General

  • Target

    639330adf8dfdd64234193bbfb4f3267_JaffaCakes118

  • Size

    24.7MB

  • MD5

    639330adf8dfdd64234193bbfb4f3267

  • SHA1

    e5cfda43a10157d9239a2d56d3d180da0b5c3e15

  • SHA256

    1d3b4de60de420b98bc9abf62c1f8d6ce3e7bfc6ef8840bd78eaacf30bb9dcad

  • SHA512

    bbb8f250fc5fc591d2a97986ef9786e4f09722db2258cda64033761f8ca4232ec05db713df869c4887d0809529014e27c46c950d320c7f9257520c68e547c950

  • SSDEEP

    786432:eqyahRrZj+Y7/6hkDnRIn2H8DuZAkUkunJx:KahRrZKG6hkDnRA2fbM

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 10 IoCs

Files

  • 639330adf8dfdd64234193bbfb4f3267_JaffaCakes118
    .apk android arch:arm

    cn.com.bsfit.UMO

    .UMOWelcomeActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


  • autonavi_Resource1_1_0.png
    .apk android

    com.amap.api.navi

    com.amap.api.navi.AmapRouteActivity


Android Permissions

639330adf8dfdd64234193bbfb4f3267_JaffaCakes118

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.CALL_PHONE

android.permission.GET_TASKS

android.permission.REORDER_TASKS

android.permission.RECEIVE_BOOT_COMPLETED