42bad50021f8d6815b58968f24e62b50_JaffaCakes118

General

Target

42bad50021f8d6815b58968f24e62b50_JaffaCakes118
Size

27.6MB
MD5

42bad50021f8d6815b58968f24e62b50
SHA1

6676555bee0d7cab36ef720a1152fbe281728c94
SHA256

b3836ff021a27748e56cb1edec3ce6443014286b309273a9307123e39b2e3861
SHA512

44622196446908c6ef898926f6ae61b4005868458ea60241c3f90888d4a820585d3af614072e71c1bd7cd113cb1decae0c6635198a9d16ff97b99724827a3d2f
SSDEEP

786432:aCrBOIVpPtMgdNCaFWYBWLJ/9FuLR8QClUFcdBYAh:0mp1MgHC2BwToR0gGrh

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

42bad50021f8d6815b58968f24e62b50_JaffaCakes118
.apk android arch:arm arch:x86

com.tgame.rushball

com.tgame.rushball.UnityPlayerActivity

Activities

com.tgame.rushball.UnityPlayerActivity

android.intent.action.MAIN

com.unity.purchasing.googleplay.VRPurchaseActivity

com.google.vr.vrcore.ACTION_NONE

Permissions

android.permission.INTERNET
com.android.vending.BILLING
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE

Receivers

com.appsflyer.MultipleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.duapps.ad.base.PackageAddReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.ipl.iplclient.receiver.InstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.duapps.ad.video.NetworkStateReceiver

android.NET.conn.CONNECTIVITY_CHANGE
android.Net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE

com.dianxinos.outerads.ScreenOnReceiver

android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.intent.action.USER_PRESENT

com.android.apps.pros.LocalCReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.USER_PRESENT

com.dianxinos.outerads.ad.notification.NotificationClickReceiver

game.notification.click

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

Services

Android Permissions

42bad50021f8d6815b58968f24e62b50_JaffaCakes118

Permissions

android.permission.INTERNET

com.android.vending.BILLING

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

Files

com.tgame.rushball

com.tgame.rushball.UnityPlayerActivity

Activities

com.tgame.rushball.UnityPlayerActivity

com.unity.purchasing.googleplay.VRPurchaseActivity

Permissions

Receivers

com.appsflyer.MultipleInstallBroadcastReceiver

com.duapps.ad.base.PackageAddReceiver

com.ipl.iplclient.receiver.InstallReferrerReceiver

com.duapps.ad.video.NetworkStateReceiver

com.dianxinos.outerads.ScreenOnReceiver

com.android.apps.pros.LocalCReceiver

com.dianxinos.outerads.ad.notification.NotificationClickReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

Services

Android Permissions

42bad50021f8d6815b58968f24e62b50_JaffaCakes118