com.gulass.blindchathelper.activity.WelcomeActivity
android.intent.action.MAIN
General
-
Target
26872eff50983e8f8a64eb814ff40f00_JaffaCakes118
-
Size
26.4MB
-
MD5
26872eff50983e8f8a64eb814ff40f00
-
SHA1
2e1f3a3dee6dd79ee9332e7089b99d2bd27fd3c8
-
SHA256
c331f4f39ef7b66f5950c58819b1cde54e0edb5dd596201915fa60c65ddcbb4e
-
SHA512
44fffd7910b43e579e0efe9d4acec43a55e1dc00d5eebf55da7b4133378feed1c2c4f40d5c021c43c5dcba51764a9ee965872ca81f1a0d8befa4684d8c9464f8
-
SSDEEP
786432:NVmeOKZ48Npk586IplvXyfde3OjvsVvCGJLXJUcbOESDzOR+:bmeOO4T5pIWfde4EVKGJJUNETR+
Score
8/10
Malware Config
Signatures
-
Patched UPX-packed file 2 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Declares broadcast receivers with permission to handle system events 1 IoCs
-
Requests dangerous framework permissions 7 IoCs
Files
-
26872eff50983e8f8a64eb814ff40f00_JaffaCakes118
com.gulass.blindchathelper
com.gulass.blindchathelper.activity.WelcomeActivity
-
amap_resource1_0_0.png
com.amap.api.map3d
Android Permissions
26872eff50983e8f8a64eb814ff40f00_JaffaCakes118
Permissions
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.VIBRATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.GET_TASKS
android.permission.FLASHLIGHT
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.DISABLE_KEYGUARD
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.VIBRATE
com.gulass.blindchathelper.permission.RECEIVE_MSG
com.gulass.permission.NOTIFICATIONS
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED