2f1d1ea8fa2b8f09c27c9773eb23961f_JaffaCakes118

General

Target

2f1d1ea8fa2b8f09c27c9773eb23961f_JaffaCakes118
Size

3.3MB
MD5

2f1d1ea8fa2b8f09c27c9773eb23961f
SHA1

3e5f328c729112c9247f37e95adda0094e23ef1d
SHA256

2393ba444c543a3e3c08dd0eb6da4aed24326ddd499620f8eb0054f1558bfd04
SHA512

ac7011024e18021d1f476535da47427f406577998275598105deaf4a71855a73e081c2cbf3c693d8fd002159b036d8b4c668aba231abb03c615812d554686578
SSDEEP

98304:xMCyz1T1ZXACpcwkrjxcGZARJGVEfKlw/qRukrLvy:xHi1vX5ewkaVRJGVEuukrLvy

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

2f1d1ea8fa2b8f09c27c9773eb23961f_JaffaCakes118
.apk android arch:arm

astjxjwq.sjsj

.AppActivity

Activities

.AppActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
rockchip.permission.FULL_SCREEN
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.READ_LOGS
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.CHANGE_NETWORK_STATE
android.permission.GET_TASKS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_SMS
android.permission.SYSTEM_ALERT_WINDOW

Receivers

com.umeng.common.CheckinReceiver

android.net.wifi.STATE_CHANGE
android.net.supplicant.wifi.STATE_CHANGE
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

me.gall.totalpay.android.SMSReceiver

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_RECEIVED2

me.gall.totalpay.android.NetworkStateChangeReceiver

android.net.wifi.STATE_CHANGE
android.net.supplicant.wifi.STATE_CHANGE
android.net.conn.CONNECTIVITY_CHANGE

me.gall.tinybee.LoggerManager$NetworkStateChangeReceiver

android.net.wifi.STATE_CHANGE
android.net.supplicant.wifi.STATE_CHANGE
android.net.conn.CONNECTIVITY_CHANGE

com.android.u.actionReceiver.DownLoadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.android.u.actionReceiver.InstalReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.android.u.actionReceiver.UnlockReceiver

android.intent.action.USER_PRESENT

Services
20121018133442msp.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
com.aliyun.xiaoyunmi.alipay

Receivers

.AlixReceiver

com.aliyun.xiaoyunmi.alipay_exit

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay
totalpay.jar
.apk android

Android Permissions

2f1d1ea8fa2b8f09c27c9773eb23961f_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

rockchip.permission.FULL_SCREEN

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_SMS

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

astjxjwq.sjsj

.AppActivity

Activities

.AppActivity

Permissions

Receivers

com.umeng.common.CheckinReceiver

me.gall.totalpay.android.SMSReceiver

me.gall.totalpay.android.NetworkStateChangeReceiver

me.gall.tinybee.LoggerManager$NetworkStateChangeReceiver

com.android.u.actionReceiver.DownLoadCompleteReceiver

com.android.u.actionReceiver.InstalReceiver

com.android.u.actionReceiver.UnlockReceiver

Services

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

.AlixReceiver

Services

.AlixService

Android Permissions

2f1d1ea8fa2b8f09c27c9773eb23961f_JaffaCakes118