Overview

overview

8

Static

static

8

4432168178...18.apk

android-9-x86

8

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

autonavi_R..._0.apk

android-9-x86

autonavi_R..._0.apk

android-10-x64

autonavi_R..._0.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    4432168178ebb7206845cf5b528ce170_JaffaCakes118

  • Size

    13.0MB

  • MD5

    4432168178ebb7206845cf5b528ce170

  • SHA1

    5a23021df20f789f2ad5c0a20c66f9f39c04a8ae

  • SHA256

    2d476f330c386d58f6e529703d4adf50121a2391f03686b057566829daef39c8

  • SHA512

    e0e2754ff30a5d8f5e275c2d2dd1d0cd89fab124d9118f189b5596911d1f36e90b480ac95af1b93ecb318f9d9919e64665921374fd89986b888c38b3d86989ed

  • SSDEEP

    393216:nYchB6pRyDJPrwmqZfvUQC33uHffJVPP3wK+M3YQML3ZlPR+:nt6D0RwLZZo3u/fPyTQoPR+

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 5 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 14 IoCs

Files

  • 4432168178ebb7206845cf5b528ce170_JaffaCakes118
    .apk android arch:arm

    hd.zhbc.ipark.app

    hd.zhbc.ipark.app.ui.activity.SplashActivity


  • amap_resource1_0_0.png
    .apk android

    com.example.amapsdkv2

    com.amap.api.maps.offlinemap.OfflineMapActivity


  • autonavi_Resource1_1_0.png
    .apk android

    com.example.navigationsdk

    .WelcomeActivity


Android Permissions

4432168178ebb7206845cf5b528ce170_JaffaCakes118

Permissions

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.CALL_PHONE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CAMERA

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

hd.zhbc.ipark.app.permission.JPUSH_MESSAGE

android.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS