450fa60ec963a100a8190616acd68126_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

450fa60ec963a100a8190616acd68126_JaffaCakes118
Size

15.1MB
MD5

450fa60ec963a100a8190616acd68126
SHA1

2081db321ec6a2fbdd216249635a21727a130ddd
SHA256

c7f51529b8def1131563db4a1d65ad51558bcd4cf7701eecd2891a65dae90fd2
SHA512

96fa15f419ac7c97ecfadff65375f4dde321dbcfcbb931e90661d408ef32137e655145cbce91d2a8623e55e0c1448752de070bc31fe5440902c0762fd58de988
SSDEEP

393216:oNUPHG2cA+FLWkP9LYMNFOaIQvV990cy7Y6Rg:oNUPHG2b+FHP9kM6YvV9dy7Y6K

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 23 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

Files

450fa60ec963a100a8190616acd68126_JaffaCakes118
.apk android arch:arm

com.chinamobile.contacts.im

.LoadingPage

Activities

.Main

android.intent.action.MAIN
com.chinamobile.contacts.im.MAIN_START_ACTION
android.intent.action.MAIN
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.DIAL
android.intent.action.VIEW
android.intent.action.CALL_BUTTON
android.intent.action.VIEW

.LoadingPage

android.intent.action.MAIN

.contacts.ContactDetailActivity

android.intent.action.VIEW

.contacts.EditContactActivity

android.intent.action.EDIT
android.intent.action.INSERT

.contacts.AddToContactActivity

android.intent.action.INSERT_OR_EDIT

.mms2.ui.ComposeMessageActivity

android.intent.action.VIEW

.mms2.ui.CreateMmsActivity

android.intent.action.VIEW
android.intent.action.SENDTO
android.intent.action.VIEW
android.intent.action.SENDTO
android.intent.action.SEND
android.intent.action.SEND

com.cmcc.sso.sdk.auth.LaunchServiceActivity

com.cmcc.sso.LaunchServiceAcvtivity

com.mob.tools.MobUIShell

android.intent.action.VIEW
com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

.wxapi.WXEntryActivity

android.intent.action.VIEW

com.aspire.yellowpage.main.H5Activity

com.aspire.intent.action.H5

Permissions

com.htc.permission.APP_DEFAULT
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_MMS
android.permission.SEND_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CALL_PHONE
android.permission.READ_PROFILE
android.permission.VIBRATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INSTALL_DRM
android.permission.GET_ACCOUNTS
android.permission.READ_SYNC_STATS
android.permission.INTERNET
android.permission.USE_CREDENTIALS
android.permission.DISABLE_KEYGUARD
android.permission.CHANGE_CONFIGURATION
com.google.android.googleapps.permission.GOOGLE_AUTH
com.google.android.googleapps.permission.GOOGLE_AUTH.cp
android.permission.SUBSCRIBED_FEEDS_READ
android.permission.SUBSCRIBED_FEEDS_WRITE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.GET_TASKS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.SIGNAL_PERSISTENT_PROCESSES
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.BROADCAST_STICKY
android.permission.MANAGE_ACCOUNTS
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_RESPOND_VIA_MESSAGE
android.permission.ACCESS_MOCK_LOCATION
android.permission.ACCESS_GPS
android.permission.CAMERA
android.permission.MANAGE_DOCUMENTS
android.permission.READ_PRIVILEGED_PHONE_STATE.
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
android.permission.RECEIVE_USER_PRESENT
android.permission.BROADCAST_STICKY
cn.cj.pe.permission.INVOKE_PE_AUTO_LOGIN

Receivers

.mms2.transaction.MessageStatusReceiver

com.android.mms.transaction.MessageStatusReceiver.MESSAGE_STATUS_RECEIVED
com.chinamobile.contacts.im.mms2.transaction.MESSAGE_SENT

.mms2.transaction.MmsSystemEventReceiver

android.intent.action.CONTENT_CHANGED

.mms2.transaction.PushReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

.mms2.transaction.SmsReceiver

com.chinamobile.contacts.im.mms2.transaction.action.SEND_MESSAGE
android.provider.Telephony.SMS_DELIVER
android.provider.Telephony.SMS_RECEIVED

com.chinamobile.contacts.im.feiliao.KeepAliveAlarmReceiver

com.chinamobile.contacts.im.feiliao.KEEP_ALIVE

.mms2.transaction.DefaultSmsSettingReceiver

android.provider.Telephony.SMS_DELIVER

com.chinamobile.contacts.im.receiver.RingingCallViewReceiver

com.android.incall.intent.Open_RejectSMS

com.chinamobile.util.LocalBroadcastManager

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE

.privacyspace.PrivacySmsReceiver

com.chinamobile.contacts.im.privacy
com.chinamobile.contacts.im.privacy_receiver

.receiver.IncomingCallsReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL
com.chinamobile.contacts.im.ACTION_PHONE_STATE_EX
android.intent.action.DUAL_PHONE_STATE

com.cmcc.aoe.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT

com.cmcc.aoe.receiver.PackageReceiver

android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_ADDED
com.aoe.action.START_HIGHEST_SERVICE
com.aoe.action.INSERT_AOI_VERSIONS_INFOS

com.cmcc.aoe.receiver.SMSDataReceiver

android.intent.action.DATA_SMS_RECEIVED

com.cmcc.aoe.receiver.SMSNotifyReceiver

com.aoe.action.SMSNotify

com.cmcc.aoe.receiver.SMSWakeupReceiver

android.intent.action.DATA_SMS_RECEIVED

com.cmcc.aoe.receiver.NotifyCationReceiver

com.leadtone.receiver.appid.108100000121

com.cmcc.aoe.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT

.receiver.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED

.receiver.AoeNotifyDataReceiver

com.aoe.AOESERVICE.NotifyData

.receiver.MainProcessReceiver

com.chinamobile.contacts.im.MainProcessAction

.receiver.AlarmReceiver

android.alarm.action.timingonoroff

.enterpriseContact.utils.EnterpriseContactUpdateAlarmReceiver

com.chinamobile.contacts.im.ACTION_ENT_UPDATE_ALARM

.enterpriseContact.utils.NetworkConnectChangedReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE

com.aspire.strangecallssdk.netstate.TANetworkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.gzcpc.conn.CONNECTIVITY_CHANGE

.mms2.receive.TimingSmsReceiver

android.alarm.action.timingsms
android.intent.action.BOOT_COMPLETED

Services

com.chinamobile.contacts.im.mms2.transaction.SmsReceiverService

android.intent.action.RESPOND_VIA_MESSAGE

com.cmcc.sso.service.SsoService

com.cmcc.sso.Action.SsoService

.service.PushService

com.chinamobile.contacts.im.PushService

com.cmcc.aoe.AoeService

com.cmcc.aoe.AOEService.Register
cmcc-sso-2.4.0.9.jar
.apk android

Android Permissions

450fa60ec963a100a8190616acd68126_JaffaCakes118

Permissions

com.htc.permission.APP_DEFAULT

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.READ_PROFILE

android.permission.VIBRATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INSTALL_DRM

android.permission.GET_ACCOUNTS

android.permission.READ_SYNC_STATS

android.permission.INTERNET

android.permission.USE_CREDENTIALS

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_CONFIGURATION

com.google.android.googleapps.permission.GOOGLE_AUTH

com.google.android.googleapps.permission.GOOGLE_AUTH.cp

android.permission.SUBSCRIBED_FEEDS_READ

android.permission.SUBSCRIBED_FEEDS_WRITE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.GET_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.SIGNAL_PERSISTENT_PROCESSES

android.permission.KILL_BACKGROUND_PROCESSES

Sharing

General

Malware Config

Signatures

Files

com.chinamobile.contacts.im

.LoadingPage

Activities

.Main

.LoadingPage

.contacts.ContactDetailActivity

.contacts.EditContactActivity

.contacts.AddToContactActivity

.mms2.ui.ComposeMessageActivity

.mms2.ui.CreateMmsActivity

com.cmcc.sso.sdk.auth.LaunchServiceActivity

com.mob.tools.MobUIShell

.wxapi.WXEntryActivity

com.aspire.yellowpage.main.H5Activity

Permissions

Receivers

.mms2.transaction.MessageStatusReceiver

.mms2.transaction.MmsSystemEventReceiver

.mms2.transaction.PushReceiver

.mms2.transaction.SmsReceiver

com.chinamobile.contacts.im.feiliao.KeepAliveAlarmReceiver

.mms2.transaction.DefaultSmsSettingReceiver

com.chinamobile.contacts.im.receiver.RingingCallViewReceiver

com.chinamobile.util.LocalBroadcastManager

.privacyspace.PrivacySmsReceiver

.receiver.IncomingCallsReceiver

com.cmcc.aoe.receiver.BootReceiver

com.cmcc.aoe.receiver.PackageReceiver

com.cmcc.aoe.receiver.SMSDataReceiver

com.cmcc.aoe.receiver.SMSNotifyReceiver

com.cmcc.aoe.receiver.SMSWakeupReceiver

com.cmcc.aoe.receiver.NotifyCationReceiver

com.cmcc.aoe.receiver.BootReceiver

.receiver.BootCompletedReceiver

.receiver.AoeNotifyDataReceiver

.receiver.MainProcessReceiver

.receiver.AlarmReceiver

.enterpriseContact.utils.EnterpriseContactUpdateAlarmReceiver

.enterpriseContact.utils.NetworkConnectChangedReceiver

com.aspire.strangecallssdk.netstate.TANetworkStateReceiver

.mms2.receive.TimingSmsReceiver

Services

com.chinamobile.contacts.im.mms2.transaction.SmsReceiverService

com.cmcc.sso.service.SsoService

.service.PushService

com.cmcc.aoe.AoeService

Android Permissions

450fa60ec963a100a8190616acd68126_JaffaCakes118