Overview

overview

8

Static

static

8

2db55b68df...18.apk

android-9-x86

1

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

autonavi_R..._0.apk

android-9-x86

autonavi_R..._0.apk

android-10-x64

autonavi_R..._0.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2db55b68df89ee76d3fea5bc9443a374_JaffaCakes118

  • Size

    32.0MB

  • MD5

    2db55b68df89ee76d3fea5bc9443a374

  • SHA1

    3e7dbd1429db2fb40b3e2678e38290f26668d7c8

  • SHA256

    4aa67de7822e6476d3653e77be3365fe74c2d502a61dc80d3c12ff0348237bd1

  • SHA512

    eae06710ff819851cdbd1ceec9b8eb81cf235a0217b46aa5326d3785bf28f4770ebb5af11013c264267d0456db3065adede00716060c7bc30eb46e8999dfb09e

  • SSDEEP

    786432:VOaISwMqSoy0E6x4oACwKiwoPKsSD41KqHWOBKe+Ba7:8a7wMqSr0E66o5DeE028+S

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 11 IoCs

Files

  • 2db55b68df89ee76d3fea5bc9443a374_JaffaCakes118
    .apk android arch:arm

    com.jinyou.paiyidaps

    com.jinyou.bdsh.postman.activity.StartActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


  • autonavi_Resource1_1_0.png
    .apk android

    com.amap.api.navi

    com.amap.api.navi.AmapRouteActivity


Android Permissions

2db55b68df89ee76d3fea5bc9443a374_JaffaCakes118

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.jinyou.paiyidaps.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.GET_TASKS

android.permission.BLUETOOTH

com.google.android.c2dm.permission.RECEIVE

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.READ_SETTINGS