General

  • Target

    5ef84da457a6d71011b118581586ce5e_JaffaCakes118

  • Size

    21.2MB

  • MD5

    5ef84da457a6d71011b118581586ce5e

  • SHA1

    2b4fc9b842994f5e19ffaafea5e294d204bb429c

  • SHA256

    99565f8feda384a8d66b9196a59fcd753953db7e312de4629fc8f6d4357b846f

  • SHA512

    59ecdb625fa6193dcc2cb3a458560faa793f8d6a3fd2acb4e01e4c6228d2d8de613b8e5c458d134c697477205373d8bebac3a1ff7d31c106ccca1669bab90db1

  • SSDEEP

    393216:Z7FygsT82ZiTbn2rOH2OQikgAGGevtuWA9Gc5wu1ZQxNoRV75rqAXtWEwCjGxM:qddiDuLGGevtun9Lw+ZQsRV/tWEwCaxM

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 10 IoCs

Files

  • 5ef84da457a6d71011b118581586ce5e_JaffaCakes118
    .apk android arch:arm64 arch:arm

    com.jiarui.service.yearflavor

    com.jiarui.service.yearflavor.ui.templateMain.WelcomeActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

5ef84da457a6d71011b118581586ce5e_JaffaCakes118

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.READ_SETTINGS

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.jiarui.service.yearflavor.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT