3986e382a2740c70b638abee912b51bd_JaffaCakes118

General

Target

3986e382a2740c70b638abee912b51bd_JaffaCakes118
Size

2.4MB
MD5

3986e382a2740c70b638abee912b51bd
SHA1

89bd127f1189bb97dff16676cfa28e20163ff476
SHA256

1fc391a0537838109c0cd1548e3b7d91b3e8fe4f03425164ec6763a13df42bed
SHA512

ba8b661032d8809ee605fa505274bf49baed46e3da654c128efe0b85b723f7eefd3c05d79468930ed46137f05e8595d91e649f1237bc15ee3618d0541537e8a1
SSDEEP

49152:JsoC7m2l9WzAukV/3rmp1z2vzvrIaBKqsTdYDGGtJ2o3jJA6ch+tfU3:i7m2lkzAxVap14kMnsaBN5y3

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

3986e382a2740c70b638abee912b51bd_JaffaCakes118
.apk android arch:arm

com.pickwifi

.IndexActivity

Activities

.IndexActivity

android.intent.action.MAIN

.MainActivity

android.intent.action.MAIN
android.settings.WIFI_SETTINGS
android.settings.AIRPLANE_MODE_SETTINGS
android.net.wifi.PICK_WIFI_NETWORK

.LinkDialogActivity

android.intent.action.MAIN

.OperatorWebViewActivity

android.intent.action.MAIN

.ChooseCityActivity

android.intent.action.MAIN

.AboutActivity

android.intent.action.MAIN

com.pickwifi.GPSInfoActivity

android.intent.action.MAIN

com.pickwifi.MarkAddressActivity

android.intent.action.MAIN

com.pickwifi.WifiDetailsActivity

android.intent.action.MAIN

com.pickwifi.NaviActivity

android.intent.action.MAIN

com.pickwifi.baidumap.ItemizedOverlayActivity

android.intent.action.MAIN

com.pickwifi.NearAPDetailsActivity

android.intent.action.MAIN

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PushActivity

Permissions

com.pickwifi.permission.JPUSH_MESSAGE
android.permission.RECEIVE_USER_PRESENT
android.permission.ACCESS_WIFI_STATE
adnroid.permission.ACCESS_CHECKIN_PROPERTTES
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_LOGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_CONFIGURATION
android.permission.BAIDU_LOCATION_SERVICE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.VIBRATE

Receivers

com.pickwifi.boot.BootBroadCastReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED

com.pickwifi.boot.AlarmReceiver

com.pickwifi.startservice

com.pickwifi.jpush.MyReceiver

cn.jpush.android.intent.REGISTRATION
cn.jpush.android.intent.UNREGISTRATION
cn.jpush.android.intent.MESSAGE_RECEIVED
cn.jpush.android.intent.NOTIFICATION_RECEIVED
cn.jpush.android.intent.NOTIFICATION_OPENED
cn.jpush.android.intent.ACTION_RICHPUSH_CALLBACK

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

Services

com.baidu.location.f

com.baidu.location.service_v2.2

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER
cn.jpush.android.intent.REPORT
cn.jpush.android.intent.PushService
cn.jpush.android.intent.PUSH_TIME

Android Permissions

3986e382a2740c70b638abee912b51bd_JaffaCakes118

Permissions

com.pickwifi.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.ACCESS_WIFI_STATE

adnroid.permission.ACCESS_CHECKIN_PROPERTTES

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_LOGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_CONFIGURATION

android.permission.BAIDU_LOCATION_SERVICE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

Sharing

General

Malware Config

Signatures

Files

com.pickwifi

.IndexActivity

Activities

.IndexActivity

.MainActivity

.LinkDialogActivity

.OperatorWebViewActivity

.ChooseCityActivity

.AboutActivity

com.pickwifi.GPSInfoActivity

com.pickwifi.MarkAddressActivity

com.pickwifi.WifiDetailsActivity

com.pickwifi.NaviActivity

com.pickwifi.baidumap.ItemizedOverlayActivity

com.pickwifi.NearAPDetailsActivity

cn.jpush.android.ui.PushActivity

Permissions

Receivers

com.pickwifi.boot.BootBroadCastReceiver

com.pickwifi.boot.AlarmReceiver

com.pickwifi.jpush.MyReceiver

cn.jpush.android.service.PushReceiver

Services

com.baidu.location.f

cn.jpush.android.service.PushService

Android Permissions

3986e382a2740c70b638abee912b51bd_JaffaCakes118