joker | 1a63187adc441eb0608eb9b0f6c7b34e_JaffaCakes118

General

Target

1a63187adc441eb0608eb9b0f6c7b34e_JaffaCakes118
Size

30.0MB
MD5

1a63187adc441eb0608eb9b0f6c7b34e
SHA1

96229add0a9252f52db7ade37847b5bca7c5446d
SHA256

d4c46f417b1151f8f8cbb49b6d0a65a4a627eda939c63b2dc7462bad4b24dbf2
SHA512

0185d4cf2204f90b4da41fcd5d39f4c369e53f91b093068db1e09e272cb2fe7bb03819a767c33f91909ff1092371807b95762550f52c9dc1186603403dd625d1
SSDEEP

393216:0MgbLVL5o2Gt3csGXNx46nVg24xPGJ9khfjHuTwBTUYhoiN9gmF4eCgkiJ5SiQG3:0Lb6iXj42GPMwfjkRxUF4hgJMwOTdW

Score

10^/10

joker

Malware Config

Signatures

Joker family
joker

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

1a63187adc441eb0608eb9b0f6c7b34e_JaffaCakes118
.apk android arch:arm arch:x86

com.example.herocoming

io.dcloud.PandoraEntry

Activities

io.dcloud.PandoraEntry

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.example.herocoming.wxapi.WXEntryActivity

android.intent.action.VIEW

io.dcloud.PandoraEntryActivity

android.intent.action.VIEW

io.dcloud.appstream.StreamAppMainActivity

android.intent.action.MAIN
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.GET_TASKS
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CAMERA
android.permission.VIBRATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FLASHLIGHT
android.permission.WRITE_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CALL_PHONE
getui.permission.GetuiService.com.example.herocoming
android.permission.ACCESS_MOCK_LOCATION
android.permission.CHANGE_NETWORK_STATE
android.permission.RECEIVE_USER_PRESENT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher2.permission.READ_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.yulong.android.launcherL.permission.READ_SETTINGS
com.meizu.flyme.launcher.permission.READ_SETTINGS
com.bbk.launcher2.permission.READ_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.qiku.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.zte.mifavor.launcher.permission.READ_SETTINGS
com.lenovo.launcher.permission.READ_SETTINGS
com.google.android.launcher.permission.READ_SETTINGS
com.yulong.android.launcher3.READ_SETTINGS
org.adw.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.READ_SETTINGS
net.qihoo.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adw.launcher_donut.permission.READ_SETTINGS
com.huawei.launcher3.permission.READ_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.sec.android.app.twlauncher.settings.READ_SETTINGS
com.tencent.qqlauncher.permission.READ_SETTINGS
com.huawei.launcher2.permission.READ_SETTINGS
com.ebproductions.android.launcher.permission.READ_SETTINGS
com.nd.android.launcher.permission.READ_SETTINGS
com.yulong.android.launcher.permission.READ_SETTINGS
com.android.mylauncher.permission.READ_SETTINGS
com.ztemt.launcher.permission.READ_SETTINGS
cn.nubia.launcher.permission.READ_SETTINGS
com.gionee.amisystem.permission.READ_SHORTCUT
android.permission.READ_EXTERNAL_STORAGE
android.permission.SYSTEM_OVERLAY_WINDOW

Receivers

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

io.dcloud.feature.apsGt.GTNotificationReceiver

android.intent.action.BOOT_COMPLETED
com.example.herocoming.__CREATE_NOTIFICATION
com.example.herocoming.__REMOVE_NOTIFICATION
com.example.herocoming.__CLEAR_NOTIFICATION
com.example.herocoming.__CLILK_NOTIFICATION

io.dcloud.common.adapter.io.PushReceiver

dcloud.push.broswer

io.dcloud.appstream.receiver.DaemonReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

Services

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

io.dcloud.streamdownload.DownloadService

com.qihoo.life.plugin.streamapp.ACTION_PUSH_TO_PLUGIN

Android Permissions

1a63187adc441eb0608eb9b0f6c7b34e_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FLASHLIGHT

android.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CALL_PHONE

getui.permission.GetuiService.com.example.herocoming

android.permission.ACCESS_MOCK_LOCATION

android.permission.CHANGE_NETWORK_STATE

android.permission.RECEIVE_USER_PRESENT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.yulong.android.launcherL.permission.READ_SETTINGS

com.meizu.flyme.launcher.permission.READ_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.qiku.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.zte.mifavor.launcher.permission.READ_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.READ_SETTINGS

com.yulong.android.launcher3.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

com.sec.android.app.twlauncher.settings.READ_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.example.herocoming

io.dcloud.PandoraEntry

Activities

io.dcloud.PandoraEntry

com.tencent.tauth.AuthActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.example.herocoming.wxapi.WXEntryActivity

io.dcloud.PandoraEntryActivity

io.dcloud.appstream.StreamAppMainActivity

Permissions

Receivers

com.igexin.sdk.PushReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

io.dcloud.common.adapter.io.PushReceiver

io.dcloud.appstream.receiver.DaemonReceiver

Services

com.igexin.sdk.PushService

io.dcloud.streamdownload.DownloadService

Android Permissions

1a63187adc441eb0608eb9b0f6c7b34e_JaffaCakes118