204aa5ea7157de4a486d596b96876b7f_JaffaCakes118

General

Target

204aa5ea7157de4a486d596b96876b7f_JaffaCakes118
Size

21.5MB
MD5

204aa5ea7157de4a486d596b96876b7f
SHA1

308cd285f21af3beaf6843d8911bcd13a38f5abf
SHA256

75caaf0250206898a1bed143d61ccda4bed965bb93570279d68b76e66e37d6ec
SHA512

6932797f2e62608963f01e57cf56f4ede9e465f46014922f803063562235235f7a48fa322fc9679ea516a45335c7705b6fc020e48f6cc65276eae5bbae94c3d8
SSDEEP

393216:nIwMRm746zjvw6JOrTm+Q48if3iUY//GoeRaft2Ab8b8wzBeo1/rJ1ULRlnpSq:yEJr9se+Z8K3iUYmoetAbnwzBeoX1ERz

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

204aa5ea7157de4a486d596b96876b7f_JaffaCakes118
.apk android arch:arm

com.meiyuan.ui

com.showself.ui.LoadingActivity

Activities

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.showself.ui.LoadingActivity

android.intent.action.MAIN

com.showself.ui.HomeActivity

com.showself.com.homeactivity

com.showself.ui.WXPayActivity

android.intent.action.MAIN
android.intent.action.VIEW

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PushActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.sina.weibo.sdk.share.WbShareToStoryActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.REORDER_TASKS
android.permission.ACCESS_COARSE_LOCATION
android.permission.CAMERA
android.permission.WAKE_LOCK
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.SYSTEM_ALERT_WINDOW
commeiyuan.ui.permission.JPUSH_MESSAGE
android.permission.RECEIVE_USER_PRESENT
android.permission.READ_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.CHANGE_NETWORK_STATE
android.permission.BLUETOOTH

Receivers

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.showself.ui.JPushMessageReceiver

cn.jpush.android.intent.REGISTRATION
cn.jpush.android.intent.MESSAGE_RECEIVED
cn.jpush.android.intent.NOTIFICATION_RECEIVED
cn.jpush.android.intent.NOTIFICATION_OPENED
cn.jpush.android.intent.CONNECTION

com.enmoli.poker.push.ShowLuckReceiver

com.enmoli.poker.action.AWAKEN
com.enmoli.poker.action.DORMANCY
com.enmoli.poker.action.STOP
com.enmoli.poker.action.CLEAR
com.enmoli.poker.action.CHECK
com.enmoli.poker.action.RESTART
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_SHUTDOWN
android.intent.action.REBOOT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.showself.net.SessionExpiredReceiver

SHOWSELF_SESSION_EXPIRED_ACTION

com.showself.ui.ShowSelfReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
com.showself.action.STARTSERVICE

com.showself.ui.NetWorkReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER
cn.jpush.android.intent.REPORT
cn.jpush.android.intent.PushService
cn.jpush.android.intent.PUSH_TIME

cn.jpush.android.service.DaemonService

cn.jpush.android.intent.DaemonService

com.showself.ui.ShowselfService

com.showself.com.showselfservice

com.showself.service.UploadService

com.showself.upload.AUDIO

Android Permissions

204aa5ea7157de4a486d596b96876b7f_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REORDER_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.CAMERA

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

commeiyuan.ui.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.BLUETOOTH

Sharing

General

Malware Config

Signatures

Files

com.meiyuan.ui

com.showself.ui.LoadingActivity

Activities

com.tencent.tauth.AuthActivity

com.showself.ui.LoadingActivity

com.showself.ui.HomeActivity

com.showself.ui.WXPayActivity

cn.jpush.android.ui.PushActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.share.WbShareToStoryActivity

Permissions

Receivers

cn.jpush.android.service.PushReceiver

com.showself.ui.JPushMessageReceiver

com.enmoli.poker.push.ShowLuckReceiver

com.showself.net.SessionExpiredReceiver

com.showself.ui.ShowSelfReceiver

com.showself.ui.NetWorkReceiver

Services

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.showself.ui.ShowselfService

com.showself.service.UploadService

Android Permissions

204aa5ea7157de4a486d596b96876b7f_JaffaCakes118