65a1d4b5bd132db1df7b2a71987a14f8_JaffaCakes118

General

Target

65a1d4b5bd132db1df7b2a71987a14f8_JaffaCakes118
Size

10.7MB
MD5

65a1d4b5bd132db1df7b2a71987a14f8
SHA1

3cf5ff3736444259c7af005c820be6e04988a274
SHA256

96a5573cd25206e779b32fb148f30e575f6ce24dc31dfc23a1e6228a342b70c2
SHA512

077ccb0d24b6e20239f4fff05a8fd03881764679fe79d17d2094d2f14fa9e93a5c9e3178a54c0e88613bd4dbf7b785f13d24ad3e175d61930e68f3f88d3d0063
SSDEEP

196608:9wjjDJE4SSVHChsmcuv7wRLm/9Oft6Ki6pSXpBSnDzfGFye:9w3DmkV4smdERYgft6ipS2nD6d

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

Processes:

description ioc

Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers. android.permission.BIND_WALLPAPER

description	ioc
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers.	android.permission.BIND_WALLPAPER

Requests dangerous framework permissions 9 IoCs

Processes:

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA

Files

65a1d4b5bd132db1df7b2a71987a14f8_JaffaCakes118
.apk android arch:arm arch:x86

com.vlife

com.vlife.homepage.WelcomeActivity

Activities

com.handpet.ui.activity.ShowChooseWallpaperActivity

com.vlife.intent.action.SHOW_SET_WALLPAPER

com.handpet.ui.activity.WallpaperSetPreviewActivity

com.vlife.intent.action.WallpaperSetPreview

com.handpet.ui.activity.WallpaperPackageActivity

com.vlife.intent.action.WALLPAPER_PACKAGE

com.vlife.lockscreen.ui.LockScreenActivity

android.intent.action.MAIN
android.intent.action.EditActivityReturn

com.vlife.lockscreen.ui.EditTextActivity

android.intent.action.editactivity

com.vlife.lockscreen.ui.LockScreenExternalActivity

android.intent.action.lock.external

com.vlife.wxapi.WXEntryActivity

android.intent.action.VIEW

com.desity.wxapi.WXEntryActivity

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.vlife.cashslide.util.WrapperActivity

android.intent.action.wrapper

com.vlife.homepage.WelcomeActivity

android.intent.action.MAIN
action.com.vlife.OPEN_FROM_RESOUCE
com.vlife.intent.action.OPEN_HOMEPAGE
action.com.vlife.handpetactivity.OPEN

com.vlife.homepage.HomeKeyWrapperActivity

android.intent.action.MAIN

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.GET_ACCOUNTS
android.permission.INJECT_EVENTS
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.SET_WALLPAPER
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.DISABLE_KEYGUARD
android.permission.BATTERY_STATS
android.permission.ACCESS_COARSE_LOCATION
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.CAMERA
android.permission.FLASHLIGHT

Receivers

com.handpet.livewallpaper.receiver.PetMainReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.DOWNLOAD_COMPLETE

com.handpet.livewallpaper.receiver.InstallEventReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_REPLACED

com.vlife.lockscreen.BootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_SCANNER_FINISHED

com.vlife.receiver.SdcardReceiver

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_REMOVED
android.intent.action.MEDIA_SHARED

com.vlife.service.net.NetChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.handpet.component.shortcut.ShortCutReceiver

com.vlife.wallpaper.shortcut.UNINSTALL_SHORTCUT

Services

com.handpet.livewallpaper.HandpetLiveWallpaper

android.service.wallpaper.WallpaperService

com.handpet.livewallpaper.VlifeWallpaperIPCService

action.com.vlife.wallpaper.IPC

com.vlife.service.VlifeTaskService

com.vlife.intent.action.DOWNLOAD_START
com.vlife.intent.action.DOWNLOAD_BIND
vlife-card-engine.apk
.apk android arch:arm

com.vlife.plugin.card.engine

Services

com.vlife.plugin.card.impl.event.EventService

com.vlife.plugin.card

Android Permissions

65a1d4b5bd132db1df7b2a71987a14f8_JaffaCakes118

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_ACCOUNTS

android.permission.INJECT_EVENTS

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.SET_WALLPAPER

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.BATTERY_STATS

android.permission.ACCESS_COARSE_LOCATION

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.CAMERA

android.permission.FLASHLIGHT

Sharing

General

Malware Config

Signatures

Files

com.vlife

com.vlife.homepage.WelcomeActivity

Activities

com.handpet.ui.activity.ShowChooseWallpaperActivity

com.handpet.ui.activity.WallpaperSetPreviewActivity

com.handpet.ui.activity.WallpaperPackageActivity

com.vlife.lockscreen.ui.LockScreenActivity

com.vlife.lockscreen.ui.EditTextActivity

com.vlife.lockscreen.ui.LockScreenExternalActivity

com.vlife.wxapi.WXEntryActivity

com.desity.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.vlife.cashslide.util.WrapperActivity

com.vlife.homepage.WelcomeActivity

com.vlife.homepage.HomeKeyWrapperActivity

Permissions

Receivers

com.handpet.livewallpaper.receiver.PetMainReceiver

com.handpet.livewallpaper.receiver.InstallEventReceiver

com.vlife.lockscreen.BootReceiver

com.vlife.receiver.SdcardReceiver

com.vlife.service.net.NetChangeReceiver

com.handpet.component.shortcut.ShortCutReceiver

Services

com.handpet.livewallpaper.HandpetLiveWallpaper

com.handpet.livewallpaper.VlifeWallpaperIPCService

com.vlife.service.VlifeTaskService

com.vlife.plugin.card.engine

Services

com.vlife.plugin.card.impl.event.EventService

Android Permissions

65a1d4b5bd132db1df7b2a71987a14f8_JaffaCakes118