58904845d7ea5efc0b3b73a4c1cb66bb_JaffaCakes118

General

Target
58904845d7ea5efc0b3b73a4c1cb66bb_JaffaCakes118
Size 6.6MB
Sample240519-e7c5naaf3v
SHA256 44992789bf1b883674470f68fafa1a6e34f74f86b424bd6164093d460247fb2b
MD5 58904845d7ea5efc0b3b73a4c1cb66bb
SHA1 02fa40b146163fed9b8bc30025a9703dfdf51b79
SHA512 9766d81ae1aed56e9e0c895c4af7667d4722937400a53da926c123ef62042806505f420f3e400d15a5094bc869ef3afc14d6417b01a846bb8a9509e362baf315
SSDEEP 196608:WULnzxJmiQ7igwcY0kbo8En0OURyv1SyKlGYyQWCVD36:VxUXY3XOmyIGrQBK
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD
Required by text services to bind with the system. Allows apps to handle user text interaction.	android.permission.BIND_TEXT_SERVICE

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

58904845d7ea5efc0b3b73a4c1cb66bb_JaffaCakes118

.apk 6.6MB

58904845d7ea5efc0b3b73a4c1cb66bb_JaffaCakes118

SHA256 44992789bf1b883674470f68fafa1a6e34f74f86b424bd6164093d460247fb2b
MD5 58904845d7ea5efc0b3b73a4c1cb66bb
SHA1 02fa40b146163fed9b8bc30025a9703dfdf51b79
SHA512 9766d81ae1aed56e9e0c895c4af7667d4722937400a53da926c123ef62042806505f420f3e400d15a5094bc869ef3afc14d6417b01a846bb8a9509e362baf315
SSDEEP 196608:WULnzxJmiQ7igwcY0kbo8En0OURyv1SyKlGYyQWCVD36:VxUXY3XOmyIGrQBK
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.jlsoft.inputmethod.latin.jelly.pro

Android Permissions

58904845d7ea5efc0b3b73a4c1cb66bb_JaffaCakes118

Permissions

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_USER_DICTIONARY

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.WRITE_USER_DICTIONARY

android.permission.RECORD_AUDIO

com.android.vending.CHECK_LICENSE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

58904845d7ea5efc0b3b73a4c1cb66bb_JaffaCakes118

com.jlsoft.inputmethod.latin.jelly.pro.BackgroundPreference

com.android.inputmethod.camera.CropImage

com.android.inputmethod.cropimage.CropImageOld

com.jlsoft.inputmethod.latin.jelly.pro.Settings

com.jlsoft.inputmethod.latin.jelly.pro.AdditionalSubtypeSettings

com.jlsoft.inputmethod.latin.jelly.pro.SettingsTabActivity

com.jlsoft.inputmethod.latin.jelly.pro.DictionaryDownload

.PluginDownload

com.android.inputmethod.latin.spellcheck.SpellCheckerSettingsActivity

.Instructions

com.android.inputmethod.deprecated.languageswitcher.SubtypeSelection

com.jlsoft.inputmethod.latin.jelly.pro.font.FontSearcher

com.jlsoft.inputmethod.latin.jelly.pro.font.FontPackageList

com.jlsoft.inputmethod.latin.jelly.pro.font.FontList

com.jlsoft.inputmethod.latin.jelly.pro.theme.ThemeList

LatinIME

com.android.inputmethod.latin.spellcheck.AndroidSpellCheckerService

.SuggestionSpanPickedNotificationReceiver

com.jlsoft.inputmethod.latin.jelly.pro.font.PackageChangeReceiver

com.jlsoft.inputmethod.latin.jelly.pro.font.FontPackageProvider

Sharing

General

Malware Config

Signatures

File Explorer

58904845d7ea5efc0b3b73a4c1cb66bb_JaffaCakes118

com.jlsoft.inputmethod.latin.jelly.pro.BackgroundPreference

com.android.inputmethod.camera.CropImage

com.android.inputmethod.cropimage.CropImageOld

com.jlsoft.inputmethod.latin.jelly.pro.Settings

com.jlsoft.inputmethod.latin.jelly.pro.AdditionalSubtypeSettings

com.jlsoft.inputmethod.latin.jelly.pro.SettingsTabActivity

com.jlsoft.inputmethod.latin.jelly.pro.DictionaryDownload

.PluginDownload

com.android.inputmethod.latin.spellcheck.SpellCheckerSettingsActivity

.Instructions

com.android.inputmethod.deprecated.languageswitcher.SubtypeSelection

com.jlsoft.inputmethod.latin.jelly.pro.font.FontSearcher

com.jlsoft.inputmethod.latin.jelly.pro.font.FontPackageList

com.jlsoft.inputmethod.latin.jelly.pro.font.FontList

com.jlsoft.inputmethod.latin.jelly.pro.theme.ThemeList

LatinIME

com.android.inputmethod.latin.spellcheck.AndroidSpellCheckerService

.SuggestionSpanPickedNotificationReceiver

com.jlsoft.inputmethod.latin.jelly.pro.font.PackageChangeReceiver

com.jlsoft.inputmethod.latin.jelly.pro.font.FontPackageProvider

Android Permissions

58904845d7ea5efc0b3b73a4c1cb66bb_JaffaCakes118