55c71b56745abd161f1b8779f8afb872_JaffaCakes118

Sharing

Copy URL Twitter E-mail

Reason

could not process APK: zip: not a valid zip file

General

Target
55c71b56745abd161f1b8779f8afb872_JaffaCakes118
Size 4.9MB
Sample240518-vcd2gadd67
SHA256 b5fd9587a5725a83a2916811d47178f9077c89d5259ff5223151799e99b2c99d
MD5 55c71b56745abd161f1b8779f8afb872
SHA1 5023295380540c2c04c53b6d40b78d3e75f9034f
SHA512 70cfd6d337e7de9a18f88393dab88a96b599b20cc1c2793338875624df79d4cf9d436ea3a4bd69ac7c87f78e88a654f4d8a00a7538d4063420917ee0c065f7b4
SSDEEP 98304:8o/kMGtpp3SeTgk/pfnsJ5hRx8E0EsSdJ4LAPBMaBlHQkbxN1WDf3:detpp3SeJ/9sJZN0wdCEqaBlwkbxNsDv
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 27 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to access data from sensors that the user uses to measure what is happening inside their body, such as heart rate.	android.permission.BODY_SENSORS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to use SIP service.	android.permission.USE_SIP
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to add voicemails into the system.	com.android.voicemail.permission.ADD_VOICEMAIL
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

File Explorer

55c71b56745abd161f1b8779f8afb872_JaffaCakes118

.apk 4.9MB
yap.cfg

.apk 154KB

55c71b56745abd161f1b8779f8afb872_JaffaCakes118

SHA256 b5fd9587a5725a83a2916811d47178f9077c89d5259ff5223151799e99b2c99d
MD5 55c71b56745abd161f1b8779f8afb872
SHA1 5023295380540c2c04c53b6d40b78d3e75f9034f
SHA512 70cfd6d337e7de9a18f88393dab88a96b599b20cc1c2793338875624df79d4cf9d436ea3a4bd69ac7c87f78e88a654f4d8a00a7538d4063420917ee0c065f7b4
SSDEEP 98304:8o/kMGtpp3SeTgk/pfnsJ5hRx8E0EsSdJ4LAPBMaBlHQkbxN1WDf3:detpp3SeJ/9sJZN0wdCEqaBlwkbxNsDv
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.excelliance.dualaid

android.permission.INTERNET android.permission.READ_CONTACTS android.permission.WAKE_LOCK android.permission.VIBRATE android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.RESTART_PACKAGES android.permission.RECEIVE_SMS android.permission.SEND_SMS android.permission.WRITE_APN_SETTINGS android.permission.READ_SMS android.permission.WRITE_SMS android.permission.READ_PHONE_STATE android.permission.WRITE_SETTINGS android.permission.CHANGE_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.MODIFY_PHONE_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.REORDER_TASKS android.permission.USE_CREDENTIALS android.permission.SYSTEM_ALERT_WINDOW android.permission.KILL_BACKGROUND_PROCESSES android.permission.DISABLE_KEYGUARD android.permission.BIND_APPWIDGET com.android.vending.CHECK_LICENSE com.google.android.c2dm.permission.RECEIVE android.permission.READ_EXTERNAL_STORAGE android.permission.UPDATE_DEVICE_STATS android.permission.RUN_INSTRUMENTATION android.permission.WRITE_SECURE_SETTINGS android.permission.SIGNAL_PERSISTENT_PROCESSES android.permission.ACCESS_LOCATION_EXTRA_COMMANDS com.actionlauncher.playstore.permission.READ_SETTINGS com.huawei.android.launcher.permission.CHANGE_BADGE com.motorola.dlauncher.permission.READ_SETTINGS com.motorola.mmsp.motoswitch.permission.READ_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.aspire.mm.permission.READ_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.ty.launcher.permission.READ_SETTINGS com.s.launcher.permission.READ_SETTINGS com.sonyericsson.homescreen.permission.READ_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.mediatek.launcherplus.permission.READ_SETTINGS com.lenovo.launcher.permission.READ_SETTINGS com.huawei.launcher2.permission.READ_SETTINGS com.huawei.launcher3.permission.READ_SETTINGS com.huawei.android.launcher.permission.READ_SETTINGS com.baiqi.weather.permission.READ_SETTINGS com.bbk.launcher2.permission.READ_SETTINGS com.fede.launcher.permission.READ_SETTINGS com.teslacoilsw.launcher.permission.READ_SETTINGS cn.nubia.launcher.permission.READ_SETTINGS mobi.SyndicateApps.ICS.launcher.permission.READ_SETTINGS com.mx.launcher.permission.READ_SETTINGS com.motorola.dock.DesktopDock.permission.READ_SETTINGS com.lge.launcher.permission.READ_SETTINGS com.thunderst.launcher.permission.READ_SETTINGS org.adw.launcher.permission.READ_SETTINGS com.anddoes.launcher.permission.READ_SETTINGS net.qihoo.launcher.permission.READ_SETTINGS com.apusapps.launcher.permission.READ_SETTINGS com.tsf.shell.permission.READ_SETTINGS com.sec.android.app.twlauncher.settings.READ_SETTINGS org.adwfreak.launcher.permission.READ_SETTINGS android.permission.AUTHENTICATE_ACCOUNTS android.permission.EXPAND_STATUS_BAR com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.htc.launcher.permission.UPDATE_SHORTCUT com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY android.permission.BACKUP android.permission.ACCESS_MOCK_LOCATION android.permission.ACCESS_WIMAX_STATE android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.BODY_SENSORS android.permission.BROADCAST_STICKY android.permission.CALL_PHONE android.permission.CAMERA android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.CHANGE_WIMAX_STATE android.permission.CLEAR_APP_CACHE android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.permission.FLASHLIGHT android.permission.GET_ACCOUNTS android.permission.GET_PACKAGE_SIZE android.permission.GET_TASKS android.permission.MANAGE_ACCOUNTS android.permission.MANAGE_DOCUMENTS android.permission.ACCOUNT_MANAGER android.permission.MODIFY_AUDIO_SETTINGS android.permission.NFC android.permission.PERSISTENT_ACTIVITY android.permission.PROCESS_OUTGOING_CALLS android.permission.READ_CALENDAR android.permission.READ_CALL_LOG android.permission.READ_CELL_BROADCASTS android.permission.READ_INSTALL_SESSIONS android.permission.READ_PROFILE android.permission.READ_SOCIAL_STREAM android.permission.READ_SYNC_SETTINGS android.permission.READ_SYNC_STATS android.permission.READ_USER_DICTIONARY android.permission.RECEIVE_BOOT_COMPLETED android.permission.RECEIVE_MMS android.permission.RECEIVE_WAP_PUSH android.permission.RECORD_AUDIO android.permission.SET_TIME_ZONE android.permission.SET_WALLPAPER android.permission.SET_WALLPAPER_HINTS android.permission.SUBSCRIBED_FEEDS_READ android.permission.SUBSCRIBED_FEEDS_WRITE android.permission.TRANSMIT_IR android.permission.USE_SIP android.permission.WRITE_CALENDAR android.permission.WRITE_CALL_LOG android.permission.WRITE_CONTACTS android.permission.WRITE_PROFILE android.permission.WRITE_SOCIAL_STREAM android.permission.WRITE_SYNC_SETTINGS android.permission.WRITE_USER_DICTIONARY com.android.alarm.permission.SET_ALARM com.android.browser.permission.READ_HISTORY_BOOKMARKS com.android.browser.permission.WRITE_HISTORY_BOOKMARKS com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.vending.BILLING com.android.voicemail.permission.ADD_VOICEMAIL com.google.android.gms.permission.ACTIVITY_RECOGNITION com.google.android.gms.permission.AD_ID_NOTIFICATION com.google.android.googleapps.permission.GOOGLE_AUTH com.google.android.googleapps.permission.GOOGLE_AUTH.OTHER_SERVICES com.google.android.googleapps.permission.GOOGLE_AUTH.YouTubeUser com.google.android.googleapps.permission.GOOGLE_AUTH.adsense com.google.android.googleapps.permission.GOOGLE_AUTH.adwords com.google.android.googleapps.permission.GOOGLE_AUTH.ah com.google.android.googleapps.permission.GOOGLE_AUTH.android com.google.android.googleapps.permission.GOOGLE_AUTH.androidsecure com.google.android.googleapps.permission.GOOGLE_AUTH.blogger com.google.android.googleapps.permission.GOOGLE_AUTH.cl com.google.android.googleapps.permission.GOOGLE_AUTH.cp com.google.android.googleapps.permission.GOOGLE_AUTH.dodgeball com.google.android.googleapps.permission.GOOGLE_AUTH.finance com.google.android.googleapps.permission.GOOGLE_AUTH.gbase com.google.android.googleapps.permission.GOOGLE_AUTH.grandcentral com.google.android.googleapps.permission.GOOGLE_AUTH.groups2 com.google.android.googleapps.permission.GOOGLE_AUTH.health com.google.android.googleapps.permission.GOOGLE_AUTH.ig com.google.android.googleapps.permission.GOOGLE_AUTH.jotspot com.google.android.googleapps.permission.GOOGLE_AUTH.knol com.google.android.googleapps.permission.GOOGLE_AUTH.lh2 com.google.android.googleapps.permission.GOOGLE_AUTH.local com.google.android.googleapps.permission.GOOGLE_AUTH.mail com.google.android.googleapps.permission.GOOGLE_AUTH.mobile com.google.android.googleapps.permission.GOOGLE_AUTH.news com.google.android.googleapps.permission.GOOGLE_AUTH.notebook com.google.android.googleapps.permission.GOOGLE_AUTH.orkut com.google.android.googleapps.permission.GOOGLE_AUTH.print com.google.android.googleapps.permission.GOOGLE_AUTH.sierra com.google.android.googleapps.permission.GOOGLE_AUTH.sierraqa com.google.android.googleapps.permission.GOOGLE_AUTH.sierrasandbox com.google.android.googleapps.permission.GOOGLE_AUTH.sitemaps com.google.android.googleapps.permission.GOOGLE_AUTH.speech com.google.android.googleapps.permission.GOOGLE_AUTH.speechpersonalization com.google.android.googleapps.permission.GOOGLE_AUTH.talk com.google.android.googleapps.permission.GOOGLE_AUTH.wifi com.google.android.googleapps.permission.GOOGLE_AUTH.wise com.google.android.googleapps.permission.GOOGLE_AUTH.writely com.google.android.googleapps.permission.GOOGLE_AUTH.youtube com.google.android.launcher.permission.READ_SETTINGS com.google.android.providers.gsf.permission.READ_GSERVICES com.google.android.providers.talk.permission.READ_ONLY com.google.android.providers.talk.permission.WRITE_ONLY com.google.android.launcher.permission.READ_SETTINGS com.google.android.launcher.permission.WRITE_SETTINGS android.permission.READ_LOGS android.permission.INSTALL_PACKAGES android.permission.DELETE_PACKAGES android.permission.CLEAR_APP_USER_DATA android.permission.WRITE_MEDIA_STORAGE android.permission.ACCESS_CACHE_FILESYSTEM android.permission.READ_OWNER_DATA android.permission.WRITE_OWNER_DATA android.permission.CHANGE_CONFIGURATION android.permission.DEVICE_POWER android.permission.BATTERY_STATS android.permission.ACCESS_DOWNLOAD_MANAGER com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.WRITE_SETTINGS android.permission.INTERACT_ACROSS_USERS com.android.launcher2.permission.READ_SETTINGS com.android.launcher2.permission.WRITE_SETTINGS com.android.launcher3.permission.READ_SETTINGS com.android.launcher3.permission.WRITE_SETTINGS com.meizu.flyme.push.permission.RECEIVE android.permission.PACKAGE_USAGE_STATS com.asus.email.permission.ACCESS_PROVIDER android.permission.USE_FINGERPRINT com.facebook.katana.provider.ACCESS com.facebook.permission.prod.FB_APP_COMMUNICATION com.facebook.permission.prod.SYSTEM_COMMUNICATION com.facebook.katana.permission.CROSS_PROCESS_BROADCAST_MANAGER com.facebook.receiver.permission.ACCESS com.facebook.katana.permission.C2D_MESSAGE com.facebook.katana.permission.RECEIVE_ADM_MESSAGE com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.tencent.mm.plugin.permission.READ com.tencent.mm.plugin.permission.WRITE com.tencent.mm.permission.MM_MESSAGE com.tencent.mm.ext.permission.READ com.tencent.mm.ext.permission.WRITE com.tencent.mm.permission.C2D_MESSAGE com.tencent.mm.wear.message android.permission.INTERACT_ACROSS_USERS com.android.launcher3.permission.WRITE_SETTINGS android.permission.MANAGE_DOCUMENTS com.tencent.msf.permission.account.sync android.permission.ACCESS_SUPERUSER com.android.email.permission.READ_ATTACHMENT android.permission.PREVENT_POWER_KEY com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.anddoes.launcher.permission.UPDATE_COUNT com.majeur.launcher.permission.UPDATE_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS

com.excelliance.dualaid.wxapi.WXEntryActivity

com.excelliance.kxqp.platforms.GameCenterActivity

android.intent.action.MAIN

com.excelliance.kxqp.ui.TaskManagerActivity

show_taskmanager

com.excelliance.kxqp.ui.TaskManagerWhiteListActivity

show_taskmanagerwhitelist

com.excelliance.kxqp.ui.MoreSettingActivity

show_moresetting

com.excelliance.kxqp.ui.HelpCenterActivity

android.intent.action.MAIN

com.excelliance.kxqp.platforms.AddGameFragmentActivity

android.intent.action.MAIN