General

  • Target

    1fa230f2ddfceea6d0782dbdf7ba1398_JaffaCakes118

  • Size

    26.8MB

  • MD5

    1fa230f2ddfceea6d0782dbdf7ba1398

  • SHA1

    4f5e47ebdf64144b5122189bbac92d01f0edb665

  • SHA256

    db68c5fd3869074159db0fb5911d295b91ef656dfa003f74155d5e93269b0d10

  • SHA512

    f5b511d6bde9fbe09ae3f27bd800ad0b493e5e53a7d04c7a09e30b8716faab653ec42d8eb73f22103890dbd3221a81cedc7973d60ee1c06f58d643751c6dbdef

  • SSDEEP

    786432:9L4540jMr+N6aN4U/Rsht69UeSXIutSgmYZDZ+iwvyut:9U7FNtN4U/M697S4utSgfdw6Y

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 10 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 10 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 11 IoCs

Files

  • 1fa230f2ddfceea6d0782dbdf7ba1398_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.maipu.tourist

    com.maipu.tourist.activity.GuideActivity


  • autonavi_Resource1_1_0.png
    .apk android

    com.example.navigationsdk

    .WelcomeActivity


Android Permissions

1fa230f2ddfceea6d0782dbdf7ba1398_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.CAMERA

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.VIBRATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE