42defa6d054ba2a9a6465f190f774094_JaffaCakes118

General

Target

42defa6d054ba2a9a6465f190f774094_JaffaCakes118
Size

6.3MB
MD5

42defa6d054ba2a9a6465f190f774094
SHA1

f912745d48524cc05d2dc647a5a501f43c278a6e
SHA256

3d0969a907d716fe8c9b39c23db691cf10b6a9aa1bcce97ee79eb1c166e5480a
SHA512

b43907db24f928c130ba178768c9c0f3df47f9d202f4969f43fb775f364de079c2286708100ca4c5e92f3feb25eadb79ca812bfb12d7d675eab16689ce75a7e3
SSDEEP

98304:7JfKT8Ew4bMlzBk/S5i9eU9JuV5+n+0AY1/WnwdUO6WEPoIHM4O5cVVjIRDIAoG5:78T8Ewlllk7R+05IwdyWE91OyIIe

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

42defa6d054ba2a9a6465f190f774094_JaffaCakes118
.apk android arch:arm64 arch:arm arch:mips64 arch:mips arch:x86 arch:x64

com.baojia.chexian

.main.WelcomActivity

Activities

.main.WelcomActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.appkefu.lib.ui.activity.KFWebBrowserActivity

android.intent.action.VIEW

.wxapi.WXEntryActivity

android.intent.action.VIEW

.wxapi.WXPayEntryActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.VIBRATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECORD_AUDIO
android.permission.READ_LOGS
android.permission.WAKE_LOCK
android.permission.CHANGE_CONFIGURATION
android.permission.USE_CREDENTIALS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.EXPAND_STATUS_BAR
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

com.appkefu.lib.receivers.KFNetworkConnectivityReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.appkefu.lib.receivers.KFBootReceiver

android.intent.action.BOOT_COMPLETED

com.appkefu.lib.receivers.KFPowerReceiver

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.appkefu.lib.receivers.KFMessageReceiver

com.appkefu.lib.action.XMPP.MESSAGE_RECEIVED

.receiver.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MEDIA_MOUNTED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

.baidupush.BaiduPushMessageReceiver

com.baidu.android.pushservice.action.MESSAGE
com.baidu.android.pushservice.action.RECEIVE
com.baidu.android.pushservice.action.notification.CLICK

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK
android.intent.action.MEDIA_MOUNTED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

.receiver.DataChangeReceiver

android.intent.action.ACTION_SCREEN_ON
android.intent.action.ACTION_SCREEN_OFF
android.intent.action.ACTION_USER_PRESENT
android.intent.action.ACTION_POWER_DISCONNECTED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.ACTION_TIME_TICK
android.intent.action.ACTION_BOOT_COMPLETED

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

.receiver.ListennerReceiver

com.appkefu.lib.action.XMPP.MESSAGE_RECEIVED

Services

com.appkefu.lib.service.KFMainService

com.appkefu.lib.action.CONNECT
com.appkefu.lib.action.DISCONNECT
com.appkefu.lib.action.TOGGLE
com.appkefu.lib.action.SEND
com.appkefu.lib.action.NETWORK_STATUS_CHANGED
com.appkefu.lib.action.XMPP.MESSAGE_RECEIVED

com.appkefu.OpenUDID.OpenUDID_service

org.openudid.GETUDID

com.baidu.android.pushservice.PushService

com.baidu.android.pushservice.action.PUSH_SERVICE

com.baidu.location.f

com.baidu.location.service_v2.2

Android Permissions

42defa6d054ba2a9a6465f190f774094_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECORD_AUDIO

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.CHANGE_CONFIGURATION

android.permission.USE_CREDENTIALS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.EXPAND_STATUS_BAR

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

Sharing

General

Malware Config

Signatures

Files

com.baojia.chexian

.main.WelcomActivity

Activities

.main.WelcomActivity

com.tencent.tauth.AuthActivity

com.appkefu.lib.ui.activity.KFWebBrowserActivity

.wxapi.WXEntryActivity

.wxapi.WXPayEntryActivity

Permissions

Receivers

com.appkefu.lib.receivers.KFNetworkConnectivityReceiver

com.appkefu.lib.receivers.KFBootReceiver

com.appkefu.lib.receivers.KFPowerReceiver

com.appkefu.lib.receivers.KFMessageReceiver

.receiver.BootCompletedReceiver

.baidupush.BaiduPushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

.receiver.DataChangeReceiver

com.baidu.android.pushservice.RegistrationReceiver

.AppRegister

.receiver.ListennerReceiver

Services

com.appkefu.lib.service.KFMainService

com.appkefu.OpenUDID.OpenUDID_service

com.baidu.android.pushservice.PushService

com.baidu.location.f

Android Permissions

42defa6d054ba2a9a6465f190f774094_JaffaCakes118