Errors

Reason
could not process APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax
Reason
could not process APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

  • Target

    4df4ac3ba43274df028ef897370c6dba_JaffaCakes118

  • Size

    21.6MB

  • MD5

    4df4ac3ba43274df028ef897370c6dba

  • SHA1

    b3896d8241e3f83394ebc683bfb3f4b0b71fe770

  • SHA256

    dd31ac40763321d0e291c9ccff4ed5b5893cd91cedc85c8a7b6ee0c9f9e738c6

  • SHA512

    78129b11f1305deed7d0dac46496543d4d8628baf71f71330025b4dee61ccfc8f826cc52e1347a4dda936e91ec9c986996bcb5f7515a6883e46ca897f466a778

  • SSDEEP

    393216:TMqcXzdfRVISwogHmFgY9NxuZ0MgQNw0ANTAD3w29Y38xBU9PkjwuscI:IqiRfHIrm6eN0ZnKNcjw29Y38TYPVN

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 5 IoCs

Files

  • 4df4ac3ba43274df028ef897370c6dba_JaffaCakes118
    .apk android arch:arm

    com.apkol.root

    com.jike.root.SplashActivity


  • Kinguser.apk
    .apk android
  • mod_aid
    .apk android
  • mod_dr
    .apk android
  • wod.jar
    .apk android
  • zgo.jar
    .apk android
  • Kingusernew.apk
    .apk android
  • mod_aid
    .apk android
  • mod_dr
    .apk android
  • wod.jar
    .apk android
  • zgo.jar
    .apk android
  • gdtadv2.jar
    .apk android
  • tmpcert.jar
    .apk android

    com.jike.rootsdk

    .MainActivity


Android Permissions

4df4ac3ba43274df028ef897370c6dba_JaffaCakes118

Permissions

com.apkol.root.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_OWNER_DATA

android.permission.WRITE_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED