General

  • Target

    3e8f63aac3ac888e1b2b4d25be7ede34_JaffaCakes118

  • Size

    22.3MB

  • MD5

    3e8f63aac3ac888e1b2b4d25be7ede34

  • SHA1

    5008b4108c50f2dcd96ebcdadf5ed08cbd5c3786

  • SHA256

    95311667b310037fb13246b6950afa8dfa1698b32f6865c40da8c4772f0a3265

  • SHA512

    5399a10a583c8ab7ec81f3563a6fd5a7ea8bd77e58402d8cc714254aa3074d09faa81f47fa49c21fb44446282774a3c2017d52ba04b8824758a0ddd80025c746

  • SSDEEP

    393216:0nmUw6hbBX1XBvlRwt03V4wbMOJonh11bZvZXppZHpod4ahWP+4u++/PMWtQKOsI:UPtbBX1Xp3DV4wvwRppZJtaSu+UJ+x/7

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 20 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 20 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 9 IoCs

Files

  • 3e8f63aac3ac888e1b2b4d25be7ede34_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.maipu.guide

    com.maipu.guide.activity.GuideActivity


  • autonavi_Resource1_1_0.png
    .apk android

    com.example.navigationsdk

    .WelcomeActivity


Android Permissions

3e8f63aac3ac888e1b2b4d25be7ede34_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.CAMERA

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS