6674903ab4c4b894d081b3ce853d66ad_JaffaCakes118

General

Target

6674903ab4c4b894d081b3ce853d66ad_JaffaCakes118
Size

11.6MB
MD5

6674903ab4c4b894d081b3ce853d66ad
SHA1

3ac24a8ede4a2127421f266249b3d4f38bbbb699
SHA256

4131b3fa08a496aa8097d29cc5cd54bbdb59757d98013525d2dbcadbe96e1281
SHA512

03a53c3cf947800dc87b57609d2ce216ae00989cd85d81761211b1e47f4accfebadf925d6321ff6cb6670a629e3bca80124f1ece94dfd4d7c53c54ea15737e60
SSDEEP

196608:vX0eZPL+BgNMu5HyvfJJ7G+vILEBfXAYq4YSXdatD6JXPU9avHOWz:McaBgNSfJVXALgoYVYSXkt2JXv/z

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

Processes:

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

6674903ab4c4b894d081b3ce853d66ad_JaffaCakes118
.apk android arch:arm

com.gameloft.android.GAND.GloftN3HP

com.idreamsky.gamecenter.ui.SkynetSplashActivity

Activities

com.idreamsky.gamecenter.ui.SkynetSplashActivity

android.intent.action.MAIN
android.intent.action.CHINAMOBILE_OMS_GAME

.GLiveHTML.GLLiveActivity

android.intent.action.MAIN

.IGPFreemiumActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.SEND_SMS
android.permission.GET_TASKS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.SEND_SMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
com.gameloft.android.GAND.GloftN3HP.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

mm.sms.purchasesdk.sms.SMSReceiver

aspire.iap.SMS_SEND_ACTIOIN
aspire.iap.SMS_DELIVERED_ACTION

com.google.android.c2dm.C2DMBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

.PushNotification.LocalPushReceiver

android.intent.action.BOOT_COMPLETED

Services

com.idreamsky.gamecenter.service.SkynetService

com.idreamsky.gamecenter.skynetservice
com.alipay.android.app.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService

6674903ab4c4b894d081b3ce853d66ad_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS

android.permission.GET_TASKS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

com.gameloft.android.GAND.GloftN3HP.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

Sharing

General

Malware Config

Signatures

Files

com.gameloft.android.GAND.GloftN3HP

com.idreamsky.gamecenter.ui.SkynetSplashActivity

Activities

com.idreamsky.gamecenter.ui.SkynetSplashActivity

.GLiveHTML.GLLiveActivity

.IGPFreemiumActivity

Permissions

Receivers

mm.sms.purchasesdk.sms.SMSReceiver

com.google.android.c2dm.C2DMBroadcastReceiver

.PushNotification.LocalPushReceiver

Services

com.idreamsky.gamecenter.service.SkynetService

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

Android Permissions

6674903ab4c4b894d081b3ce853d66ad_JaffaCakes118