Overview

overview

8

Static

static

8

3e5bbdd541...18.apk

android-9-x86

7

3e5bbdd541...18.apk

android-10-x64

7

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e5bbdd54131c15ef758068849e92cb2_JaffaCakes118

  • Size

    30.8MB

  • MD5

    3e5bbdd54131c15ef758068849e92cb2

  • SHA1

    1d17d3a89fee4700e46eedcc047f838bb506be53

  • SHA256

    ceb18524bf064eb2c085787d4cb85a21a7af90908c47a69c8dde49132e1013f2

  • SHA512

    515470b62fda3c4de5b420a787d8558e5073a8574af5d1cc641d90209e71f92d074402210097592bd175bb3206a4ce078ade3300dea7f76f3bc1697a30289915

  • SSDEEP

    786432:5OaBCmLttzkOmPEcE4Nxv/+7tcKc+wSpW7EOgP5PT3Z:gaBCmhtzkOmPEcJ/+7OK7W7il

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 5 IoCs

Files

  • 3e5bbdd54131c15ef758068849e92cb2_JaffaCakes118
    .apk android arch:arm arch:x86

    com.anxintrust.clientapp

    com.anxintrust.clientapp.activity.SplashActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

3e5bbdd54131c15ef758068849e92cb2_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.BLUETOOTH

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

getui.permission.GetuiService.com.bmdoctor.jyt

com.huawei.android.launcher.permission.CHANGE_BADGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS