10fc18e77fac93a39955321a623c14b7_JaffaCakes118

General

Target

10fc18e77fac93a39955321a623c14b7_JaffaCakes118
Size

30.4MB
MD5

10fc18e77fac93a39955321a623c14b7
SHA1

864fc3cee71e00b267f90b1a5b3dc16cc992b5c1
SHA256

5727ceeb90b19b0023914a20bdc4074adaffcf4fe966ed24e82514db4e5bf8df
SHA512

5c1ec9c6e57a9dea1bef5576066cbbbe593fcfcad38ce971c9752cec32a2799965deaed550e96842b26345cd4c428ff0a86d082f0406eaad11687c738e9adc90
SSDEEP

786432:pxOnJHmm0xcltqhlEUUHnBp6XNG9doifsuuaExpU:/emJxA84bBpqNG9doiIHbU

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

10fc18e77fac93a39955321a623c14b7_JaffaCakes118
.apk android arch:arm arch:x86

com.youdao.note

.activity2.SplashActivity

Activities

.activity2.ShortcutEntryActivity

com.youdao.shortcut.action

.activity2.NotesListActivity

com.youdao.note.action.notebook_group

.activity2.SearchActivity

android.intent.action.SEARCH

.activity2.ActionSendActivity

android.intent.action.SEND
android.intent.action.SEND_MULTIPLE

.activity2.SplashActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.VIBRATE
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.READ_CONTACTS
android.permission.RECEIVE_BOOT_COMPLETED
andorid.permission.CHANGE_CONFIGURATION
android.permission.GET_TASKS
android.permission.REORDER_TASKS
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.EXPAND_STATUS_BAR
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
com.android.permission.SEND_NETEASE_POMELO_PUSH_MESSAGE_SERVICE

Receivers

.provider.YNoteWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

.service.imagetransit.BootupReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_EJECT

.broadcast.TodoReceiver

android.intent.action.NEW_OUTGOING_CALL
android.intent.action.PHONE_STATE

.broadcast.NoteSaveReceiver

com.youdao.note.action.ACTION_SAVE_NOTE_COMPLETED

.broadcast.WxAppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

.yxapi.AppRegister

im.yixin.sdk.api.Intent.ACTION_REFRESH_YXAPP

.openapi.YNoteAPIBroadcastReceiver

com.youdao.note.openapi.Intent.ACTION_REGISTER
com.youdao.note.openapi.Intent.ACTION_UNREGISTER

.broadcast.ConnectivityChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.STATE_CHANGE

.broadcast.YNoteInstalledReceiver

com.youdao.note.Intent.ACTION_YNOTE_INSTALLED

.broadcast.DownloadManagerReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.youdao.note.openapi.PackageAddedReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.youdao.note.hy.push.PushMsgReceiver

note.youdao.com_G3

com.netease.pushservice.receiver.PushServiceSystemReceiver

note.youdao.com_S3

com.netease.pushservice.receiver.PushServiceReconnectReceiver

com.netease.pomelo.pushservice.reconnect_S3

com.netease.pushservice.receiver.PushServiceBootReceiver

android.intent.action.BOOT_COMPLETED

com.netease.pushservice.receiver.PushServicePackageReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.youdao.note.broadcast.DeviceRequestReceiver

com.youdao.note.action.ACTION_REQUEST_OFFLINE
com.youdao.note.action.ACTION_REQUEST_DELETE

Services

.service.NotificationUpdateService

com.youdao.note.action.NOTIFICATION_CENTER

.service.SyncService

com.youdao.note.service.sync
com.youdao.note.service.sync_check

.export.service.YNoteOpenService

com.youdao.note.export.service.ynoteopenservice

com.netease.pushservice.core.PushMessageService_V2

netease.pomelo.push.messageservice_V2

Android Permissions

10fc18e77fac93a39955321a623c14b7_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.RECEIVE_BOOT_COMPLETED

andorid.permission.CHANGE_CONFIGURATION

android.permission.GET_TASKS

android.permission.REORDER_TASKS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.EXPAND_STATUS_BAR

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

com.android.permission.SEND_NETEASE_POMELO_PUSH_MESSAGE_SERVICE

Sharing

General

Malware Config

Signatures

Files

com.youdao.note

.activity2.SplashActivity

Activities

.activity2.ShortcutEntryActivity

.activity2.NotesListActivity

.activity2.SearchActivity

.activity2.ActionSendActivity

.activity2.SplashActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

.provider.YNoteWidgetProvider

.service.imagetransit.BootupReceiver

.broadcast.TodoReceiver

.broadcast.NoteSaveReceiver

.broadcast.WxAppRegister

.yxapi.AppRegister

.openapi.YNoteAPIBroadcastReceiver

.broadcast.ConnectivityChangeReceiver

.broadcast.YNoteInstalledReceiver

.broadcast.DownloadManagerReceiver

com.youdao.note.openapi.PackageAddedReceiver

com.youdao.note.hy.push.PushMsgReceiver

com.netease.pushservice.receiver.PushServiceSystemReceiver

com.netease.pushservice.receiver.PushServiceReconnectReceiver

com.netease.pushservice.receiver.PushServiceBootReceiver

com.netease.pushservice.receiver.PushServicePackageReceiver

com.youdao.note.broadcast.DeviceRequestReceiver

Services

.service.NotificationUpdateService

.service.SyncService

.export.service.YNoteOpenService

com.netease.pushservice.core.PushMessageService_V2

Android Permissions

10fc18e77fac93a39955321a623c14b7_JaffaCakes118