63be972fc9f87bd2089c41932338e617_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
63be972fc9f87bd2089c41932338e617_JaffaCakes118
Size 5.0MB
Sample240521-slps8aab8x
SHA256 2fd595cec1d47bf26e9f65afee4f9e18aeac18d638978d2a65e49c070785b425
MD5 63be972fc9f87bd2089c41932338e617
SHA1 f60066add98ac0946409fec04ae1c3f6d1cacc18
SHA512 6b7d460b1fe5bb8e7e0352b7577dc49f0a4efdb83e9d341ce74e94a3d02f66fae8373d72b0b6f1460c2a2931df68e5dce5d68b03faaf9479e2d397f69d103285
SSDEEP 98304:DLlrQhyZTY+btfwIXtEAeZGzkqwc7De6gmdkqkhDFIDLojgloY+:9rQhFsdtdYlzOuhGDMjgl8
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

63be972fc9f87bd2089c41932338e617_JaffaCakes118

.apk 5.0MB

63be972fc9f87bd2089c41932338e617_JaffaCakes118

SHA256 2fd595cec1d47bf26e9f65afee4f9e18aeac18d638978d2a65e49c070785b425
MD5 63be972fc9f87bd2089c41932338e617
SHA1 f60066add98ac0946409fec04ae1c3f6d1cacc18
SHA512 6b7d460b1fe5bb8e7e0352b7577dc49f0a4efdb83e9d341ce74e94a3d02f66fae8373d72b0b6f1460c2a2931df68e5dce5d68b03faaf9479e2d397f69d103285
SSDEEP 98304:DLlrQhyZTY+btfwIXtEAeZGzkqwc7De6gmdkqkhDFIDLojgloY+:9rQhFsdtdYlzOuhGDMjgl8
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.kong.app.book

com.zhulang.reader.ui.splash.SplashActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.CREATE_SHORTCUT

com.zhulang.reader.ui.webstore.BookStoreWebPageActivity

com.zhulang.reader.ui.home.MainActivity

com.zhulang.reader.ui.local.LocalFilesActivity

com.zhulang.reader.ui.local.BookImportActivity

com.zhulang.reader.ui.webstore.ChaptersListActivity

com.zhulang.reader.ui.login.ZhulangAccountLoginActivity

com.zhulang.reader.ui.login.LoginActivity

com.zhulang.reader.ui.home.SearchActivity

com.zhulang.reader.ui.login.MobileRegActivity

com.zhulang.reader.ui.msg.MessageCenterActivity

com.zhulang.reader.ui.webstore.RechargeWebPageActivity

com.zhulang.reader.ui.webstore.SearchWebPageActivity

com.zhulang.reader.ui.autobuy.AutoBuyListActivity

com.zhulang.reader.ui.catalog.CatalogActivity

com.zhulang.reader.ui.read.ReadPageSettingActivity

com.zhulang.reader.ui.font.FontListActivity

com.zhulang.reader.ui.feedback.ActivityMyFeedbackActivity

com.zhulang.reader.ui.about.AboutActivity

com.zhulang.reader.ui.history.HistoryReadActivity

com.zhulang.reader.ui.feedback.FeedbackNormalInfoActivity

com.zhulang.reader.ui.read.ReadPageActivity

com.zhulang.reader.ui.read.ChapterFeedBackActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.zhulang.reader.cmread.SubscribeActivity

com.zhulang.reader.wxapi.WXPayEntryActivity

com.zhulang.reader.wxapi.WXEntryActivity

android.intent.action.VIEW

com.kong.app.book.xyd.wxapi.WXPayEntryActivity

com.kong.app.book.xyd.wxapi.WXEntryActivity

android.intent.action.VIEW

com.kong.app.book.wxapi.WXPayEntryActivity

com.kong.app.book.wxapi.WXEntryActivity

android.intent.action.VIEW

com.kong.app.book.zhulang.wxapi.WXPayEntryActivity

com.kong.app.book.zhulang.wxapi.WXEntryActivity

android.intent.action.VIEW

com.kong.app.book.fengniao.wxapi.WXPayEntryActivity

com.kong.app.book.fengniao.wxapi.WXEntryActivity

android.intent.action.VIEW

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

Android Permissions

63be972fc9f87bd2089c41932338e617_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.CHANGE_NETWORK_STATE

android.permission.SEND_SMS

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

getui.permission.GetuiService.com.kong.app.book

Sharing

General

Malware Config

Signatures

File Explorer

63be972fc9f87bd2089c41932338e617_JaffaCakes118

com.zhulang.reader.ui.splash.SplashActivity

com.zhulang.reader.ui.webstore.BookStoreWebPageActivity

com.zhulang.reader.ui.home.MainActivity

com.zhulang.reader.ui.local.LocalFilesActivity

com.zhulang.reader.ui.local.BookImportActivity

com.zhulang.reader.ui.webstore.ChaptersListActivity

com.zhulang.reader.ui.login.ZhulangAccountLoginActivity

com.zhulang.reader.ui.login.LoginActivity

com.zhulang.reader.ui.home.SearchActivity

com.zhulang.reader.ui.login.MobileRegActivity

com.zhulang.reader.ui.msg.MessageCenterActivity

com.zhulang.reader.ui.webstore.RechargeWebPageActivity

com.zhulang.reader.ui.webstore.SearchWebPageActivity

com.zhulang.reader.ui.autobuy.AutoBuyListActivity

com.zhulang.reader.ui.catalog.CatalogActivity

com.zhulang.reader.ui.read.ReadPageSettingActivity

com.zhulang.reader.ui.font.FontListActivity

com.zhulang.reader.ui.feedback.ActivityMyFeedbackActivity

com.zhulang.reader.ui.about.AboutActivity

com.zhulang.reader.ui.history.HistoryReadActivity

com.zhulang.reader.ui.feedback.FeedbackNormalInfoActivity

com.zhulang.reader.ui.read.ReadPageActivity

com.zhulang.reader.ui.read.ChapterFeedBackActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.zhulang.reader.cmread.SubscribeActivity

com.zhulang.reader.wxapi.WXPayEntryActivity

com.zhulang.reader.wxapi.WXEntryActivity

com.kong.app.book.xyd.wxapi.WXPayEntryActivity

com.kong.app.book.xyd.wxapi.WXEntryActivity

com.kong.app.book.wxapi.WXPayEntryActivity

com.kong.app.book.wxapi.WXEntryActivity

com.kong.app.book.zhulang.wxapi.WXPayEntryActivity

com.kong.app.book.zhulang.wxapi.WXEntryActivity

com.kong.app.book.fengniao.wxapi.WXPayEntryActivity

com.kong.app.book.fengniao.wxapi.WXEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.zhulang.reader.service.DownLoadCoverService

com.zhulang.reader.service.DownloadService

com.zhulang.reader.service.separate.SeparateFileService

com.zhulang.reader.service.draw.DrawPageService

com.zhulang.reader.service.DeleteCacheService

com.zhulang.reader.tinker.service.ZLResultService

com.zhulang.reader.service.LogAlarmService

com.zhulang.reader.service.LogService

com.zhulang.reader.service.PatchService

com.igexin.sdk.PushService

com.igexin.sdk.PushServiceUser

com.igexin.download.DownloadService

com.tencent.tinker.lib.service.TinkerPatchService

com.tencent.tinker.lib.service.TinkerPatchService$InnerService

com.tencent.tinker.lib.service.DefaultTinkerResultService

com.zhulang.reader.service.LogAlarmReceiver

com.zhulang.reader.getui.NotificationReceiver

com.zhulang.reader.getui.PushReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.download.DownloadProvider

Android Permissions

63be972fc9f87bd2089c41932338e617_JaffaCakes118