65c930760ff1725296a5540b876f2d4e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
65c930760ff1725296a5540b876f2d4e_JaffaCakes118
Size 8.6MB
Sample240522-dh81csad31
SHA256 7d3c97afbac25ca5e481e4b910f9692761386b988215a2a62cda5f405703eacd
MD5 65c930760ff1725296a5540b876f2d4e
SHA1 59fbd48e1e544236867fe0e56dc252d01c52a54a
SHA512 ffd7a169258f78a6890b4398a88a6419d7d10fea3a862d82fd4ddc7cf94f00608550bea611e11b476f117081ab95a8a0d30a04444b8e790c25b3d302fe86e977
SSDEEP 196608:xpB+OgJ1xn0QGy81oUrs5ngaZkswwSj+QPw2+:F+RHn0XVoUA5HZwVj+QPw2+
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

File Explorer

65c930760ff1725296a5540b876f2d4e_JaffaCakes118

.apk 8.6MB
gdtadv2.jar

.apk 420KB

65c930760ff1725296a5540b876f2d4e_JaffaCakes118

SHA256 7d3c97afbac25ca5e481e4b910f9692761386b988215a2a62cda5f405703eacd
MD5 65c930760ff1725296a5540b876f2d4e
SHA1 59fbd48e1e544236867fe0e56dc252d01c52a54a
SHA512 ffd7a169258f78a6890b4398a88a6419d7d10fea3a862d82fd4ddc7cf94f00608550bea611e11b476f117081ab95a8a0d30a04444b8e790c25b3d302fe86e977
SSDEEP 196608:xpB+OgJ1xn0QGy81oUrs5ngaZkswwSj+QPw2+:F+RHn0XVoUA5HZwVj+QPw2+
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.market2345

android.permission.INSTALL_PACKAGES android.permission.RECEIVE_BOOT_COMPLETED android.permission.DISABLE_KEYGUARD android.permission.ACCESS_NETWORK_STATE android.permission.GET_ACCOUNTS android.permission.USE_CREDENTIALS android.permission.INTERNET android.permission.SET_WALLPAPER android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_SETTINGS android.permission.READ_SETTINGS android.permission.READ_SYNC_SETTINGS android.permission.WRITE_SYNC_SETTINGS android.permission.MANAGE_ACCOUNTS android.permission.READ_PHONE_STATE com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.WRITE_SETTINGS com.android.launcher2.permission.READ_SETTINGS com.android.launcher2.permission.WRITE_SETTINGS com.android.launcher3.permission.READ_SETTINGS com.android.launcher3.permission.WRITE_SETTINGS android.permission.GET_TASKS android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.WAKE_LOCK android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.CHANGE_WIFI_STATE android.permission.CLEAR_APP_CACHE android.permission.GET_PACKAGE_SIZE android.permission.KILL_BACKGROUND_PROCESSES android.permission.VIBRATE android.permission.CAMERA android.permission.FLASHLIGHT android.permission.EXPAND_STATUS_BAR android.permission.BIND_ACCESSIBILITY_SERVICE android.permission.RECEIVE_USER_PRESENT android.permission.SYSTEM_ALERT_WINDOW android.permission.BATTERY_STATS android.permission.AUTHENTICATE_ACCOUNTS android.permission.PROCESS_OUTGOING_CALLS android.permission.ACCESS_COARSE_UPDATES android.permission.ACCESS_LOCATION_EXTRA_COMMANDS com.android.launcher.permission.INSTALL_SHORTCUT com.market2345.permission.JPUSH_MESSAGE android.permission.PACKAGE_USAGE_STATS android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.REQUEST_INSTALL_PACKAGES com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.anddoes.launcher.permission.UPDATE_COUNT com.majeur.launcher.permission.UPDATE_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS android.permission.READ_APP_BADGE com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS me.everything.badger.permission.BADGE_COUNT_READ me.everything.badger.permission.BADGE_COUNT_WRITE android.permission.BLUETOOTH

com.market2345.ui.applist.AppListActivity

com.market2345.ui.applist.activity.ClassifyListActivity

com.market2345.ui.applist.activity.WonderfulFoundActivity

com.market2345.ui.navigation.NavigationActivity

android.intent.action.MAIN android.intent.action.CREATE_SHORTCUT com.market2345.hotspot android.intent.action.VIEW

com.market2345.ui.home.HomeTabActivity

2345market.intent.action.DOWNLOAD_LIST action.2345manager.mainactivity android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.market2345.home.FakeActivityForPCService

android.intent.action.MAIN

com.market2345.ui.detail.DetailActivity

com.market2345.ui.detail.HistoryVersionActivity

com.market2345.ui.manager.IgnoredAppsActivity

com.market2345.ui.settings.DiagnosticActivity

com.market2345.ui.about.AboutActivity

com.market2345.ui.feedback.FeedBackActivity

com.market2345.ui.feedback.MyFeedBackActivity

com.market2345.ui.settings.SettingActivity

com.market2345.ui.dumpclean.CleanSetActivity

com.market2345.ui.lm.activity.FastinstallActivity

com.market2345.ui.dumpclean.ClearUnInstallDialog

com.market2345.ui.dumpclean.CleanTrustActivity

com.market2345.ui.dumpclean.FileDetailsActivity

com.market2345.ui.startup.StartupActivity

com.market2345.ui.shortcut.ShortcutActivity

android.intent.action.CREATE_SHORTCUT com.market2345.clean

com.google.zxing.client.android.CaptureActivity

com.market2345.ui.qrscan.QRResultActivity

com.market2345.ui.filebrowser.FileCategoryActivity

com.market2345.ui.filebrowser.FilePicDirActivity

com.market2345.ui.filebrowser.FileImageActivity

com.market2345.ui.filebrowser.FileBigImageActivity

com.market2345.ui.filebrowser.FileMusicActivity

com.market2345.ui.filebrowser.FileVideoActivity

com.market2345.ui.filebrowser.FileDocumentsActivity

com.market2345.ui.filebrowser.FileApkActivity

com.market2345.ui.filebrowser.FilePackageActivity

com.market2345.ui.wificonn.ConnPCGuideActivity

com.market2345.ui.wificonn.PCConnectedActivity

com.market2345.ui.wificonn.WifiReceivedDialogActivity

com.market2345.ui.wificonn.WifiReceivedFilesActivity

com.market2345.ui.applist.activity.GameSoftWeekRankListActivity

com.market2345.ui.update.UpdateDialogActivity

com.market2345.ui.manager.InstallManagerActivity

com.market2345.ui.manager.UpdateAppActivity

com.market2345.ui.topic.TopicActivity

com.market2345.ui.base.activity.WebViewAppActivity

com.market2345.ui.settings.UserPlanActivity

com.market2345.ui.usercenter.view.activity.PointMallActivity

com.market2345.ui.settings.LicenseActivity

com.market2345.os.download.view.SignatureErrorDialogActivity

com.market2345.os.download.view.DownConditionDialogActivity

com.market2345.ui.dumpclean.FileDetailsActivityPaths

com.market2345.ui.dumpclean.main.SilverActivity

com.market2345.ui.account.PrivateInfoActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.market2345.ui.account.gift.GiftCenterActivity

com.market2345.ui.account.gift.GiftDetailActivity

com.market2345.ui.topic.PSirTopicListActivity

com.market2345.os.download.activity.PushNotificationMessageActivity

com.market2345.ui.mygame.MyGameActivity

android.intent.action.CREATE_SHORTCUT com.market2345.mygame

com.market2345.ui.mygame.AddGameActivity

com.umeng.socialize.view.ShareActivity

com.market2345.ui.wxapi.WXEntryActivity

com.market2345.ui.mygame.EmptyTransitionActivity

com.market2345.os.accessibility.OpenAccessibilityTipActivity

com.market2345.ui.usercenter.view.customview.CheckinDialog

com.market2345.ui.xingqiu.view.AuthorityTipDialog

com.market2345.ui.dumpclean.tencent.view.TencentCleanActivity

com.market2345.ui.dumpclean.tencent.view.TencentDetailActivity

com.market2345.ui.dumpclean.tencent.view.PicDetailActivity

com.market2345.util.notificationmanage.residentnotification.settings.view.NotificationSettingsActivity

com.market2345.util.notificationmanage.residentnotification.view.AccelerateActivity

android.intent.action.MAIN

com.market2345.ui.search.view.activity.CleanSearchActivity

com.market2345.os.download.activity.DownloadActivity

com.market2345.ui.slidemenu.ClassifyActivity

com.market2345.ui.topic.TopicListActivity

com.market2345.ui.topic.RecomGameTopicListActivity

com.market2345.ui.usercenter.view.activity.TaskCenterActivity

com.market2345.ui.cloudbackup.view.CloudBackupActivity

com.market2345.ui.cloudbackup.appbackup.view.RecoverAppActivity

com.market2345.ui.feedback.ImageSelectActivity

com.market2345.os.download.view.AntiHijackDialogActivity

com.market2345.os.download.view.HijackReasonsActivity

com.market2345.ui.detail.ActDetailActivity

com.market2345.ui.push.HomePicActivity

com.market2345.ui.refinedlist.RefinedListActivity

com.market2345.ui.base.pure.CrashShowActivity

com.market2345.ui.base.activity.WebViewActivity

com.market2345.os.hotpatch.activity.KillSelfActivity

com.market2345.ui.infostream.selectcity.SelectCityActivity

com.baidu.mobads.AppActivity

com.market2345.ui.infostream.NewsActivity

com.qq.e.ads.ADActivity

com.market2345.os.placeholder.A

com.market2345.os.placeholder.A1

com.market2345.os.placeholder.A10

com.market2345.os.placeholder.A11

com.market2345.os.placeholder.A12

com.market2345.os.placeholder.A13

com.market2345.os.placeholder.A20

com.market2345.os.placeholder.A21

com.market2345.os.placeholder.A22

com.market2345.os.placeholder.A23

com.market2345.os.placeholder.A30

com.market2345.os.placeholder.A31

com.market2345.os.placeholder.A32

com.market2345.os.placeholder.A33

com.market2345.ui.xingqiu.view.XQTaskActivity

com.market2345.ui.xingqiu.view.ShowUseGainGuideActivity

com.market2345.ui.xingqiu.view.GameTaskActivity

com.market2345.ui.xingqiu.view.GameTaskDetailActivity

com.market2345.os.vpn.SweeperActivity

com.market2345.ui.xingqiu.view.UseGainActivity

com.market2345.ui.xingqiu.view.UseAppTaskActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.we.ui.LandingActivity

com.we.ui.PermissionActivity

com.union.ui.UnionClientReciveActivity

com.union.ui.UnionAuthorizationActivity

com.usercenter2345.activity.LoginByPhoneActivity

com.usercenter2345.activity.LoginByUserOrEmailActivity

com.usercenter2345.activity.LoginWithoutRegisterActivity

com.usercenter2345.activity.LoginOrRegByMsgStep1Activity

com.usercenter2345.activity.LoginOrRegByMsgStep2Activity

com.usercenter2345.activity.BindEmailActivity

com.usercenter2345.activity.ModifyPasswordActivity

com.usercenter2345.activity.PwdFirstSetActivity

com.usercenter2345.activity.SetPassWordActivity

com.usercenter2345.activity.BindPhoneActivity

com.usercenter2345.activity.ModifyBindedEmailActivity

com.usercenter2345.activity.ModifyBindedEmailSelectWaysActivity

com.usercenter2345.activity.ModifyBindedEmailByEmailActivity

com.usercenter2345.activity.ModifyBindedEmailByPhoneActivity

com.usercenter2345.activity.ModifyBindedEmailByEmailModifyActivity

com.usercenter2345.activity.ModifyBindedPhoneActivity

com.usercenter2345.activity.ModifyBindedPhoneStep2Activity

com.usercenter2345.activity.PwdGetByLocalActivity

com.usercenter2345.activity.PwdGetByPhone

com.usercenter2345.activity.PwdGetByEmail

com.usercenter2345.activity.PwdResetActivity

com.usercenter2345.activity.PrivacyStatementActivity

com.tencent.connect.common.AssistActivity

com.usercenter2345.activity.ChangeAvatorActivity

com.usercenter2345.activity.PrivacyProlicyActivity

com.cmic.sso.sdk.activity.OAuthActivity

com.cmic.sso.sdk.activity.BufferActivity

com.cmic.sso.sdk.activity.LoginAuthActivity

com.planet2345.sdk.invite.InviteActivity

com.planet2345.sdk.agentweb.AgentWebActivity

com.just.agentweb.ActionActivity

com.market2345.os.CoreService

com.market2345.resident.bind com.2345android.ACTION_WAKE

com.phonemanager2345.zhushou.ConnectionService

com.phonemanager2345.zhushou.connect.pc com.phonemanager2345.zhushou.connection.status

com.market2345.ui.filebrowser.MusicService

com.market2345.util.notificationmanage.NotificationHandleService

com.market2345.os.download.DownloadService

com.market2345.os.download.services.DownloadWaiter

com.market2345.os.daemon.accountauthenticator.core.AuthenticationService

android.accounts.AccountAuthenticator

com.market2345.os.daemon.accountauthenticator.core.SyncAdapterService

android.content.SyncAdapter

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER cn.jpush.android.intent.REPORT cn.jpush.android.intent.PushService cn.jpush.android.intent.PUSH_TIME

com.market2345.ui.dumpclean.BackgroundDoSomethingService

com.market2345.os.accessibility.AccessibilityDistributor

android.accessibilityservice.AccessibilityService

com.market2345.os.push.view.JPushService

com.market2345.os.init.TaskService

com.market2345.os.daemon.processpull.AssistantService

com.amap.api.location.APSService

com.market2345.ui.base.pure.PureService

com.market2345.os.hotpatch.service.HotPatchService

com.market2345.os.hotpatch.service.HotPatchService$InnerService

com.market2345.os.hotpatch.service.DefaultTinkerResultService

com.qq.e.comm.DownloadService

com.market2345.os.placeholder.S

com.market2345.os.vpn.SweeperService

android.net.VpnService

cn.jpush.android.service.DaemonService

cn.jpush.android.intent.DaemonService

com.we.service.LiveTaskService

com.we.service.action.livetask

com.igexin.sdk.PushService

com.xiaomi.mipush.sdk.PushMessageHandler

com.market2345.os.download.NetWorkReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.statistic2345.service.InCommingReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE com.statistic2345.com.market2345

com.market2345.os.push.view.JPushReceiver

cn.jpush.android.intent.MESSAGE_RECEIVED

com.market2345.os.daemon.notifyreceiver.NotifyBroadcastReceiver

android.intent.action.NEW_OUTGOING_CALL android.provider.Telephony.SMS_RECEIVED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PHONE_STATE android.intent.action.USER_PRESENT android.intent.action.BOOT_COMPLETED com.baidu.android.pushservice.action.BIND_SYNC android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

com.market2345.os.daemon.processpull.PullPersistentReceiver

com.market2345.os.daemon.processpull.PullAssistantReceiver

com.market2345.ui.base.pure.PureReceiver

com.market2345.os.placeholder.C

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

cn.jpush.android.service.AlarmReceiver

com.planet2345.sdk.receiver.AppInstallReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REPLACED

com.just.agentweb.download.NotificationCancelReceiver

Android Permissions

65c930760ff1725296a5540b876f2d4e_JaffaCakes118

Permissions

android.permission.INSTALL_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.INTERNET

android.permission.SET_WALLPAPER

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_PHONE_STATE

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

android.permission.GET_TASKS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.CLEAR_APP_CACHE

android.permission.GET_PACKAGE_SIZE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.VIBRATE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.EXPAND_STATUS_BAR

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.RECEIVE_USER_PRESENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.BATTERY_STATS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.ACCESS_COARSE_UPDATES

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.android.launcher.permission.INSTALL_SHORTCUT

com.market2345.permission.JPUSH_MESSAGE

android.permission.PACKAGE_USAGE_STATS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE