619826d453ebc2561c1b71bd15fb5fba_JaffaCakes118

General

Target

619826d453ebc2561c1b71bd15fb5fba_JaffaCakes118
Size

25.1MB
MD5

619826d453ebc2561c1b71bd15fb5fba
SHA1

bf50c0e973a85babc4597938d051948704632892
SHA256

b584ec1bf58a71f636f005bbab53661a80a7647a1ca8c2aa76d4de2b7ca60b62
SHA512

1deb11c3f7ebf6a0dd9cc954067280e8f788bb903f83713da2f52feb5ab21d7793c0e72730731250c0f221a67ae4da69fe42de2fe0a72f107962e4854108591f
SSDEEP

786432:bpI46sMgzIg/LSYoOHBGDigRJoU2Dyf4WDI+7q:bpIWzIcSYoIBEPRiDyfv8+m

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS

Files

619826d453ebc2561c1b71bd15fb5fba_JaffaCakes118
.apk android arch:arm

com.tencent.tmgp.flamingo.salamander

com.flamingo.salamander.LoadActivityForChannel

Activities

com.flamingo.salamander.LoadActivityForChannel

android.intent.action.MAIN

cn.cmgame.billing.api.GameOpenActivity

android.intent.action.CHINAMOBILE_OMS_GAME

safiap.framework.ui.UpdateHintActivity

safiap.framework.ACTION_TO_INSTALL
safiap.framework.ACTION_TO_INSTALL_IAP
safiap.framework.ACTION_NETWORK_ERROR_IAP
safiap.framework.ACTION_NETWORK_ERROR_FRAMEWORK

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
android.permission.READ_CONTACTS
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.DISABLE_KEYGUARD
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.VIBRATE

Receivers

cn.play.dserv.DsReceiver

cn.play.dservice
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

safiap.framework.CheckUpdateReceiver

safiap.framework.ACTION_CANCEL_NOTIFICATION
safiap.GET_SHARED_DATA
safiap.framework.ACTION_SET_TIMER

com.tencent.mm.sdk.plugin.MMPluginOAuth$Receiver

com.tencent.mm.sdk.plugin.Intent.ACTION_RESPONSE

com.tencent.mm.sdk.channel.MMessage$Receiver

com.tencent.mm.sdk.channel.Intent.ACTION_MESSAGE

Services

safiap.framework.SafFrameworkManager

safiap.framework.sdk.ISAFFramework
safiap.framework.ACTION_START_DOWNLOAD
safiap.framework.ACTION_CHECK_UPDATE

com.flamingo.flplatform.util.OpenUDID_service

com.flamingo.flplatform.util.GETUDID
GH.data
.apk android

cn.emagsoftware.gamehall

.GameHallShowcase

Activities

.GameHallShowcase

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CALL_PHONE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CHANGE_NETWORK_STATE
android.permission.RECORD_AUDIO
android.permission.WRITE_SETTINGS

Receivers

.service.ServiceReceiver

android.intent.action.USER_PRESENT

Services

Android Permissions

619826d453ebc2561c1b71bd15fb5fba_JaffaCakes118

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.DISABLE_KEYGUARD

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

Sharing

General

Malware Config

Signatures

Files

com.tencent.tmgp.flamingo.salamander

com.flamingo.salamander.LoadActivityForChannel

Activities

com.flamingo.salamander.LoadActivityForChannel

cn.cmgame.billing.api.GameOpenActivity

safiap.framework.ui.UpdateHintActivity

Permissions

Receivers

cn.play.dserv.DsReceiver

safiap.framework.CheckUpdateReceiver

com.tencent.mm.sdk.plugin.MMPluginOAuth$Receiver

com.tencent.mm.sdk.channel.MMessage$Receiver

Services

safiap.framework.SafFrameworkManager

com.flamingo.flplatform.util.OpenUDID_service

cn.emagsoftware.gamehall

.GameHallShowcase

Activities

.GameHallShowcase

Permissions

Receivers

.service.ServiceReceiver

Services

Android Permissions

619826d453ebc2561c1b71bd15fb5fba_JaffaCakes118