13a0f22b7a2a25064227f68cd1d272b8_JaffaCakes118

General

Target

13a0f22b7a2a25064227f68cd1d272b8_JaffaCakes118
Size

6.0MB
MD5

13a0f22b7a2a25064227f68cd1d272b8
SHA1

efe81e3fc7551b402f0e1702c86554472cffcd9a
SHA256

81f92b097ef8947037600f4858568efbc2b4f10740e2500359fa5bfa2b0d38f0
SHA512

f8b360eb873a0da90fa5527e261a04d4e5a0da4fa82fe2cec00ba85bc6d4b0db9749b2ce927066d5bcfff0b2f3fa7eeb5276e7a8ee6f9ec2a5bd632cc190a7e0
SSDEEP

196608:AezlPKDxqmXycH3YNkeNMMiPpragDgLmhdoKWA0:Fz4J3ReZ+RJgLC6KWA0

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

13a0f22b7a2a25064227f68cd1d272b8_JaffaCakes118
.apk android arch:arm

com.yelong.safeperiod

com.yelong.safeperiod.module.common.activities.SplashDelegateActivity

Activities

com.yelong.safeperiod.module.common.activities.SplashDelegateActivity

android.intent.action.MAIN

com.yelong.safeperiod.module.forum.activities.PostDetailActivity

android.intent.action.VIEW

com.yelong.safeperiod.module.articles.activities.ArticleDetailActivity

android.intent.action.VIEW

com.yelong.safeperiod.module.common.activities.WebActivity

android.intent.action.VIEW

com.yelong.safeperiod.module.articles.activities.ArticleCategoryActivity

android.intent.action.VIEW

com.mob.tools.MobUIShell

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

cn.sharesdk.tencent.qq.ReceiveActivity

android.intent.action.VIEW

com.alibaba.baichuan.android.trade.ui.AlibcWebViewActivity

COM_TAOBAO_TAE_SDK_TRADE_WEB_VIEW_ACTION

com.alibaba.baichuan.android.trade.ui.AlibcBackActivity

android.intent.action.VIEW

com.alibaba.alibclinkpartner.ui.ALPEntranceActivity

com.alibaba.intent.action.GETWAY

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.CAMERA
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_COARSE_LOCATION
baidu.push.permission.WRITE_PUSHINFOPROVIDER.com.yelong.safeperiod
android.permission.GET_TASKS
android.permission.CHANGE_WIFI_STATE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.READ_LOGS
android.permission.RECORD_AUDIO
android.permission.RUN_INSTRUMENTATION
android.permission.BLUETOOTH
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_SETTINGS
android.permission.CHANGE_CONFIGURATION

Receivers

com.yelong.safeperiod.services.BaiduPushReceiver

com.baidu.android.pushservice.action.MESSAGE
com.baidu.android.pushservice.action.RECEIVE
com.baidu.android.pushservice.action.notification.CLICK

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK
android.intent.action.MEDIA_MOUNTED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

Services

com.didi.virtualapk.delegate.RemoteService

com.yelong.safeperiod.intent.ACTION_DAEMON_SERVICE

com.baidu.android.pushservice.PushService

com.baidu.android.pushservice.action.PUSH_SERVICE

anetwork.channel.aidl.NetworkService

anetwork.channel.aidl.IRemoteNetworkGetter

mtopsdk.xstate.XStateService

mtopsdk.xstate.aidl.IXState

Android Permissions

13a0f22b7a2a25064227f68cd1d272b8_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CAMERA

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_COARSE_LOCATION

baidu.push.permission.WRITE_PUSHINFOPROVIDER.com.yelong.safeperiod

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.READ_LOGS

android.permission.RECORD_AUDIO

android.permission.RUN_INSTRUMENTATION

android.permission.BLUETOOTH

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_SETTINGS

android.permission.CHANGE_CONFIGURATION

Sharing

General

Malware Config

Signatures

Files

com.yelong.safeperiod

com.yelong.safeperiod.module.common.activities.SplashDelegateActivity

Activities

com.yelong.safeperiod.module.common.activities.SplashDelegateActivity

com.yelong.safeperiod.module.forum.activities.PostDetailActivity

com.yelong.safeperiod.module.articles.activities.ArticleDetailActivity

com.yelong.safeperiod.module.common.activities.WebActivity

com.yelong.safeperiod.module.articles.activities.ArticleCategoryActivity

com.mob.tools.MobUIShell

cn.sharesdk.tencent.qq.ReceiveActivity

com.alibaba.baichuan.android.trade.ui.AlibcWebViewActivity

com.alibaba.baichuan.android.trade.ui.AlibcBackActivity

com.alibaba.alibclinkpartner.ui.ALPEntranceActivity

Permissions

Receivers

com.yelong.safeperiod.services.BaiduPushReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

Services

com.didi.virtualapk.delegate.RemoteService

com.baidu.android.pushservice.PushService

anetwork.channel.aidl.NetworkService

mtopsdk.xstate.XStateService

Android Permissions

13a0f22b7a2a25064227f68cd1d272b8_JaffaCakes118