.action.PUSH_DELAY_NOTIFY

com.igexin.sdk.HmsPushSubReceiver

com.huawei.android.push.intent.CLICK com.huawei.intent.action.PUSH_STATE

com.igexin.sdk.VivoPushMessageReceiver

com.vivo.pushclient.action.RECEIVE

io.dcloud.common.adapter.io.PushReceiver

dcloud.push.broswer

io.dcloud.common.adapter.io.DownloadReceiver

android.intent.action.DOWNLOAD_COMPLETE android.intent.action.PACKAGE_ADDED

com.taobao.weex.WXGlobalEventReceiver

Android Permissions

0ffd4124786d4eef3eb4611b217d19a8_JaffaCakes118

Permissions

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

getui.permission.GetuiService.com.jiaming.ko

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

com.jiaming.ko.permission.MIPUSH_RECEIVE

com.meizu.flyme.push.permission.RECEIVE

com.meizu.c2dm.permission.RECEIVE

com.jiaming.ko.push.permission.MESSAGE

com.jiaming.ko.permission.C2D_MESSAGE

com.jiaming.ko.permission.PROCESS_PUSH_MSG

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.asus.msa.SupplementaryDID.ACCESS

com.android.vending.BILLING

Sharing

General

Malware Config

Signatures

File Explorer

0ffd4124786d4eef3eb4611b217d19a8_JaffaCakes118

com.jiaming.bdc.EntryActivity

io.dcloud.PandoraEntryActivity

com.jiaming.ko.wxapi.WXPayEntryActivity

com.jiaming.ko.wxapi.WXEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.alipay.sdk.app.AlipayResultActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.huawei.android.hms.agent.common.HMSAgentActivity

com.huawei.hms.activity.BridgeActivity

com.vivo.push.sdk.LinkProxyClientActivity

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.appstream.StreamAppMainActivity

io.dcloud.WebAppActivity

io.dcloud.multiprocess.activity.WebAppActivity1

io.dcloud.appstream.OpenStreamAppTransferActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.sina.weibo.sdk.web.WeiboSdkWebActivity

com.sina.weibo.sdk.share.WbShareResultActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.share.WbShareToStoryActivity

com.android.billingclient.api.ProxyBillingActivity

io.dcloud.feature.aps.ApsActionService

io.dcloud.feature.unipush.GTNormalIntentService

com.igexin.sdk.PushService

com.meizu.cloud.pushsdk.NotificationService

com.xiaomi.mipush.sdk.PushMessageHandler

com.xiaomi.mipush.sdk.MessageHandleService

com.igexin.sdk.OppoPushService

com.huawei.hms.support.api.push.service.HmsMsgService

com.vivo.push.sdk.service.CommandClientService

io.dcloud.common.adapter.io.MiniServerService

io.dcloud.streamdownload.DownloadService

io.dcloud.appstream.service.DaemonService

io.dcloud.appstream.service.ProtectService

io.dcloud.multiprocess.service.MultiProcessService

io.dcloud.feature.unipush.GTNotificationReceiver

com.igexin.sdk.PushReceiver

com.meizu.cloud.pushsdk.SystemReceiver

com.igexin.sdk.FlymePushReceiver

com.igexin.sdk.MiuiPushReceiver

com.igexin.sdk.HmsPushReceiver

com.igexin.sdk.HmsPushSubReceiver

com.igexin.sdk.VivoPushMessageReceiver

io.dcloud.common.adapter.io.PushReceiver

io.dcloud.common.adapter.io.DownloadReceiver

com.taobao.weex.WXGlobalEventReceiver

io.dcloud.common.util.DCloud_FileProvider

com.huawei.hms.update.provider.UpdateProvider

Android Permissions

0ffd4124786d4eef3eb4611b217d19a8_JaffaCakes118