525dbb41ed8f8620718dddca6d9d1de6_JaffaCakes118

General

Target
525dbb41ed8f8620718dddca6d9d1de6_JaffaCakes118
Size 559KB
Sample240518-bc4gkscc86
SHA256 aa6a9dd4491a68d12ffe8e6168e8d8e93463aa61425c110109c44229ecf56143
MD5 525dbb41ed8f8620718dddca6d9d1de6
SHA1 b1d3242adccdcd1bcc8508a0cd3ced890a60816c
SHA512 b20ae605e1f809218eff80727d10b591a7ef607f3bb0dd86c512c72804c4a1b0b9ce3441df792e0fbd81fead8b4a06c8f508f98195a98873d7aa0d7c8b2fa285
SSDEEP 12288:/ivVtiPL9jiipHPKyyr6Yd6dpI8nZLiBGiC0i0923ZcRgk:a+ZdP5yr6YdspICWBG2LUCgk
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

525dbb41ed8f8620718dddca6d9d1de6_JaffaCakes118

.apk 559KB

525dbb41ed8f8620718dddca6d9d1de6_JaffaCakes118

SHA256 aa6a9dd4491a68d12ffe8e6168e8d8e93463aa61425c110109c44229ecf56143
MD5 525dbb41ed8f8620718dddca6d9d1de6
SHA1 b1d3242adccdcd1bcc8508a0cd3ced890a60816c
SHA512 b20ae605e1f809218eff80727d10b591a7ef607f3bb0dd86c512c72804c4a1b0b9ce3441df792e0fbd81fead8b4a06c8f508f98195a98873d7aa0d7c8b2fa285
SSDEEP 12288:/ivVtiPL9jiipHPKyyr6Yd6dpI8nZLiBGiC0i0923ZcRgk:a+ZdP5yr6YdspICWBG2LUCgk
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.ljmobile.yjb.root.uninstall

Android Permissions

525dbb41ed8f8620718dddca6d9d1de6_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

525dbb41ed8f8620718dddca6d9d1de6_JaffaCakes118

.ui.activity.IndexActivity

.ui.activity.MainActivity

.ui.activity.FeedBackActivity

.ui.activity.RecycleBinActivity

.ui.activity.SystemAppActivity

.ui.activity.UserAppActivity

.ui.activity.MoveAppActivity

.ui.activity.ApkFileActivity

.ui.activity.RootHelpActivity

.ui.activity.SettingsActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.star.rp.AdBrowser

com.umeng.common.net.DownloadingService

com.star.rp.AdService

com.star.rp.AdReceiver

com.star.rp.offers.OffersReceiver

Sharing

General

Malware Config

Signatures

File Explorer

525dbb41ed8f8620718dddca6d9d1de6_JaffaCakes118

.ui.activity.IndexActivity

.ui.activity.MainActivity

.ui.activity.FeedBackActivity

.ui.activity.RecycleBinActivity

.ui.activity.SystemAppActivity

.ui.activity.UserAppActivity

.ui.activity.MoveAppActivity

.ui.activity.ApkFileActivity

.ui.activity.RootHelpActivity

.ui.activity.SettingsActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.star.rp.AdBrowser

com.umeng.common.net.DownloadingService

com.star.rp.AdService

com.star.rp.AdReceiver

com.star.rp.offers.OffersReceiver

Android Permissions

525dbb41ed8f8620718dddca6d9d1de6_JaffaCakes118