255e04e3bc4f6a82527e408f38e7316d_JaffaCakes118

General

Target

255e04e3bc4f6a82527e408f38e7316d_JaffaCakes118
Size

30.9MB
MD5

255e04e3bc4f6a82527e408f38e7316d
SHA1

f577b89d3f32bab5eb3d1b5ff3de981df40cd3c1
SHA256

44fb56df611349962d36471d21023441d2da25c11be25e708dbfed7160434ed8
SHA512

cb6f059f4f91a9a25329f32fc0d0d3bdde3855a2c74aba7433a356b7a18f3b99fce869a5b280c0df8331d48b91bc58d9434949421314d5bd3790fdb3941f4a38
SSDEEP

786432:8YsEcX3+1uAMUlhCqE1Srn1s76FyhlLwtjB:Js7YutUlhLEqn18dM/

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS

Files

255e04e3bc4f6a82527e408f38e7316d_JaffaCakes118
.apk android arch:arm

com.juphoon.justalk

com.juphoon.justalk.MainActivity

Activities

com.juphoon.justalk.InvokeCallAcitivity

android.intent.action.CALL
android.intent.action.VIEW
com.juphoon.justalk.action.videocall
com.juphoon.justalk.action.info.juscall

com.juphoon.justalk.HandleUriActivity

android.intent.action.VIEW

com.juphoon.justalk.login.LaunchActivity2

com.juphoon.justalk.action.LAUNCH

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.juphoon.justalk.MainActivity

android.intent.action.MAIN

com.juphoon.justalk.ChooseUserActivity

android.intent.action.SEND
android.intent.action.SEND

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.CAMERA
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECORD_AUDIO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_CONTACTS
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.BLUETOOTH
android.permission.BROADCAST_STICKY
android.permission.READ_LOGS
android.permission.GET_TASKS
android.permission.GET_ACCOUNTS
com.google.android.c2dm.permission.RECEIVE
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.WRITE_CONTACTS
android.permission.WRITE_SYNC_SETTINGS
android.permission.MANAGE_ACCOUNTS
com.android.vending.BILLING
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
com.juphoon.justalk.permission.C2D_MESSAGE

Receivers

com.juphoon.justalk.MtcBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MEDIA_MOUNTED

com.juphoon.justalk.MtcUpdateReceiver

com.juphoon.justalk.update_action

com.justalk.ui.TimeSetReceiver

android.intent.action.TIME_SET

com.juphoon.justalk.LocalPushReceiver

local_push_action

com.juphoon.justalk.hmspush.HMSPushMessageReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE
com.huawei.android.push.intent.CLICK
com.huawei.intent.action.PUSH_STATE

com.huawei.hms.support.api.push.PushEventReceiver

com.huawei.intent.action.PUSH

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.juphoon.justalk.fcm.MyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.juphoon.justalk.fcm.MyFirebaseInstanceIDService

com.google.firebase.INSTANCE_ID_EVENT

com.juphoon.justalk.accountsync.AuthenticationService

android.accounts.AccountAuthenticator

com.juphoon.justalk.accountsync.SyncService

android.content.SyncAdapter

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

255e04e3bc4f6a82527e408f38e7316d_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.BLUETOOTH

android.permission.BROADCAST_STICKY

android.permission.READ_LOGS

android.permission.GET_TASKS

android.permission.GET_ACCOUNTS

com.google.android.c2dm.permission.RECEIVE

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.WRITE_CONTACTS

android.permission.WRITE_SYNC_SETTINGS

android.permission.MANAGE_ACCOUNTS

com.android.vending.BILLING

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

com.juphoon.justalk.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

com.juphoon.justalk

com.juphoon.justalk.MainActivity

Activities

com.juphoon.justalk.InvokeCallAcitivity

com.juphoon.justalk.HandleUriActivity

com.juphoon.justalk.login.LaunchActivity2

com.tencent.tauth.AuthActivity

com.juphoon.justalk.MainActivity

com.juphoon.justalk.ChooseUserActivity

Permissions

Receivers

com.juphoon.justalk.MtcBootReceiver

com.juphoon.justalk.MtcUpdateReceiver

com.justalk.ui.TimeSetReceiver

com.juphoon.justalk.LocalPushReceiver

com.juphoon.justalk.hmspush.HMSPushMessageReceiver

com.huawei.hms.support.api.push.PushEventReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.juphoon.justalk.fcm.MyFirebaseMessagingService

com.juphoon.justalk.fcm.MyFirebaseInstanceIDService

com.juphoon.justalk.accountsync.AuthenticationService

com.juphoon.justalk.accountsync.SyncService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

255e04e3bc4f6a82527e408f38e7316d_JaffaCakes118