4dedc3be9851a5497faaded719a9d3c9_JaffaCakes118

General

Target

4dedc3be9851a5497faaded719a9d3c9_JaffaCakes118
Size

3.7MB
MD5

4dedc3be9851a5497faaded719a9d3c9
SHA1

37cea6a4f49c63466f3c6490afb953eadf8f51b0
SHA256

a3b012e2e6dfb22812edf2e16c03f281be8fd50d02216d2b842f7f190082b217
SHA512

45eb8017c6614c8bb2f8ae34c48b7a665f98272e99240c1b120a7f774654f472dcdf453e18f959d2b67b318015e28c662c3f7232ea105de68641cde38c9a0f06
SSDEEP

98304:y9+d/m2OsaW4m4k9tMO1ZnSqM2+juHo+i2N+b/u:y9+d+FsadHk9N1rhVHTdN+ru

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

4dedc3be9851a5497faaded719a9d3c9_JaffaCakes118
.apk android arch:arm

com.jb.gosms

.ui.mainscreen.GoSmsMainActivity

Activities

.ui.mainscreen.GoSmsMainActivity

android.intent.action.MAIN
android.intent.action.MAIN
android.intent.action.MAIN

.ui.ComposeMessageActivity

com.jb.gosms.im.IM_CONVERSATION
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SENDTO
android.intent.action.VIEW
android.intent.action.SENDTO
android.intent.action.SEND
android.intent.action.SEND
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.SEARCH_LONG_PRESS

.ui.OnlineSMSSearch

android.intent.action.SEARCH

.ui.ManageSimMessages

android.intent.action.VIEW

.ui.ConfirmRateLimitActivity

com.jb.gosms.RATE_LIMIT_SURPASSED

.ui.SearchActivity

android.intent.action.SEARCH

com.jb.gosms.ui.preference.ConversationPreferenceActivity

com.jb.gosms.walllpaper.inbox
com.jb.gosms.wallpaper.wizard.conversationlist

com.jb.gosms.ui.preference.ComposeMessagePreferenceActivity

com.jb.gosms.wallpaper.conversation
com.jb.gosms.wallpaper.wizard.composemessage

com.jb.gosms.ui.preference.popupcustom.PopupCustomPrefActivity

com.jb.gosms.wallpaper.popup
com.jb.gosms.wallpaper.wizard.popup

com.jb.gosms.ui.cropimage.CropImageActivity

com.jb.gosms.action.CROP

.middlewidget.GoSmsMiddleWidgetConfigureActivity

android.appwidget.action.APPWIDGET_CONFIGURE

.middlewidget.GoSmsMiddleWidgetMoreActivity

com.jb.gosms.middlewidgetmoreactivity

.ui.preference.notification.MusicPickerActivity

android.intent.action.RINGTONE_PICKER

.autoreply.AutoReplyRecordActivity

android.intent.action.MAIN

Permissions

android.permission.PROCESS_OUTGOING_CALLS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CALL_PHONE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_MMS
android.permission.SEND_SMS
android.permission.VIBRATE
android.permission.INTERNET
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INSTALL_DRM
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.DISABLE_KEYGUARD
android.permission.READ_LOGS
android.permission.RESTART_PACKAGES
android.permission.PERSISTENT_ACTIVITY
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.GET_ACCOUNTS
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS

Receivers

.transaction.PushReceiver

android.provider.Telephony.WAP_PUSH_RECEIVED

.transaction.MmsSystemEventReceiver

android.intent.action.CONTENT_CHANGED
com.jb.gosms.transaction.BootCompleteReceiver.BOOT_COMPLETED

.transaction.PrivilegedSmsReceiver

android.provider.Telephony.SMS_RECEIVED

.transaction.SmsReceiver

com.jb.gosms.transaction.BootCompleteReceiver.BOOT_COMPLETED
com.jb.gosms.transaction.MESSAGE_SENT
com.jb.gosms.im.IM_NEW_MESSAGE
com.jb.gosms.im.IM_NEW_ONLINE
com.jb.gosms.im.IM_NEW_OFFLINE
com.jb.gosms.im.IM_SMS_SENT_ACTION
com.jb.gosms.im.NEW_MSGEVENT

.transaction.MessageStatusReceiver

com.jb.gosms.transaction.MessageStatusReceiver.MESSAGE_STATUS_RECEIVED

.transaction.SimFullReceiver

android.provider.Telephony.SIM_FULL

.transaction.SmsRejectedReceiver

android.provider.Telephony.SMS_REJECTED

.smspopup.SmsReceiver

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.WAP_PUSH_RECEIVED
com.android.mms.transaction.MESSAGE_SENT

com.jb.gosms.ui.security.StartSecurityReceiver

com.jb.gosms.transaction.BootCompleteReceiver.BOOT_COMPLETED

.gosmswidgetbase.GoSmsWidgetReceiver

com.jb.gosms.locktypechanged
com.jb.gosms.unlocksuccess
com.jb.gosms.BLACKLIST_CHANGED_ACTION
com.jb.gosms.relockwidget
com.jb.gosms.ConversationEncrypt_change

.iconwidget.GoSmsIconWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

.deskwidget.DeskWidgetReceiver

com.jb.gosms.lockview
com.jb.gosms.updatestatus

.middlewidget.GoSmsMiddleWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

.schedule.ScheduleReceiver

com.jb.gosms.transaction.BootCompleteReceiver.BOOT_COMPLETED

.transaction.BootCompleteReceiver

android.intent.action.BOOT_COMPLETED

com.jb.gosms.autoreply.AutoReplyReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

Services

.transaction.SmsReceiverService

com.jb.gosms.im.IM_SMS_SENT_ACTION

.gosmswidgetbase.GoSmsWidgetService

com.jb.gosms.widgetstartservice

com.jb.gosms.im.CellValidateService

com.jb.gosms.goim.ACTION_CELL_VALIDATE

com.jb.gosms.ui.preference.wallpaper.WallpaperService

com.jb.gosms.wallpaper.wizard.service

Android Permissions

4dedc3be9851a5497faaded719a9d3c9_JaffaCakes118

Permissions

android.permission.PROCESS_OUTGOING_CALLS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INSTALL_DRM

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.DISABLE_KEYGUARD

android.permission.READ_LOGS

android.permission.RESTART_PACKAGES

android.permission.PERSISTENT_ACTIVITY

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.jb.gosms

.ui.mainscreen.GoSmsMainActivity

Activities

.ui.mainscreen.GoSmsMainActivity

.ui.ComposeMessageActivity

.ui.OnlineSMSSearch

.ui.ManageSimMessages

.ui.ConfirmRateLimitActivity

.ui.SearchActivity

com.jb.gosms.ui.preference.ConversationPreferenceActivity

com.jb.gosms.ui.preference.ComposeMessagePreferenceActivity

com.jb.gosms.ui.preference.popupcustom.PopupCustomPrefActivity

com.jb.gosms.ui.cropimage.CropImageActivity

.middlewidget.GoSmsMiddleWidgetConfigureActivity

.middlewidget.GoSmsMiddleWidgetMoreActivity

.ui.preference.notification.MusicPickerActivity

.autoreply.AutoReplyRecordActivity

Permissions

Receivers

.transaction.PushReceiver

.transaction.MmsSystemEventReceiver

.transaction.PrivilegedSmsReceiver

.transaction.SmsReceiver

.transaction.MessageStatusReceiver

.transaction.SimFullReceiver

.transaction.SmsRejectedReceiver

.smspopup.SmsReceiver

com.jb.gosms.ui.security.StartSecurityReceiver

.gosmswidgetbase.GoSmsWidgetReceiver

.iconwidget.GoSmsIconWidgetProvider

.deskwidget.DeskWidgetReceiver

.middlewidget.GoSmsMiddleWidgetProvider

.schedule.ScheduleReceiver

.transaction.BootCompleteReceiver

com.jb.gosms.autoreply.AutoReplyReceiver

Services

.transaction.SmsReceiverService

.gosmswidgetbase.GoSmsWidgetService

com.jb.gosms.im.CellValidateService

com.jb.gosms.ui.preference.wallpaper.WallpaperService

Android Permissions

4dedc3be9851a5497faaded719a9d3c9_JaffaCakes118