General

  • Target

    562ca4d88d0998259deb9466c5ec1783_JaffaCakes118

  • Size

    31.1MB

  • MD5

    562ca4d88d0998259deb9466c5ec1783

  • SHA1

    2d6454ab0a012a6b609d1b6fcb23492e7616e3f7

  • SHA256

    911b1397b9b311ecc5b8c62c047a75da765ae2830b8d76e5ae5523a6311ccf54

  • SHA512

    6761d7179b5edbb6a836d1db8b26a0180ad7a5f227dd278e2b37a646d0c05eb8ae152ed0625254b432596e5e0aee045c7411f342e57783fd03fd2ab7695b0ee7

  • SSDEEP

    393216:FsyCNVKpLdZ0Dw+7AgoBg/vm6J94bAGE81665kRJbsfdjuGNwFmnbXB6pBCj:kVKpLdZ0rF/JmbAM6zJbsfx5NNV6Sj

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 20 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 20 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 22 IoCs

Files

  • 562ca4d88d0998259deb9466c5ec1783_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    com.account.book.quanzi

    com.account.book.quanzi.activity.SplashActivity


  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

562ca4d88d0998259deb9466c5ec1783_JaffaCakes118

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.WRITE_CONTACTS

android.permission.USE_FINGERPRINT

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

getui.permission.GetuiService.com.account.book.quanzi

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.CAMERA

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_COARSE_UPDATES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.RECORD_AUDIO

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.CAMERA

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.vending.BILLING

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS