General

  • Target

    44c48e04fcaf35f2ab0ae7b79bce9677_JaffaCakes118

  • Size

    22.8MB

  • MD5

    44c48e04fcaf35f2ab0ae7b79bce9677

  • SHA1

    21147fd739b83c5f1d402fa509ad1e5caf676bc7

  • SHA256

    2081055366d025205642a411e5a09a9ad3e1da96f8095c7feab1fe35998725f6

  • SHA512

    9342d378b8294e57e314132f03caefc37c85a0d4ba8140bfea0439f05692991220ad2fb1b80ea2dacbf673785ec6c46f7cb4464a92ad02e0074c5ac4b22281b7

  • SSDEEP

    393216:x7irihyzOqB1cgmeOEoMqJjuQywlM0TBtkXZF1pxwywlM5TBtkXZFrkCq9l1sojB:7hyzOqB1tmeOE0JjNywh2Zbvwyww2ZuV

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 4 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 7 IoCs

Files

  • 44c48e04fcaf35f2ab0ae7b79bce9677_JaffaCakes118
    .apk android arch:arm

    com.caogen.jfddriver

    com.caogen.jfddriver.StartActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


  • autonavi_Resource1_1_0.png
    .apk android

    com.amap.api.navi

    com.amap.api.navi.AmapRouteActivity


Android Permissions

44c48e04fcaf35f2ab0ae7b79bce9677_JaffaCakes118

Permissions

com.caogen.jfddriver.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS