52923e8a4c944fc01e5295ecfb9650b3_JaffaCakes118

General

Target
52923e8a4c944fc01e5295ecfb9650b3_JaffaCakes118
Size 11.7MB
Sample240518-cemsaafa63
SHA256 1445eaddf56b41b1c18035a0d5b8f92a551354d602b312f02ebbd16dac259f64
MD5 52923e8a4c944fc01e5295ecfb9650b3
SHA1 e1b90f394f3376e109009ccb7038c7a00b2a231c
SHA512 892f58d7edca0ea6a4a30af4a6c8b2eae9a2058b0c3cd7693278f9a18f8653017e9fb21aaea2ae7af54af0dc14244bce7253d6e2f993c3eb3172b946b40b20e1
SSDEEP 196608:usb6VRFz9ZFt5Dtg9jl37V6QZoFpXDn4PzHHNeBTHweJYl+j7hECacv2gB3JioMA:+rt5Rg9jlzypXj4Pzn4pHwuYIPhMgB3f
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

52923e8a4c944fc01e5295ecfb9650b3_JaffaCakes118

.apk 11.7MB

52923e8a4c944fc01e5295ecfb9650b3_JaffaCakes118

SHA256 1445eaddf56b41b1c18035a0d5b8f92a551354d602b312f02ebbd16dac259f64
MD5 52923e8a4c944fc01e5295ecfb9650b3
SHA1 e1b90f394f3376e109009ccb7038c7a00b2a231c
SHA512 892f58d7edca0ea6a4a30af4a6c8b2eae9a2058b0c3cd7693278f9a18f8653017e9fb21aaea2ae7af54af0dc14244bce7253d6e2f993c3eb3172b946b40b20e1
SSDEEP 196608:usb6VRFz9ZFt5Dtg9jl37V6QZoFpXDn4PzHHNeBTHweJYl+j7hECacv2gB3JioMA:+rt5Rg9jlzypXj4Pzn4pHwuYIPhMgB3f
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.yunjiu.keji

Android Permissions

52923e8a4c944fc01e5295ecfb9650b3_JaffaCakes118

Permissions

android.permission.INTERNET

com.huawei.android.launcher.permission.CHANGE_BADGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.FLASHLIGHT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_USER_PRESENT

android.permission.READ_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.INTERNET

android.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.VIBRATE

com.yunjiu.keji.permission.JPUSH_MESSAGE

android.permission.CHANGE_NETWORK_STATE

android.permission.FLASHLIGHT

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

52923e8a4c944fc01e5295ecfb9650b3_JaffaCakes118

com.uzmap.pkg.EntranceActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

com.apicloud.FNPhotograph.CameraActivity

com.uzmap.pkg.uzmodules.uzFNScanner.Zxing.CaptureActivity

com.tencent.connect.common.AssistActivity

com.apicloud.qqplus.LoginActivity

com.apicloud.qqplus.ShareActivity

com.tencent.tauth.AuthActivity

com.tencent.open.yyb.AppbarActivity

com.tencent.connect.avatar.ImageActivity

com.tencent.smtt.sdk.VideoActivity

com.uzmap.pkg.uzmodules.browser.BrowserActivity

com.yunjiu.keji.wxapi.WXEntryActivity

com.uzmap.pkg.uzsocket.UPnsService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

com.uzmap.pkg.uzapp.UPExtraBridge

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.open.apicloud.jpush.JPushReceiver

com.uzmap.pkg.uzapp.UProvider

com.uzmap.pkg.uzapp.DataProvider

cn.jpush.android.service.DataProvider

Sharing

General

Malware Config

Signatures

File Explorer

52923e8a4c944fc01e5295ecfb9650b3_JaffaCakes118

com.uzmap.pkg.EntranceActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

com.apicloud.FNPhotograph.CameraActivity

com.uzmap.pkg.uzmodules.uzFNScanner.Zxing.CaptureActivity

com.tencent.connect.common.AssistActivity

com.apicloud.qqplus.LoginActivity

com.apicloud.qqplus.ShareActivity

com.tencent.tauth.AuthActivity

com.tencent.open.yyb.AppbarActivity

com.tencent.connect.avatar.ImageActivity

com.tencent.smtt.sdk.VideoActivity

com.uzmap.pkg.uzmodules.browser.BrowserActivity

com.yunjiu.keji.wxapi.WXEntryActivity

com.uzmap.pkg.uzsocket.UPnsService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

com.uzmap.pkg.uzapp.UPExtraBridge

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.open.apicloud.jpush.JPushReceiver

com.uzmap.pkg.uzapp.UProvider

com.uzmap.pkg.uzapp.DataProvider

cn.jpush.android.service.DataProvider

Android Permissions

52923e8a4c944fc01e5295ecfb9650b3_JaffaCakes118