ty.cmd.junk.ui.activity.WelcomeActivity
android.intent.action.MAIN
cn.jpush.android.ui.PushActivity
cn.jpush.android.ui.PushActivity
cn.jpush.android.service.JNotifyActivity
cn.jpush.android.intent.JNotifyActivity
General
-
Target
4784d97cb142db19c28bbd9ba0d8c2cf_JaffaCakes118
-
Size
13.9MB
-
MD5
4784d97cb142db19c28bbd9ba0d8c2cf
-
SHA1
d76bd3c2487b9bf589e1509db7ca88ba5ba594c0
-
SHA256
4b705bc92179fea93303df46ccb8e3c26a4b2f590ff690e6afeb2763ff23ccf6
-
SHA512
9eaa6cef6b0d9c4b159d5bacc7283340f8ae3ffec86b44959ed1e546290603457869484c07ab3fee703f837e0bf35b42a76ed7c6ac9a856f5b252b62c2b37f75
-
SSDEEP
393216:STDpuZymeOlB+VZvfuIT36bdYT0+5YBoEGKg:QoymeOlqBfuIeNoEng
Score
8/10
Malware Config
Signatures
-
Patched UPX-packed file 1 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Requests dangerous framework permissions 9 IoCs
Files
-
4784d97cb142db19c28bbd9ba0d8c2cf_JaffaCakes118
ty.cmd.junk
ty.cmd.junk.ui.activity.WelcomeActivity
-
amap_resource1_0_0.png
com.amap.api.map3d
Android Permissions
4784d97cb142db19c28bbd9ba0d8c2cf_JaffaCakes118
Permissions
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
ty.cmd.junk.permission.JPUSH_MESSAGE
android.permission.RECEIVE_USER_PRESENT
android.permission.WRITE_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.VIBRATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.CHANGE_NETWORK_STATE
android.permission.GET_TASKS