Errors

Reason
could not process APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

  • Target

    32d2987d7b4c49c7be90c08c8069c9ab_JaffaCakes118

  • Size

    7.1MB

  • MD5

    32d2987d7b4c49c7be90c08c8069c9ab

  • SHA1

    92cee8f447acbc1892d7dc9a76c63dc4871b20f2

  • SHA256

    bdcbf56f5c9fdc8792790aa11ddc17dcddbd289347fed9eca8049e731dcd4e51

  • SHA512

    a5f8dd6deba3c08422461e2745d5a11344c0e350163c83377bd6d70fb1af21943020174af03532f35576b55337277292c21835d8e2bda0b5543407abeaf0041b

  • SSDEEP

    98304:O3hd8QUPfUDTu/k6Xmqi5wMPO/bzveddky3wLajcDKRjlE6XrGeYoZS6QkdhaObM:a3T0VT/bz2fkhYcDgtXKkSAhFwBpNn

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 32d2987d7b4c49c7be90c08c8069c9ab_JaffaCakes118
    .apk android arch:arm
  • QRomCommand.jar
    .apk android
  • extlibs.1.jar
    .apk android
  • hotfix_tools.jar
    .apk android
  • plugin_dock.plg
    .apk android

    com.assistant.accelerate

    com.assistant.accelerate.MobileAccelerateActivity


  • plugin_login.plg
    .apk android

    com.tencent.mobileassistant_login

    com.tencent.plugin.login.activity.LoginActivity


  • plugin_wifi_transfer.plg
    .apk android

    com.tencent.mobileassistant_wifitransfer

    com.tencent.assistant.activity.WifiTransferActivity