4290645ede63062da5eaf20d40721a44_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4290645ede63062da5eaf20d40721a44_JaffaCakes118
Size

30.0MB
MD5

4290645ede63062da5eaf20d40721a44
SHA1

a13a37d91e061cbdf6fd97ae5bb10e86a3abc74f
SHA256

5779a125d7daac99196e94b8b16a2a140df7ee1cd4898918026deef4a96cf628
SHA512

e0569152e2239cb48a786fa0e6c0e5735dda9f95c74197f0d47cee7a3162ee5248138ff34f5fbbac405ed0d4941e4ab31eb11d27b5c0b286e1c7ab7511328db0
SSDEEP

393216:7rhXBcS5zlYUmKockr80Yt9YLhb+2KpwHtctL7DF19mMAwzeYfr6Kop4UO1kDo6y:7rrYUSrc9Mhb+2KpwH9MFfljUO1k2P

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx
sample	upx

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

4290645ede63062da5eaf20d40721a44_JaffaCakes118
.apk android arch:arm

com.coco.entertainment.immortalracer.qilong.qihu

cn.cmgame.billing.api.GameOpenActivity

Activities

com.qihoo.gamecenter.sdk.activity.ContainerActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.MAIN
android.intent.action.VIEW

cn.cmgame.billing.api.GameOpenActivity

android.intent.action.MAIN
android.intent.action.CHINAMOBILE_OMS_GAME

cn.cmgame2_0.launch_model.shortcut.main.MiguHomeActivity

android.intent.action.MAIN

cn.egame.terminal.sdk.EgameCoreActivity

android.intent.action.MAIN

com.qihoo.gamecenter.sdk.activity.QhDeepLinkActivity

android.intent.action.VIEW

com.qihoo.sdkplugging.host.activity.HostProxyActivity

com.qihoo.sdkplugging.host.proxy.activity.VIEW

Permissions

android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.VIBRATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SEND_SMS
android.permission.READ_CONTACTS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
android.permission.CHANGE_NETWORK_STATE
android.permission.SET_WALLPAPER_HINTS
android.permission.SET_WALLPAPER
android.permission.BATTERY_STATS
android.permission.GET_PACKAGE_SIZE
android.permission.READ_SMS
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RECORD_AUDIO
android.permission.CHANGE_CONFIGURATION
android.permission.EXPAND_STATUS_BAR
android.permission.WAKE_LOCK
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_SMS
android.permission.BIND_JOB_SERVICE
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_SMS
android.permission.RESTART_PACKAGES
android.webkit.permission.PLUGIN
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.WRITE_SETTINGS
android.permission.READ_SETTINGS
android.permission.READ_LOGS

Receivers

com.unicom.xiaowo.SecurityReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
com.unicom.xiaowo.security.RECEIVER_CMD

cn.egame.terminal.sdk.EgameCoreReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
cn.egame.terminal.sdk.RECEIVER_CMD

com.qihoo.pushsdk.cx.PushWakeUpReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.SCREEN_OFF
android.intent.action.SCREEN_ON
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

Services

cn.egame.terminal.sdk.EgameCoreService

cn.egame.terminal.sdk.SERVICE_CMD

com.qihoo.pushsdk.keepalive.account.AuthenticationService

android.accounts.AccountAuthenticator

com.qihoo.pushsdk.keepalive.account.SyncService

android.content.SyncAdapter

com.qihoo.sdkplugging.host.service.CommonHostProxyService

com.qihoo.sdkplugging.host.service.CommonHostProxyService
360sdk_1_2008.zip
.apk android arch:arm

com.qihoo.gamecenter.pluginapk

com.qihoo.gamecenter.plugintest.MainActivity

Activities

com.qihoo.gamecenter.plugintest.MainActivity

android.intent.action.MAIN
android.intent.action.CREATE_SHORTCUT

Permissions

android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.BIND_JOB_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS

Receivers

.utils.ClickNotifyReceiver

com.qihoo.gamecenter.pluginapk.clickNotifyReceiver.click

Services

com.qihoo.gamecenter.plugintest.MainService

com.qihoo.gamecenter.plugintest.MainService
unicom_channel_resource.dat
.apk android

com.xiaowo.resourcepro
unicom_resource.dat
.apk android

com.unicom.resourcepro

Android Permissions

4290645ede63062da5eaf20d40721a44_JaffaCakes118

Permissions

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.CHANGE_NETWORK_STATE

android.permission.SET_WALLPAPER_HINTS

android.permission.SET_WALLPAPER

android.permission.BATTERY_STATS

android.permission.GET_PACKAGE_SIZE

android.permission.READ_SMS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RECORD_AUDIO

android.permission.CHANGE_CONFIGURATION

android.permission.EXPAND_STATUS_BAR

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_SMS

android.permission.BIND_JOB_SERVICE

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.RESTART_PACKAGES

android.webkit.permission.PLUGIN

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS

android.permission.READ_LOGS

Sharing

General

Malware Config

Signatures

Files

com.coco.entertainment.immortalracer.qilong.qihu

cn.cmgame.billing.api.GameOpenActivity

Activities

com.qihoo.gamecenter.sdk.activity.ContainerActivity

cn.cmgame.billing.api.GameOpenActivity

cn.cmgame2_0.launch_model.shortcut.main.MiguHomeActivity

cn.egame.terminal.sdk.EgameCoreActivity

com.qihoo.gamecenter.sdk.activity.QhDeepLinkActivity

com.qihoo.sdkplugging.host.activity.HostProxyActivity

Permissions

Receivers

com.unicom.xiaowo.SecurityReceiver

cn.egame.terminal.sdk.EgameCoreReceiver

com.qihoo.pushsdk.cx.PushWakeUpReceiver

Services

cn.egame.terminal.sdk.EgameCoreService

com.qihoo.pushsdk.keepalive.account.AuthenticationService

com.qihoo.pushsdk.keepalive.account.SyncService

com.qihoo.sdkplugging.host.service.CommonHostProxyService

com.qihoo.gamecenter.pluginapk

com.qihoo.gamecenter.plugintest.MainActivity

Activities

com.qihoo.gamecenter.plugintest.MainActivity

Permissions

Receivers

.utils.ClickNotifyReceiver

Services

com.qihoo.gamecenter.plugintest.MainService

com.xiaowo.resourcepro

com.unicom.resourcepro

Android Permissions

4290645ede63062da5eaf20d40721a44_JaffaCakes118