55b2e5c53bfe00713164c2aa2c9a1702_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
55b2e5c53bfe00713164c2aa2c9a1702_JaffaCakes118
Size 17.9MB
Sample240518-tz73dscf69
SHA256 1fc3dbc5a4161d462272560b4b0ab27c588bf37afa2595ed627dc81c3a682f46
MD5 55b2e5c53bfe00713164c2aa2c9a1702
SHA1 87279d1e3732d87e3b5a5c72f138b4502f27124d
SHA512 3bafe2fc651e56ad7f1d84b379d5273545890d2ee8b06e67bcc9a5daba7145dfa98b026a1e4b81aea1ca9c6b029b49f590b6000f6b6e8135e4047e9ce727c618
SSDEEP 393216:ZONPXBL3FFxnm1ucDS+N6cP+r2tF9Y83E7gf/dgmRYtjm:ZO5xpm1dbNLF9RUc2mWta
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

55b2e5c53bfe00713164c2aa2c9a1702_JaffaCakes118

.apk 17.9MB

55b2e5c53bfe00713164c2aa2c9a1702_JaffaCakes118

SHA256 1fc3dbc5a4161d462272560b4b0ab27c588bf37afa2595ed627dc81c3a682f46
MD5 55b2e5c53bfe00713164c2aa2c9a1702
SHA1 87279d1e3732d87e3b5a5c72f138b4502f27124d
SHA512 3bafe2fc651e56ad7f1d84b379d5273545890d2ee8b06e67bcc9a5daba7145dfa98b026a1e4b81aea1ca9c6b029b49f590b6000f6b6e8135e4047e9ce727c618
SSDEEP 393216:ZONPXBL3FFxnm1ucDS+N6cP+r2tF9Y83E7gf/dgmRYtjm:ZO5xpm1dbNLF9RUc2mWta
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.xgbuy.xg

com.xgbuy.xg.activities.MainActivity_

com.xgbuy.xg.activities.RegisterActivity_

com.xgbuy.xg.activities.LoginActivity_

com.xgbuy.xg.activities.FastAndPwdLoginActivity_

com.xgbuy.xg.activities.ForgetPasswordActivity_

com.xgbuy.xg.activities.ResetPasswordActivity_

com.xgbuy.xg.activities.AboutusActivity_

com.xgbuy.xg.activities.SettingActivity_

com.xgbuy.xg.activities.PersonalSettingActivity_

com.xgbuy.xg.activities.ChangePhoneActivity_

com.xgbuy.xg.activities.ChangePwdActivity_

com.xgbuy.xg.activities.FeedbackActivity_

com.xgbuy.xg.activities.AddAdressActivity_

com.xgbuy.xg.activities.SelectLikeTypeActivity_

com.xgbuy.xg.activities.AfterServerActivity_

me.iwf.photopicker.PhotoPickerActivity

me.iwf.photopicker.PhotoPagerActivity

com.xgbuy.xg.activities.RefundApplyActivity_

com.xgbuy.xg.activities.EditRefundActivity_

com.xgbuy.xg.activities.ComplainActivity_

com.xgbuy.xg.activities.ComplainQARActivity_

com.xgbuy.xg.activities.NewUserShareActivity_

com.xgbuy.xg.activities.WebActivity_

com.mob.tools.MobUIShell

android.intent.action.VIEW com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.xgbuy.xg.wxapi.WXEntryActivity

com.xgbuy.xg.wxapi.WXPayEntryActivity

com.xgbuy.xg.activities.UpdatePageActivity_

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.xgbuy.xg.activities.PermissionsActivity

com.xgbuy.xg.activities.MyOrderActivity_

com.xgbuy.xg.activities.BindPhoneActivity_

com.xgbuy.xg.activities.FlashActivity_

android.intent.action.MAIN

com.xgbuy.xg.activities.JupshReceiveActivity_

android.intent.action.VIEW

com.xgbuy.xg.activities.GuideActivity_

com.xgbuy.xg.activities.OrderDetailActivity_

com.xgbuy.xg.activities.ShowPhotoAcitivity_

com.xgbuy.xg.activities.SureOrderActivity_

com.xgbuy.xg.activities.MessageActivity_

com.xgbuy.xg.activities.LoginNewActivity_

com.xgbuy.xg.activities.SettingPasswordActivity_

com.xgbuy.xg.activities.TestMemoryActivity_

com.xgbuy.xg.activities.ShareAppActivity_

com.xgbuy.xg.activities.SelectLikeTypeNewActivity_

cn.xiaoneng.activity.ChatActivity

cn.xiaoneng.activity.LeaveMsgActivity

cn.xiaoneng.activity.ShowCameraActivity

cn.xiaoneng.activity.ShowAlbumActivity

cn.xiaoneng.activity.ValuationActivity

cn.xiaoneng.activity.ShowPictureActivity

cn.xiaoneng.activity.XNExplorerActivity

cn.xiaoneng.video.VideoPreviewActivity

cn.xiaoneng.video.RecordVideoActivity

cn.xiaoneng.video.XNVideoPlayer

com.xgbuy.xg.activities.TestChatActivity

com.xgbuy.xg.activities.PlatformInterventionActivity_

com.xgbuy.xg.activities.InterventionDetailActivity_

com.xgbuy.xg.activities.MoreConsultContentActivity_

com.xgbuy.xg.activities.LiuYanActivity_

com.xgbuy.xg.activities.ShopActivity_

com.xgbuy.xg.activities.AddCommentActivity_

com.xgbuy.xg.activities.MyCommentActivity_

com.xgbuy.xg.activities.AppendCommentActivity_

com.xgbuy.xg.activities.LuckAdrwActivity_

com.xgbuy.xg.activities.ShowHtmlJsonActivity_

com.zhihu.matisse.ui.MatisseActivity

com.zhihu.matisse.internal.ui.AlbumPreviewActivity

com.zhihu.matisse.internal.ui.SelectedPreviewActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

Android Permissions

55b2e5c53bfe00713164c2aa2c9a1702_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.VIBRATE

com.xgbuy.xg.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

Sharing

General

Malware Config

Signatures

File Explorer

55b2e5c53bfe00713164c2aa2c9a1702_JaffaCakes118

com.xgbuy.xg.activities.MainActivity_

com.xgbuy.xg.activities.RegisterActivity_

com.xgbuy.xg.activities.LoginActivity_

com.xgbuy.xg.activities.FastAndPwdLoginActivity_

com.xgbuy.xg.activities.ForgetPasswordActivity_

com.xgbuy.xg.activities.ResetPasswordActivity_

com.xgbuy.xg.activities.AboutusActivity_

com.xgbuy.xg.activities.SettingActivity_

com.xgbuy.xg.activities.PersonalSettingActivity_

com.xgbuy.xg.activities.ChangePhoneActivity_

com.xgbuy.xg.activities.ChangePwdActivity_

com.xgbuy.xg.activities.FeedbackActivity_

com.xgbuy.xg.activities.AddAdressActivity_

com.xgbuy.xg.activities.SelectLikeTypeActivity_

com.xgbuy.xg.activities.AfterServerActivity_

me.iwf.photopicker.PhotoPickerActivity

me.iwf.photopicker.PhotoPagerActivity

com.xgbuy.xg.activities.RefundApplyActivity_

com.xgbuy.xg.activities.EditRefundActivity_

com.xgbuy.xg.activities.ComplainActivity_

com.xgbuy.xg.activities.ComplainQARActivity_

com.xgbuy.xg.activities.NewUserShareActivity_

com.xgbuy.xg.activities.WebActivity_

com.mob.tools.MobUIShell

com.xgbuy.xg.wxapi.WXEntryActivity

com.xgbuy.xg.wxapi.WXPayEntryActivity

com.xgbuy.xg.activities.UpdatePageActivity_

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.xgbuy.xg.activities.PermissionsActivity

com.xgbuy.xg.activities.MyOrderActivity_

com.xgbuy.xg.activities.BindPhoneActivity_

com.xgbuy.xg.activities.FlashActivity_

com.xgbuy.xg.activities.JupshReceiveActivity_

com.xgbuy.xg.activities.GuideActivity_

com.xgbuy.xg.activities.OrderDetailActivity_

com.xgbuy.xg.activities.ShowPhotoAcitivity_

com.xgbuy.xg.activities.SureOrderActivity_

com.xgbuy.xg.activities.MessageActivity_

com.xgbuy.xg.activities.LoginNewActivity_

com.xgbuy.xg.activities.SettingPasswordActivity_

com.xgbuy.xg.activities.TestMemoryActivity_

com.xgbuy.xg.activities.ShareAppActivity_

com.xgbuy.xg.activities.SelectLikeTypeNewActivity_

cn.xiaoneng.activity.ChatActivity

cn.xiaoneng.activity.LeaveMsgActivity

cn.xiaoneng.activity.ShowCameraActivity

cn.xiaoneng.activity.ShowAlbumActivity

cn.xiaoneng.activity.ValuationActivity

cn.xiaoneng.activity.ShowPictureActivity

cn.xiaoneng.activity.XNExplorerActivity

cn.xiaoneng.video.VideoPreviewActivity

cn.xiaoneng.video.RecordVideoActivity

cn.xiaoneng.video.XNVideoPlayer

com.xgbuy.xg.activities.TestChatActivity

com.xgbuy.xg.activities.PlatformInterventionActivity_

com.xgbuy.xg.activities.InterventionDetailActivity_

com.xgbuy.xg.activities.MoreConsultContentActivity_

com.xgbuy.xg.activities.LiuYanActivity_

com.xgbuy.xg.activities.ShopActivity_

com.xgbuy.xg.activities.AddCommentActivity_

com.xgbuy.xg.activities.MyCommentActivity_

com.xgbuy.xg.activities.AppendCommentActivity_

com.xgbuy.xg.activities.LuckAdrwActivity_

com.xgbuy.xg.activities.ShowHtmlJsonActivity_

com.zhihu.matisse.ui.MatisseActivity

com.zhihu.matisse.internal.ui.AlbumPreviewActivity

com.zhihu.matisse.internal.ui.SelectedPreviewActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

cn.xiaoneng.xpush.pushxiaoneng.XPushIMService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.xgbuy.xg.receivers.MyReceiver