148d757affc1034d2ff95888856973aa_JaffaCakes118

General

Target

148d757affc1034d2ff95888856973aa_JaffaCakes118
Size

12.1MB
MD5

148d757affc1034d2ff95888856973aa
SHA1

782c9638ee560e9841a977441e9c52d520cbd4b4
SHA256

9d9a9b4ffe81f7f322e30946f704c2c57e5b843735c0e94695518b898c059d09
SHA512

82acbb84c16076cd098b37920ef76f1bc270f64842dca059a5b1a913011fe0fb61bbc2cd031ef0838a4332a76294d0975ba31364e91b8adb6f7d38ae4b1ce3f8
SSDEEP

196608:5CYovNm1JXdf82Zgcy+RxOf10hxufZhOAZILSrU5/r/cy7GYZg7MjBstgvtmSV8M:5XoYrZ82ZymJTkGarUx57TZoMjKaDeM

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD
Required by text services to bind with the system. Allows apps to handle user text interaction.	android.permission.BIND_TEXT_SERVICE

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

148d757affc1034d2ff95888856973aa_JaffaCakes118
.apk android arch:x86

com.android.inputmethod.latin

.setup.SetupActivity

Activities

.setup.SetupActivity

android.intent.action.MAIN

.setup.SetupWizardActivity

android.intent.action.MAIN

.settings.SettingsActivity

android.intent.action.MAIN

.spellcheck.SpellCheckerSettingsActivity

android.intent.action.MAIN

.settings.DebugSettingsActivity

android.intent.action.MAIN

com.android.inputmethod.dictionarypack.DictionarySettingsActivity

android.intent.action.MAIN

com.android.inputmethod.dictionarypack.DownloadOverMeteredDialog

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.GET_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.READ_PROFILE
android.permission.READ_USER_DICTIONARY
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_USER_DICTIONARY

Receivers

.setup.LauncherIconVisibilityManager

android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_INITIALIZE

SuggestionSpanPickedNotificationReceiver

android.text.style.SUGGESTION_PICKED

.personalization.DictionaryDecayBroadcastReciever

com.android.inputmethod.latin.personalization.DICT_DECAY

.DictionaryPackInstallBroadcastReceiver

com.android.inputmethod.dictionarypack.aosp.UNKNOWN_CLIENT

com.android.inputmethod.dictionarypack.EventHandler

android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DATE_CHANGED
com.android.inputmethod.dictionarypack.aosp.UPDATE_NOW

Services

LatinIME

android.view.InputMethod

.spellcheck.AndroidSpellCheckerService

android.service.textservice.SpellCheckerService

Android Permissions

148d757affc1034d2ff95888856973aa_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.GET_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.READ_USER_DICTIONARY

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_USER_DICTIONARY

Sharing

General

Malware Config

Signatures

Files

com.android.inputmethod.latin

.setup.SetupActivity

Activities

.setup.SetupActivity

.setup.SetupWizardActivity

.settings.SettingsActivity

.spellcheck.SpellCheckerSettingsActivity

.settings.DebugSettingsActivity

com.android.inputmethod.dictionarypack.DictionarySettingsActivity

com.android.inputmethod.dictionarypack.DownloadOverMeteredDialog

Permissions

Receivers

.setup.LauncherIconVisibilityManager

SuggestionSpanPickedNotificationReceiver

.personalization.DictionaryDecayBroadcastReciever

.DictionaryPackInstallBroadcastReceiver

com.android.inputmethod.dictionarypack.EventHandler

Services

LatinIME

.spellcheck.AndroidSpellCheckerService

Android Permissions

148d757affc1034d2ff95888856973aa_JaffaCakes118