joker | 1432f13c0215b7974a935e32b0c6c40e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
1432f13c0215b7974a935e32b0c6c40e_JaffaCakes118
Size 7.1MB
Sample240504-ydtp4abh25
SHA256 00246372aec3d68e060bb2596ce28717e1108ff664b96ab3f8a526c093e2ff86
MD5 1432f13c0215b7974a935e32b0c6c40e
SHA1 62d2fe12da304c8d9a4036410165abbb5485645c
SHA512 0702703fcf474fe263ad481c184ed6f0c1fea04b4835f10bf9c36c05559ab07394440b38548aa45de16a4256537000c88d9baf0c1b810dd3f581190a33361044
SSDEEP 196608:2IuRriC65Ct5rLjAO/9E9ZM+YOP+Rp00yk1STcyHlNUeVEOH0RdeQsbB8l:Xu835C7PZlELM+YOP+Rp00ye0HlNUeDI
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

joker

Malware Config

Extracted

Family

joker

http://www.appshare.cn/

Signatures

Joker family
joker

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS

File Explorer

1432f13c0215b7974a935e32b0c6c40e_JaffaCakes118

.apk 7.1MB
CommonPlugin-4.3.apk

.apk 512KB
FrameworkPlugin-3.3.apk

.apk 18KB
WelcomePlugin-2.9.apk

.apk 40KB
__xadsdk__remote__final__.jar

.apk 77KB

1432f13c0215b7974a935e32b0c6c40e_JaffaCakes118

SHA256 00246372aec3d68e060bb2596ce28717e1108ff664b96ab3f8a526c093e2ff86
MD5 1432f13c0215b7974a935e32b0c6c40e
SHA1 62d2fe12da304c8d9a4036410165abbb5485645c
SHA512 0702703fcf474fe263ad481c184ed6f0c1fea04b4835f10bf9c36c05559ab07394440b38548aa45de16a4256537000c88d9baf0c1b810dd3f581190a33361044
SSDEEP 196608:2IuRriC65Ct5rLjAO/9E9ZM+YOP+Rp00yk1STcyHlNUeVEOH0RdeQsbB8l:Xu835C7PZlELM+YOP+Rp00ye0HlNUeDI
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.appshare.android.istory

com.appshare.android.istory.WelcomeActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.appshare.android.istory.CateGroupActivity

com.appshare.android.istory.IndexGroupActivity

com.appshare.android.istory.PocketGroupActivity

com.appshare.android.istory.MarkAgeActivity

com.appshare.android.istory.UserInfoActivity

com.appshare.android.istory.BabyRegisterActivity

com.appshare.android.istory.CommentActivity

com.appshare.android.istory.FavoriteActivity

com.appshare.android.istory.ReadActivity

com.appshare.android.istory.CollectListActivity

com.appshare.android.istory.CateActivity

com.appshare.android.istory.SearchActivity

com.appshare.android.istory.ListSiftActivity

com.appshare.android.istory.LoginUserActivity

com.appshare.android.istory.MarketActivity

com.appshare.android.istory.MoreActivity

com.appshare.android.istory.MyCommendListActivity

com.appshare.android.istory.PersonalActivity

com.appshare.android.istory.PersonalSettingActivity

com.appshare.android.istory.RegUserActivity

com.appshare.android.istory.RichActivity

com.appshare.android.istory.read.ReadActivity

com.appshare.android.istory.StoryDetailActivity

com.appshare.android.istory.StoryListActivity

com.appshare.android.istory.WebActivity

com.appshare.android.istory.Web2Activity

com.appshare.android.istory.UpdateInfoActivity

com.appshare.android.istory.AppWallActivity

com.appshare.android.guestfeedback.GuestFeedbackActivity

com.appshare.android.istory.MainActivity

com.appshare.android.istory.controls.UpdateDilaogActivity

com.appshare.android.common.util.regulard.AppAgentTmpActivity

android.intent.action.VIEW

com.alimama.mobile.sdk.shell.MMUDetail

com.alimama.mobile.sdk.shell.MMUBrowserWebView

com.baidu.mobads.AppActivity

Android Permissions

1432f13c0215b7974a935e32b0c6c40e_JaffaCakes118

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.GET_TASKS

android.permission.CHANGE_CONFIGURATION

com.android.launcher.permission.READ_SETTINGS

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REORDER_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_LOGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.PROCESS_OUTGOING_CALLS

android.permission.RECORD_AUDIO

android.permission.CHANGE_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

1432f13c0215b7974a935e32b0c6c40e_JaffaCakes118

com.appshare.android.istory.WelcomeActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.appshare.android.istory.CateGroupActivity

com.appshare.android.istory.IndexGroupActivity

com.appshare.android.istory.PocketGroupActivity

com.appshare.android.istory.MarkAgeActivity

com.appshare.android.istory.UserInfoActivity

com.appshare.android.istory.BabyRegisterActivity

com.appshare.android.istory.CommentActivity

com.appshare.android.istory.FavoriteActivity

com.appshare.android.istory.ReadActivity

com.appshare.android.istory.CollectListActivity

com.appshare.android.istory.CateActivity

com.appshare.android.istory.SearchActivity

com.appshare.android.istory.ListSiftActivity

com.appshare.android.istory.LoginUserActivity

com.appshare.android.istory.MarketActivity

com.appshare.android.istory.MoreActivity

com.appshare.android.istory.MyCommendListActivity

com.appshare.android.istory.PersonalActivity

com.appshare.android.istory.PersonalSettingActivity

com.appshare.android.istory.RegUserActivity

com.appshare.android.istory.RichActivity

com.appshare.android.istory.read.ReadActivity

com.appshare.android.istory.StoryDetailActivity

com.appshare.android.istory.StoryListActivity

com.appshare.android.istory.WebActivity

com.appshare.android.istory.Web2Activity

com.appshare.android.istory.UpdateInfoActivity

com.appshare.android.istory.AppWallActivity

com.appshare.android.guestfeedback.GuestFeedbackActivity

com.appshare.android.istory.MainActivity

com.appshare.android.istory.controls.UpdateDilaogActivity

com.appshare.android.common.util.regulard.AppAgentTmpActivity

com.alimama.mobile.sdk.shell.MMUDetail

com.alimama.mobile.sdk.shell.MMUBrowserWebView

com.baidu.mobads.AppActivity

com.appshare.android.utils.regulard.RegulardCheckService

com.appshare.android.utils.alarm.NotificationAlarmService

com.appshare.android.istory.utils.UpdateApkService

com.alimama.mobile.sdk.shell.DownloadingService

com.umeng.message.UmengService

com.umeng.message.UmengIntentService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.message.UmengDownloadResourceService

com.umeng.message.local.UmengLocalNotificationService

com.umeng.message.NotificationProxyBroadcastReceiver

com.umeng.message.SystemReceiver

com.umeng.message.MessageReceiver

com.umeng.message.ElectionReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengMessageBootReceiver

CommonPlugin-4.3.apk

com.taobao.test.MainActivity

FrameworkPlugin-3.3.apk

WelcomePlugin-2.9.apk

__xadsdk__remote__final__.jar

Android Permissions

1432f13c0215b7974a935e32b0c6c40e_JaffaCakes118

xadsdkremotefinal.jar