General

  • Target

    61584b32536488233ae8439f02f5d92a_JaffaCakes118

  • Size

    21.5MB

  • MD5

    61584b32536488233ae8439f02f5d92a

  • SHA1

    f113d05916be0e9c2ff2f4c871a68bfb9b7c21a4

  • SHA256

    99fc91010c66be27e4b4b70df81a6c666ba288076ef089e42753d8a46fdc0892

  • SHA512

    02c4ba499abf52a5a95d092fcf7e0515385c89239421abe17eca331c10b6356b0a894a036f895335c064a8a794279399b47d87f65145760e4fd886f865395473

  • SSDEEP

    393216:O52A1BLwo28qjbhOAHO45N2fNTGuqYty/TXfmUGkA7pKNVUPg8N35k/jhN2fc1fY:CTLwh8qjQoN5N2fNGu5tgfmU3Aw8fk/4

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • 61584b32536488233ae8439f02f5d92a_JaffaCakes118
    .apk android arch:arm

    dk.laj.bridgeengineer

    com.was.api.WasActivity


  • adpsdk.apk
    .apk android

    cn.uc.gamesdk.preloader


  • cn.sirius.adpsdk.loader.apk
    .apk android

    cn.sirius.adpsdk.loader


  • libcn.sirius.adpsdk.adp.so
    .apk android

    cn.sirius.adpsdk.adp

    com.qq.e.ads.ADActivity


  • libcn.sirius.adpsdk.update.so
    .apk android

    cn.sirius.adpsdk.update


  • gdtadv2.jar
    .apk android

Android Permissions

61584b32536488233ae8439f02f5d92a_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

dk.laj.bridgeengineer.permission.C2D_MESSAGE

android.permission.ACCESS_WIFI_STATE

com.android.vending.CHECK_LICENSE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_COARSE_UPDATES

android.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.LOCAL_MAC_ADDRESS

android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION