General
- Target 4f4bc0c17e6e5b8c69d5fd828c0f6b00_JaffaCakes118
- Size 4.4MB
- Sample240517-k4cbvabc34
- SHA256 cefc25189f332ce95b39e2ac040ca0454981f676a0e2101f637b537a85646698
- MD5 4f4bc0c17e6e5b8c69d5fd828c0f6b00
- SHA1 4415f3fe00bf83f5f921dcc7c5dd3156ebd4dcef
- SHA512 81817450d395fe0f93fde69bc4b507f5c622a3a4a4e20859bb7ed7f28995ba4bbd505ce4fe7a3b2e18a1bbfdb271d8841ca285d2f2f7754b582fc67b9288d617
- SSDEEP 98304:41VxEVo43uzlr3RvOIPcNajvCt3/0LJfRuqo:OH/bhBXhj0v0LJfR8
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4f4bc0c17e6e5b8c69d5fd828c0f6b00_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
4f4bc0c17e6e5b8c69d5fd828c0f6b00_JaffaCakes118.apk
Resource
android-33-x64-arm64-20240514-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 4f4bc0c17e6e5b8c69d5fd828c0f6b00_JaffaCakes118
- Size 4.4MB
- SHA256 cefc25189f332ce95b39e2ac040ca0454981f676a0e2101f637b537a85646698
- MD5 4f4bc0c17e6e5b8c69d5fd828c0f6b00
- SHA1 4415f3fe00bf83f5f921dcc7c5dd3156ebd4dcef
- SHA512 81817450d395fe0f93fde69bc4b507f5c622a3a4a4e20859bb7ed7f28995ba4bbd505ce4fe7a3b2e18a1bbfdb271d8841ca285d2f2f7754b582fc67b9288d617
- SSDEEP 98304:41VxEVo43uzlr3RvOIPcNajvCt3/0LJfRuqo:OH/bhBXhj0v0LJfR8
- MD5 SHA1 SHA512 SSDEEP
Checks if the Android device is rooted.
Checks known Qemu files.
Checks for known Qemu files that exist on Android virtual device images.
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Queries the mobile country code (MCC)
Registers a broadcast receiver at runtime (usually for listening for system events)
Checks if the internet connection is available