372a9296c24b1e13732bc3be1336f61f_JaffaCakes118

General

Target

372a9296c24b1e13732bc3be1336f61f_JaffaCakes118
Size

6.6MB
MD5

372a9296c24b1e13732bc3be1336f61f
SHA1

8f779f3ecd19272ed80269a1584d45f1050db559
SHA256

83e19c02e0b514d3ef1b76c36dce72e05a6d3f054f22bd17fa9af50dc958e322
SHA512

7b27c901c8d8c80b329093ae197133011f392722d25dcf1d28c9a042c7df6d749f031dc22004c5029c5b86d04365b368feaacedb7db75249d1f59d9b804b0fec
SSDEEP

196608:7AhSnaFMZQfFFPkbzV3K8246wuNf38oD0:7A0nCpffPkbzVd246wMO

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH

Files

372a9296c24b1e13732bc3be1336f61f_JaffaCakes118
.apk android arch:arm arch:mips arch:x86

com.baidu.security

.foreground.guide.SplashActivity

Activities

.foreground.guide.SplashActivity

android.intent.action.MAIN

.scan.activity.InstallationScanner

android.intent.action.VIEW

.privacy.ui.MainActivity

android.intent.action.MAIN

.privacy.ui.ManageApplications

android.intent.action.MAIN

.privacy.ui.PermissionApplications

android.intent.action.MAIN

.privacy.ui.PermSettingsActivity

android.intent.action.MAIN

.privacy.autolaunch.ManageAutoStartApps

android.intent.action.MAIN

.onekey.ShortcutOneKeyActivity

android.intent.action.MAIN
android.intent.action.CREATE_SHORTCUT

Permissions

android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
com.android.browser.permission.READ_HISTORY_BOOKMARKS
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.CALL_PHONE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_MMS
android.permission.WRITE_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RESTART_PACKAGES
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.CLEAR_APP_CACHE
android.permission.GET_PACKAGE_SIZE
android.permission.SEND_SMS
android.permission.CHANGE_NETWORK_STATE
android.permission.RESTART_PACKAGES
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.BROADCAST_STICKY
android.permission.REORDER_TASKS
android.permission.GET_TASKS
android.permission.WRITE_SETTINGS
com.baidu.permission.SHARE
android.permission.VIBRATE
android.permission.CHANGE_CONFIGURATION
com.htc.launcher.permission.WRITE_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
android.permission.RECEIVE_WAP_PUSH

Receivers

com.baidu.sapi2.share.ShareReceiver

baidu.intent.action.SHARE
baidu.intent.action.NEWSHARE

com.baidu.security.reveiver.BootReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.ACTION_SHUTDOWN
android.intent.action.NEW_OUTGOING_CALL
android.intent.action.TIME_SET

com.baidu.security.reveiver.SMSReceiver

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.WAP_PUSH_RECEIVED

com.baidu.security.reveiver.BaiduReceiver

com.trustgo.action.DAYTRAFFIC
com.trustgo.action.UPDATE_LOCAL_LIBRARY
com.baidu.action.TIMING_SCAN
com.baidu.action.upload.behavior_user_data
com.baidu.action.upload.phone_tag_infor
com.baidu.action.statistical_userdir
com.baidu.action.record_sms_info
com.baidu.action.record_check_sms_info

com.baidu.security.reveiver.TrafficReceiver

com.trustgo.action.DAYTRAFFIC
android.intent.action.TIME_SET
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
com.baidu.app.traffic.adjust.period
com.baidu.app.adjust.finish.bill
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

com.baidu.security.billguard.billadjust.BillReceiver

android.intent.action.BOOT_COMPLETED
com.baidu.app.traffic.adjust.period.bill
com.baidu.app.adjust.finish

.privacy.controler.AppUninstalledReceiver

android.intent.action.PACKAGE_REMOVED

com.baidu.security.privacy.BootCompleteReceiver

android.intent.action.BOOT_COMPLETED

Services
autolm.jar
.apk android

Android Permissions

372a9296c24b1e13732bc3be1336f61f_JaffaCakes118

Permissions

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.CALL_PHONE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.WRITE_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RESTART_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.CLEAR_APP_CACHE

android.permission.GET_PACKAGE_SIZE

android.permission.SEND_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.RESTART_PACKAGES

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.BROADCAST_STICKY

android.permission.REORDER_TASKS

android.permission.GET_TASKS

android.permission.WRITE_SETTINGS

com.baidu.permission.SHARE

android.permission.VIBRATE

android.permission.CHANGE_CONFIGURATION

com.htc.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

android.permission.RECEIVE_WAP_PUSH

Sharing

General

Malware Config

Signatures

Files

com.baidu.security

.foreground.guide.SplashActivity

Activities

.foreground.guide.SplashActivity

.scan.activity.InstallationScanner

.privacy.ui.MainActivity

.privacy.ui.ManageApplications

.privacy.ui.PermissionApplications

.privacy.ui.PermSettingsActivity

.privacy.autolaunch.ManageAutoStartApps

.onekey.ShortcutOneKeyActivity

Permissions

Receivers

com.baidu.sapi2.share.ShareReceiver

com.baidu.security.reveiver.BootReceiver

com.baidu.security.reveiver.SMSReceiver

com.baidu.security.reveiver.BaiduReceiver

com.baidu.security.reveiver.TrafficReceiver

com.baidu.security.billguard.billadjust.BillReceiver

.privacy.controler.AppUninstalledReceiver

com.baidu.security.privacy.BootCompleteReceiver

Services

Android Permissions

372a9296c24b1e13732bc3be1336f61f_JaffaCakes118