128cbd92f645238830fc562840c4e3b1_JaffaCakes118

General

Target

128cbd92f645238830fc562840c4e3b1_JaffaCakes118
Size

12.3MB
MD5

128cbd92f645238830fc562840c4e3b1
SHA1

bf4b9ab2ded844723471fe911d73d89eecd4f479
SHA256

0f432c0a37a1522d6cca8bf288d0b68d7723c5c3b24be5003ed42d96c3e49ca8
SHA512

dc42c715c1d841f331a415f6caf01c7bfb3738b0a1062de15862cacd1637ae2464b9fabad9e81fb3e5267854bd53c0862781b1d2cc6868ce70b578099a76e7df
SSDEEP

196608:XU7RmZ313yH9cDI2LpWKiI4R5SiIswfDOeyLp+a81RncAPUhPqX:EE3h4epX9pfVkAa8B6U

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

128cbd92f645238830fc562840c4e3b1_JaffaCakes118
.apk android arch:arm arch:mips arch:x86

com.shangpin

com.shangpin.SplashActivity

Activities

com.shangpin.SplashActivity

android.intent.action.MAIN

com.shangpin.activity.ActivityMain

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.shangpin.wxapi.WXEntryActivity

android.intent.action.VIEW

com.alipay.android.app.pay.MiniLaucherActivity

com.alipay.mobilepay.android

com.alipay.android.app.ui.quickpay.window.MiniPayActivity

android.intent.action.MAIN

com.alipay.android.app.ui.quickpay.window.MiniWebActivity

android.intent.action.MAIN

.zxing.CaptureActivity

com.shangpin.zxing.SCAN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

.zxing.encode.EncodeActivity

com.shangpin.zxing.ENCODE
android.intent.action.SEND
android.intent.action.SEND

.zxing.book.SearchBookContentsActivity

com.shangpin.zxing.SEARCH_BOOK_CONTENTS

.zxing.share.ShareActivity

com.shangpin.zxing.SHARE

com.baidu.voicerecognition.android.ui.BaiduASRDigitalDialog

com.baidu.action.RECOGNIZE_SPEECH

Permissions

android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.FLASHLIGHT
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.READ_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
com.android.browser.permission.READ_HISTORY_BOOKMARKS
com.alipay.mobile.command.trigger.permission
com.ut.permission.DEVICE_STATE

Receivers

com.shangpin.broadcast.LauchAppBroadcastReceiver

com.aolai.LAUNCH_SHANGPIN
android.intent.action.BOOT_COMPLETED

Services

com.alipay.android.app.MspService

android.intent.action.MAIN

com.shangpin.service.ShangPinService

com.shangpin.action.START_SERVICE
com.shangpin.action.STOP_SERVICE

com.baidu.location.f

com.baidu.location.service_v2.2
UPPayPluginEx.apk
.apk android arch:arm arch:mips arch:x86

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

android.intent.action.Run
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
com.tencent.mtt.extension.Player
android.webkit.permission.PLUGIN

Services

com.UCMobile.PayPlugin.PayPluginService

android.webkit.PLUGIN

Android Permissions

128cbd92f645238830fc562840c4e3b1_JaffaCakes118

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_LOGS

android.permission.READ_PHONE_STATE

android.permission.READ_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.alipay.mobile.command.trigger.permission

com.ut.permission.DEVICE_STATE

Sharing

General

Malware Config

Signatures

Files

com.shangpin

com.shangpin.SplashActivity

Activities

com.shangpin.SplashActivity

com.shangpin.activity.ActivityMain

com.tencent.tauth.AuthActivity

com.shangpin.wxapi.WXEntryActivity

com.alipay.android.app.pay.MiniLaucherActivity

com.alipay.android.app.ui.quickpay.window.MiniPayActivity

com.alipay.android.app.ui.quickpay.window.MiniWebActivity

.zxing.CaptureActivity

.zxing.encode.EncodeActivity

.zxing.book.SearchBookContentsActivity

.zxing.share.ShareActivity

com.baidu.voicerecognition.android.ui.BaiduASRDigitalDialog

Permissions

Receivers

com.shangpin.broadcast.LauchAppBroadcastReceiver

Services

com.alipay.android.app.MspService

com.shangpin.service.ShangPinService

com.baidu.location.f

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

Permissions

Services

com.UCMobile.PayPlugin.PayPluginService

Android Permissions

128cbd92f645238830fc562840c4e3b1_JaffaCakes118