316e142aa8a1a1d5cf18c82a69d9a769_JaffaCakes118

General

Target

316e142aa8a1a1d5cf18c82a69d9a769_JaffaCakes118
Size

12.2MB
MD5

316e142aa8a1a1d5cf18c82a69d9a769
SHA1

5838cf6f975696ff48adc2c702a225ee40e6e854
SHA256

0676067c3ea1b36fe1ab843c37206ed6ecc69d9631bbad592779f4749dfdb35d
SHA512

0cdef9a19753a74207743d79ad475879ae86a740a3d1b71ced0444df70d60817579f0ccda0d6ffc3c6e6ac80171179f7f95c959c346489c901e9f07449002341
SSDEEP

393216:3sPiBPDCqf63sfb5N2VWcmPMi0W8yr7WD4VD+MJmoEYsE/MJ4/FHolQG:3ai9D5RNNCWcm9LluaD+CmosEUsFHolT

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 21 IoCs

description	ioc
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

316e142aa8a1a1d5cf18c82a69d9a769_JaffaCakes118
.apk android arch:arm

com.boyaa.engineddz.main

com.boyaa.engineddz.Game

Activities

com.boyaa.engineddz.Game

android.intent.action.MAIN

com.boyaa.app.sys.ShortCutActivity

android.intent.action.CREATE_SHORTCUT

com.ehoo.paysdk.MainActivity

com.ehoo.paysdk.MAIN

com.igexin.sdk.SdkActivity

com.igexin.action.popupact.com.boyaa.engineddz.main

com.skymobi.pay.third.activity.impl.EnterChargeCenter

android.intent.action.MAIN

com.alipay.android.mini.window.sdk.MiniPayActivity

android.intent.action.MAIN

com.alipay.android.mini.window.sdk.MiniWebActivity

android.intent.action.MAIN

Permissions

android.permission.CHANGE_CONFIGURATION
android.permission.WRITE_SETTINGS
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.RESTART_PACKAGES
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.READ_LOGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.BLUETOOTH_ADMIN
android.permission.BLUETOOTH
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CALL_PHONE
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.DISABLE_KEYGUARD
getui.permission.GetuiService
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.UPDATE_DEVICE_STATS
android.permission.WRITE_APN_SETTINGS
android.permission.VIBRATE
android.permission.RUN_INSTRUMENTATION
android.permission.MODIFY_PHONE_STATE
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.GET_TASKS
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_SETTINGS
com.alipay.mobile.command.trigger.permission

Receivers

com.igexin.sdk.coordinator.NotificationCenterAIDLReceiver

com.igexin.sdk.action.refreshls

com.igexin.sdk.SdkReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

sdk.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.boyaa.push.getui.GeTuiBroadcastReceiver

com.igexin.sdk.action.lKooQgpZeM7hxbzRkb34f4

com.boyaa.alarm.AlarmBroadcastReceiver

com.boyaa.action.Alarm

com.skymobi.pay.sms.receiver.BootReceiver

android.intent.action.BATTERY_CHANGED
android.intent.action.SIM_STATE_CHANGED
android.intent.action.NOTIFICATION_ADD
android.intent.action.SERVICE_STATE
android.intent.action.NOTIFICATION_REMOVE
android.intent.action.NOTIFICATION_UPDATE
android.bluetooth.adapter.action.STATE_CHANGED
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.ANY_DATA_STATE
android.net.wifi.STATE_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.SCREEN_ON
android.intent.action.USER_PRESENT

com.skymobi.pay.sms.receiver.SmsReceiver

android.provider.Telephony.SMS_RECEIVED

com.skymobi.pay.sms.receiver.NetworkReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.boyaa.entity.pay.vogin.VoginMessageReciver

com.boyaa.engineddz.action.pay.woqin.sms_success

Services

com.skymobi.pay.services.SkyPayRemoteService

com.skymobi.pay.sdk.ISkyPayRemoteService
com.skymobi.pay.opplugin_V2010.apk
.apk android

com.skymobi.pay.opplugin

com.skymobi.pay.third.activity.impl.EnterChargeCenter

Activities

com.skymobi.pay.third.activity.impl.EnterChargeCenter

android.intent.action.MAIN

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.SEND_SMS
android.permission.READ_PHONE_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_WIFI_STATE

Receivers

com.skymobi.pay.sms.receiver.BootReceiver

android.intent.action.BATTERY_CHANGED
android.intent.action.SIM_STATE_CHANGED
android.intent.action.NOTIFICATION_ADD
android.intent.action.SERVICE_STATE
android.intent.action.NOTIFICATION_REMOVE
android.intent.action.NOTIFICATION_UPDATE
android.bluetooth.adapter.action.STATE_CHANGED
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.ANY_DATA_STATE
android.net.wifi.STATE_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.SCREEN_ON
android.intent.action.USER_PRESENT

com.skymobi.pay.sms.receiver.SmsReceiver

android.provider.Telephony.SMS_RECEIVED

com.skymobi.pay.sms.receiver.NetworkReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

com.skymobi.pay.services.SkyPayRemoteService

com.skymobi.pay.sdk.ISkyPayRemoteService
huafubaopsV1.1.5_0002.apk
.apk android

com.umpay.huafubao

.ui.Info2Activity

Activities

.ui.Info2Activity

android.intent.action.MAIN

.ui.BillingActivity

com.umpay.huahubao.billing

.ui.UPayActivity

com.umpay.huahubao.upay

Permissions

android.permission.INTERNET
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.CALL_PHONE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE

Services

Android Permissions

316e142aa8a1a1d5cf18c82a69d9a769_JaffaCakes118

Permissions

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RESTART_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.DISABLE_KEYGUARD

getui.permission.GetuiService

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.UPDATE_DEVICE_STATS

android.permission.WRITE_APN_SETTINGS

android.permission.VIBRATE

android.permission.RUN_INSTRUMENTATION

android.permission.MODIFY_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.boyaa.engineddz.main

com.boyaa.engineddz.Game

Activities

com.boyaa.engineddz.Game

com.boyaa.app.sys.ShortCutActivity

com.ehoo.paysdk.MainActivity

com.igexin.sdk.SdkActivity

com.skymobi.pay.third.activity.impl.EnterChargeCenter

com.alipay.android.mini.window.sdk.MiniPayActivity

com.alipay.android.mini.window.sdk.MiniWebActivity

Permissions

Receivers

com.igexin.sdk.coordinator.NotificationCenterAIDLReceiver

com.igexin.sdk.SdkReceiver

sdk.download.DownloadReceiver

com.boyaa.push.getui.GeTuiBroadcastReceiver

com.boyaa.alarm.AlarmBroadcastReceiver

com.skymobi.pay.sms.receiver.BootReceiver

com.skymobi.pay.sms.receiver.SmsReceiver

com.skymobi.pay.sms.receiver.NetworkReceiver

com.boyaa.entity.pay.vogin.VoginMessageReciver

Services

com.skymobi.pay.services.SkyPayRemoteService

com.skymobi.pay.opplugin

com.skymobi.pay.third.activity.impl.EnterChargeCenter

Activities

com.skymobi.pay.third.activity.impl.EnterChargeCenter

Permissions

Receivers

com.skymobi.pay.sms.receiver.BootReceiver

com.skymobi.pay.sms.receiver.SmsReceiver

com.skymobi.pay.sms.receiver.NetworkReceiver

Services

com.skymobi.pay.services.SkyPayRemoteService

com.umpay.huafubao

.ui.Info2Activity

Activities

.ui.Info2Activity

.ui.BillingActivity

.ui.UPayActivity

Permissions

Services

Android Permissions

316e142aa8a1a1d5cf18c82a69d9a769_JaffaCakes118