General

  • Target

    56463b4de5c0ef91f5459c33e2784120_JaffaCakes118

  • Size

    15.0MB

  • MD5

    56463b4de5c0ef91f5459c33e2784120

  • SHA1

    46b6d10e8eff3bab35df20220ad5d48c649bcbcd

  • SHA256

    80c052719f99b0ac2c7f83410611f66db433f14f24c77f08208153b1db8e3bf9

  • SHA512

    e76bf7d19a1b79a1049d4f4f040c1b443a49a3c8a8537162b3ae50177d3fe44c9807733ea2f087093580bd49220df23646dd74dabd9b873051cf288b1226ef17

  • SSDEEP

    393216:7pg0L1iyQDBCSKQr4v7cQK6BD8KQ0TzgGk:7pggQDUSKs4vjK8D8N0ngGk

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • 56463b4de5c0ef91f5459c33e2784120_JaffaCakes118
    .apk android arch:arm

    com.magic.clmanager

    com.qihoo360.mobilesafe.opti.ui.main.AppEnterActivity


  • appmgr.jar
    .apk android
  • authguide.jar
    .apk android

    com.qihoo360.mobilesafe.authguide

    com.qihoo360.mobilesafe.authguide.MainActivity


  • business.jar
    .apk android arch:arm

    com.qihoo360.mobilesafe.business

    com.qihoo360.mobilesafe.business.ui.TestMainActivity


  • chargescreen.jar
    .apk android

    com.qihoo360.mobilesafe.chargescreen

    com.qihoo360.mobilesafe.chargescreen.ui.GuideActivity


  • deviceinfo.jar
    .apk android arch:x86 arch:arm arch:arm64

    com.qihoo360.mobilesafe.deviceinfo

    com.qihoo360.mobilesafe.deviceinfo.MainActivity


  • floatwindow.jar
    .apk android

    com.qihoo360.mobilesafe.floatwindow

    com.qihoo360.mobilesafe.floatwindow.MainActivity


  • global.jar
    .apk android

    com.global.vxproto_ec


  • lockscreen.jar
    .apk android arch:arm

    com.qihoo360.mobilesafe.lockscreen

    com.qihoo360.mobilesafe.applock.ui.TestScreenActivity


  • p-n-lssvc.jar
    .apk android

    com.qihoo360.mobilesafe.lssvc

    com.qihoo360.plugin.lockscreen.activity.LockScreenHomeActivity


  • lsscv.jar
    .apk android

    com.qihoo360.mobilesafe.lssvc

    com.qihoo360.plugin.lockscreen.activity.LockScreenHomeActivity


  • news.jar
    .apk android arch:arm

    com.qihoo360.mobilesafe.news

    com.qihoo360.news.page.DemoActivity


  • gdtadv2.jar
    .apk android arch:arm64 arch:arm
  • tcore.jar
    .apk android
  • oclt_v3.jar
    .apk android
  • protocol.jar
    .apk android

    com.qihoo360.mobilesafe.protocol

    com.qihoo360.mobilesafe.MainActivity


  • rooter.jar
    .apk android

    com.qihoo.rooter

    .Entry


  • core.dex
    .apk android
  • rt_c.jar
    .apk android
  • shortcut_4.apk
    .apk android

    com.qihoo.cleandroid_cn.onekeycleanshortcut

    com.qihoo.cleandroid_cn.onekeycleanshortcut.MainActivity


Android Permissions

56463b4de5c0ef91f5459c33e2784120_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.REAL_GET_TASKS

android.permission.PACKAGE_USAGE_STATS

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.REORDER_TASKS

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.CAMERA

android.permission.READ_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_MTK_MMHW

android.permission.VIBRATE

android.permission.GET_ACCOUNTS

android.permission.FLASHLIGHT

android.permission.CHANGE_NETWORK_STATE

android.permission.EXPAND_STATUS_BAR

android.permission.ACCESS_COARSE_LOCATION

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.USE_FINGERPRINT

android.permission.INTERACT_ACROSS_USERS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.BLUETOOTH

com.qihoo.antivirus.update.permission.clmanager

com.magic.clmanager.permission.NEWS_SDK_BROADCAST

android.permission.SET_WALLPAPER

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.DISABLE_KEYGUARD

com.google.android.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS