2c3df20b7048d0822d4239e88bd74b31_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2c3df20b7048d0822d4239e88bd74b31_JaffaCakes118
Size

28.8MB
MD5

2c3df20b7048d0822d4239e88bd74b31
SHA1

72df2f590ed100e2e57dd0ce85622358dec7c820
SHA256

35389d4fa6be35a7f2da859792973d0f46a82899e8777048665b15ce50cb68f3
SHA512

b628b14be5e84616884e479bcce4cb3c8233c08118eb4ac070d4fab08b28305c329a08b2cef229a2b07e41dc6190c1d4c8981ac8cf216fc6c33f1e6cc939add2
SSDEEP

786432:N4jRLTfNNng7VSdA+9LJuzZm6XRhHMnorz5yd:N2LTfNNngVS/9L4zfQorzId

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 16 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

2c3df20b7048d0822d4239e88bd74b31_JaffaCakes118
.apk android arch:arm

com.cssweb.android.main

com.newtzt.activity.tztHeadPageActivity

Activities

com.newtzt.activity.tztHeadPageActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.newtzt.activity.tztRootActivity

android.intent.action.MAIN

com.newtzt.activity.tztCommonActivity

android.intent.action.MAIN

com.system.activity.qsHqLoginActivity

android.intent.action.MAIN

com.system.activity.qsIntroActivity

android.intent.action.MAIN

com.system.activity.qsSetRootActivity

android.intent.action.MAIN

com.web.activity.qsWebview10061Activity

android.intent.action.MAIN

com.system.activity.qsServerSettingActivity

android.intent.action.MAIN

com.trade.activity.tztJyLoginSimulateActivity

android.intent.action.MAIN

com.trade.activity.tztJYLoginActivity

android.intent.action.MAIN

com.trade.activity.tztTradeBuySellActivity

android.intent.action.MAIN

com.trade.activity.tztTradeHKBuySellActivity

android.intent.action.MAIN

com.trade.activity.tztTradeGGQQBuySellFastActivity

android.intent.action.MAIN

com.trade.activity.tztTradeGGQQBuySellSquareActivity

android.intent.action.MAIN

com.trade.activity.tztTradeGGQQBuySellOpenActivity

android.intent.action.MAIN

com.trade.activity.tztTradeGGQQBuySellXingQuanActivity

android.intent.action.MAIN

com.trade.activity.tztTradeSanBanBuySellActivity

android.intent.action.MAIN

com.trade.activity.tztTradeSanBanQueRenBuySellActivity

android.intent.action.MAIN

com.trade.activity.tztTradeRZRQBuySellActivity

android.intent.action.MAIN

com.trade.activity.tztTradeRZRQMaiQuanHuanQuanActivity

android.intent.action.MAIN

com.trade.activity.tztTradeRZRQMaiQuanHuanKuanActivity

android.intent.action.MAIN

com.trade.activity.tztTradeSplitBuySellActivity

android.intent.action.MAIN

com.trade.activity.tztTradeBlockActivity

android.intent.action.MAIN

com.trade.activity.TztTradeRZRQSpecialBuySellActivity

android.intent.action.MAIN

com.trade.activity.tztPasswordLockActivity

android.intent.action.MAIN

com.trade.activity.tztPasswordUnLockedActivity

android.intent.action.MAIN

com.trade.activity.tztPasswordLockSetActivity

android.intent.action.MAIN

com.trade.activity.tztPasswordLockTimeSetActivity

android.intent.action.MAIN

com.hq.activity.tztSearchStockActivity

android.intent.action.MAIN

com.hq.activity.tztStockPaiMingActivity

android.intent.action.MAIN

com.hq.activity.tztUserStockActivity

android.intent.action.MAIN

com.hq.activity.tztSetLocalStockActivity

android.intent.action.MAIN

com.hq.activity.tztSetLocalStockChangeGroupActivity

android.intent.action.MAIN

com.hq.activity.tztUserStockGroupManagerActivity

android.intent.action.MAIN

com.hq.activity.tztTrendActivity

android.intent.action.MAIN

com.hq.activity.tztTrendHistoryActivity

android.intent.action.MAIN

com.hq.activity.tztTrendLandScapeActivity

android.intent.action.MAIN

com.hq.activity.tztTrendHistoryLandScapeActivity

android.intent.action.MAIN

com.hq.activity.tztMultiTrendActivity

android.intent.action.MAIN

com.hq.activity.tztGgqqTBlockActivity

android.intent.action.MAIN

com.hq.activity.tztGgqqTBlockNewActivity

android.intent.action.MAIN

com.hq.activity.tztShortTermRadarActivity

android.intent.action.MAIN

com.hq.activity.tztKLineSettingListActivity

android.intent.action.MAIN

com.hq.activity.tztKLineSettingDetailActivity

android.intent.action.MAIN

com.hq.activity.tztHqMenuActivity

android.intent.action.MAIN

com.hq.activity.tztStockNoteActivity

android.intent.action.MAIN

com.hq.activity.tztStockNoteModifyActivity

android.intent.action.MAIN

com.hq.activity.tztImageRecognitionActivity

android.intent.action.MAIN

com.hq.activity.tztSketchActivity

android.intent.action.MAIN

com.hq.activity.tztTrendDetail2BigActivity

android.intent.action.MAIN

com.hq.activity.tztZiXuanZhiNengActivity

android.intent.action.MAIN

com.hq.activity.tztZiXuandapanyidongActivity

android.intent.action.MAIN

com.hq.qsActivity.njscShortTermRadarActivity

android.intent.action.MAIN

com.hq.qsActivity.tztGgLiveActivity

android.intent.action.MAIN

com.hq.qsActivity.tztGgLiveSettingActivity

android.intent.action.MAIN

com.hq.activity.tztDDEEntryActivity

android.intent.action.MAIN

com.hq.activity.tztDDEListActivity

android.intent.action.MAIN

com.system.activity.tztIntroActivity

android.intent.action.MAIN

com.system.activity.tztHqLoginActivity

android.intent.action.MAIN

com.system.activity.tztSetRootActivity

android.intent.action.MAIN

com.system.activity.tztTestActivity

android.intent.action.MAIN

com.system.activity.tztInputUrlAjaxActivity

android.intent.action.MAIN

com.system.activity.tztServerSettingActivity

android.intent.action.MAIN

com.system.activity.tztServerUpdateActivity

android.intent.action.MAIN

com.system.activity.tztFunctionListActivity

android.intent.action.MAIN

com.system.activity.tztSpeedTestActivity

android.intent.action.MAIN

com.system.personalcenter.activity.tztComplexLoginActivity

android.intent.action.MAIN

com.system.personalcenter.activity.tztPersonnalCenterPhoneVerifyActivity

android.intent.action.MAIN

com.system.personalcenter.activity.tztInvestmentAdviserLoginActivity

android.intent.action.MAIN

com.mob.tools.MobUIShell

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

cn.sharesdk.tencent.qq.ReceiveActivity

android.intent.action.VIEW

com.cnpush.tztMsgActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.iflytek.IflytekActivity

android.intent.action.MAIN

com.github.barteksc.pdfviewer.tztPdfViewActivity

android.intent.action.VIEW

com.njscocr.baidu.ocr.ui.camera.CameraActivity

android.intent.action.MAIN

com.njscocr.activity.tztOcrResultActivity

android.intent.action.MAIN

com.touchlogin.activity.tztFingerPrintSettingActivity

android.intent.action.MAIN

com.touchlogin.activity.tztAccountLoginActivity

android.intent.action.MAIN

com.touchlogin.activity.tztFingerPrintSettingSuccessActivity

android.intent.action.MAIN

com.web.activity.tztSelectDateActivity

android.intent.action.MAIN

com.web.activity.tztWebview10061Activity

android.intent.action.MAIN

com.web.activity.tztGgqqHomeActivity

android.intent.action.MAIN

com.web.activity.tztStareActivity

android.intent.action.MAIN

com.web.activity.tztHSHKSpecialNewsActivity

android.intent.action.MAIN

com.web.activity.tztWebView10097Activity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REORDER_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.CHANGE_CONFIGURATION
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.ACCESS_COARSE_LOCATION
android.permission.USE_FINGERPRINT
android.permission.VIBRATE
android.hardware.sensor.accelerometer
android.permission.FOREGROUND_SERVICE
android.permission.RECORD_AUDIO
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.RECEIVE_SMS
android.permission.RECORD_VIDEO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.GET_ACCOUNTS
android.permission.BROADCAST_STICKY
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
com.cssweb.android.main.permission.MIPUSH_RECEIVE
com.android.launcher.permission.INSTALL_SHORTCUT
com.huawei.pushagent.permission.RICHMEDIA_PROVIDER
com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_SETTINGS
android.permission.READ_LOGS

Receivers

com.newtzt.widget.SelfSelectStockTableWidget

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.CNTVNEWS_ITEM_CLICK
android.appwidget.action.CNTVNEWS_REFRESH_CLICK
android.appwidget.action.CNTVNEWS_OPENAPP_CLICK

com.cnpush.tztpush.tztBootCompletedReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.cnpush.mipush.tztMiMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR
com.xiaomi.mipush.MESSAGE_ARRIVED

com.cnpush.hwpush.tztHuaweiPushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE
com.huawei.android.push.intent.CLICK
com.huawei.intent.action.PUSH_STATE

com.cnpush.vivopush.tztVivoMessageReceiver

com.vivo.pushclient.action.RECEIVE

Services

com.cnpush.oppopush.tztOppoPushService

com.coloros.mcs.action.RECEIVE_MCS_MESSAGE

Android Permissions

2c3df20b7048d0822d4239e88bd74b31_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REORDER_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CHANGE_CONFIGURATION

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.ACCESS_COARSE_LOCATION

android.permission.USE_FINGERPRINT

android.permission.VIBRATE

android.hardware.sensor.accelerometer

android.permission.FOREGROUND_SERVICE

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.RECEIVE_SMS

android.permission.RECORD_VIDEO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.BROADCAST_STICKY

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

com.cssweb.android.main.permission.MIPUSH_RECEIVE

com.android.launcher.permission.INSTALL_SHORTCUT

com.huawei.pushagent.permission.RICHMEDIA_PROVIDER

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.READ_LOGS

Sharing

General

Malware Config

Signatures

Files

com.cssweb.android.main

com.newtzt.activity.tztHeadPageActivity

Activities

com.newtzt.activity.tztHeadPageActivity

com.newtzt.activity.tztRootActivity

com.newtzt.activity.tztCommonActivity

com.system.activity.qsHqLoginActivity

com.system.activity.qsIntroActivity

com.system.activity.qsSetRootActivity

com.web.activity.qsWebview10061Activity

com.system.activity.qsServerSettingActivity

com.trade.activity.tztJyLoginSimulateActivity

com.trade.activity.tztJYLoginActivity

com.trade.activity.tztTradeBuySellActivity

com.trade.activity.tztTradeHKBuySellActivity

com.trade.activity.tztTradeGGQQBuySellFastActivity

com.trade.activity.tztTradeGGQQBuySellSquareActivity

com.trade.activity.tztTradeGGQQBuySellOpenActivity

com.trade.activity.tztTradeGGQQBuySellXingQuanActivity

com.trade.activity.tztTradeSanBanBuySellActivity

com.trade.activity.tztTradeSanBanQueRenBuySellActivity

com.trade.activity.tztTradeRZRQBuySellActivity

com.trade.activity.tztTradeRZRQMaiQuanHuanQuanActivity

com.trade.activity.tztTradeRZRQMaiQuanHuanKuanActivity

com.trade.activity.tztTradeSplitBuySellActivity

com.trade.activity.tztTradeBlockActivity

com.trade.activity.TztTradeRZRQSpecialBuySellActivity

com.trade.activity.tztPasswordLockActivity

com.trade.activity.tztPasswordUnLockedActivity

com.trade.activity.tztPasswordLockSetActivity

com.trade.activity.tztPasswordLockTimeSetActivity

com.hq.activity.tztSearchStockActivity

com.hq.activity.tztStockPaiMingActivity

com.hq.activity.tztUserStockActivity

com.hq.activity.tztSetLocalStockActivity

com.hq.activity.tztSetLocalStockChangeGroupActivity

com.hq.activity.tztUserStockGroupManagerActivity

com.hq.activity.tztTrendActivity

com.hq.activity.tztTrendHistoryActivity

com.hq.activity.tztTrendLandScapeActivity

com.hq.activity.tztTrendHistoryLandScapeActivity

com.hq.activity.tztMultiTrendActivity

com.hq.activity.tztGgqqTBlockActivity

com.hq.activity.tztGgqqTBlockNewActivity

com.hq.activity.tztShortTermRadarActivity

com.hq.activity.tztKLineSettingListActivity

com.hq.activity.tztKLineSettingDetailActivity

com.hq.activity.tztHqMenuActivity

com.hq.activity.tztStockNoteActivity

com.hq.activity.tztStockNoteModifyActivity

com.hq.activity.tztImageRecognitionActivity

com.hq.activity.tztSketchActivity

com.hq.activity.tztTrendDetail2BigActivity

com.hq.activity.tztZiXuanZhiNengActivity

com.hq.activity.tztZiXuandapanyidongActivity

com.hq.qsActivity.njscShortTermRadarActivity

com.hq.qsActivity.tztGgLiveActivity

com.hq.qsActivity.tztGgLiveSettingActivity

com.hq.activity.tztDDEEntryActivity

com.hq.activity.tztDDEListActivity

com.system.activity.tztIntroActivity

com.system.activity.tztHqLoginActivity

com.system.activity.tztSetRootActivity

com.system.activity.tztTestActivity

com.system.activity.tztInputUrlAjaxActivity

com.system.activity.tztServerSettingActivity

com.system.activity.tztServerUpdateActivity

com.system.activity.tztFunctionListActivity

com.system.activity.tztSpeedTestActivity

com.system.personalcenter.activity.tztComplexLoginActivity

com.system.personalcenter.activity.tztPersonnalCenterPhoneVerifyActivity

com.system.personalcenter.activity.tztInvestmentAdviserLoginActivity

com.mob.tools.MobUIShell

cn.sharesdk.tencent.qq.ReceiveActivity

com.cnpush.tztMsgActivity