Overview

overview

8

Static

static

8

184595fbd6...18.apk

android-9-x86

184595fbd6...18.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    184595fbd6f24c48f8f62af580da50ee_JaffaCakes118

  • Size

    11.8MB

  • MD5

    184595fbd6f24c48f8f62af580da50ee

  • SHA1

    adf5685eb2984a7c6f6392f4caff433df5f13586

  • SHA256

    de093a48d4b32ad4ee4a474e4f3210081de84fd99a02eed9066e745fb340f887

  • SHA512

    f64af64e6130f84115a01c274837f91be067fd47651ae6b0f45862fa706c33cca1ac38e7f858e065d13af1ad4c427bf2421375022c0f68aa2c32229be7bd99b0

  • SSDEEP

    196608:vYzaf0mCpgFGaH/1BlzeR+WTaNlbwlCuRuc0JsNHFyCcVZaWx5ChWu4lWmjXUwB4:AzuIMB1aAI4c0JwF4z6hWXYQkwB5N/7I

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 20 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 20 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 6 IoCs

Files

  • 184595fbd6f24c48f8f62af580da50ee_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.dongguaren.run

    com.dongguaren.run.Activity.WelcomeActivity.WelcomeActivity


Android Permissions

184595fbd6f24c48f8f62af580da50ee_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_COARSE_LOCATION

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE