1754bd037e2fe330600cde118678032a_JaffaCakes118

General

Target

1754bd037e2fe330600cde118678032a_JaffaCakes118
Size

22.2MB
MD5

1754bd037e2fe330600cde118678032a
SHA1

d5a73cf5b1c71fc26d31de94699945f4e0294579
SHA256

9205100da4e4079e70d1597d1800b125eaa5c440b380e38292362624a69b4df9
SHA512

d753364a238beef50acfd478cf9a12a6cb452dc56a05338951123d8334bf5a087569d7d33f924f24c1868b56272824e35eb8e7a45627ca861dc770d7568762e0
SSDEEP

393216:GFJqHy/0cNwPjA0bKgfuECqNuEnMJnA5PMTd0fXxe5tg6APBZyw61cbxLZzb1uth:GzqHy/6j5bKgfXNNqA5UTd4A5tOPhHbs

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

1754bd037e2fe330600cde118678032a_JaffaCakes118
.apk android arch:arm

com.ztwireless.xiaoPingGuo

com.vicky.gameplugin.LewanPluginActivity

Activities

com.vicky.gameplugin.LewanPluginActivity

android.intent.action.MAIN
android.intent.action.CHINAMOBILE_OMS_GAME

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.SYSTEM_ALERT_WINDOW
7723box_pjz.apk
.apk android arch:arm

com.upgadata.up7723

com.upgadata.up7723.home.MainActivity

Activities

com.upgadata.up7723.home.MainActivity

android.intent.action.MAIN

Permissions

android.permission.GET_PACKAGE_SIZE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.WRITE_SETTINGS

Receivers

com.upgadata.up7723.apps.BootReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.upgadata.up7723.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

Services

com.upgadata.up7723.http.download.DownloadService

download.service.action

com.umeng.message.UmengService

com.upgadata.up7723.intent.action.START
com.upgadata.up7723.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2
GH.data
.apk android

cn.emagsoftware.gamehall

.GameHallShowcase

Activities

.GameHallShowcase

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CALL_PHONE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CHANGE_NETWORK_STATE
android.permission.RECORD_AUDIO
android.permission.WRITE_SETTINGS

Receivers

.service.ServiceReceiver

android.intent.action.USER_PRESENT

Services

Android Permissions

1754bd037e2fe330600cde118678032a_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

com.ztwireless.xiaoPingGuo

com.vicky.gameplugin.LewanPluginActivity

Activities

com.vicky.gameplugin.LewanPluginActivity

Permissions

com.upgadata.up7723

com.upgadata.up7723.home.MainActivity

Activities

com.upgadata.up7723.home.MainActivity

Permissions

Receivers

com.upgadata.up7723.apps.BootReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

Services

com.upgadata.up7723.http.download.DownloadService

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

cn.emagsoftware.gamehall

.GameHallShowcase

Activities

.GameHallShowcase

Permissions

Receivers

.service.ServiceReceiver

Services

Android Permissions

1754bd037e2fe330600cde118678032a_JaffaCakes118