67070043be312f7d7ae75f81dc825a4b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
67070043be312f7d7ae75f81dc825a4b_JaffaCakes118
Size 8.5MB
Sample240522-m3glaace4v
SHA256 13ee3af45f068256f0834d1202d79f36328aaef59eee4c3962e1a25d14b32bd9
MD5 67070043be312f7d7ae75f81dc825a4b
SHA1 92858a9dad22140c83654c570f8c6b981525f89a
SHA512 12039992db5dce64e6c98b05f9c62633cf210766fbc1c16ccf330937933330d2554d9e1374c35b7a737c8817f69d5f80ec475f387a9cfd628e9cc008965797a6
SSDEEP 196608:ZOC9t4GmFAkG5tPicgZ4YuCu/Evfis3uX0Jd2WibCtK2T0:Z6Gmpm8vfCX0Jfiei
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

67070043be312f7d7ae75f81dc825a4b_JaffaCakes118

.apk 8.5MB

67070043be312f7d7ae75f81dc825a4b_JaffaCakes118

SHA256 13ee3af45f068256f0834d1202d79f36328aaef59eee4c3962e1a25d14b32bd9
MD5 67070043be312f7d7ae75f81dc825a4b
SHA1 92858a9dad22140c83654c570f8c6b981525f89a
SHA512 12039992db5dce64e6c98b05f9c62633cf210766fbc1c16ccf330937933330d2554d9e1374c35b7a737c8817f69d5f80ec475f387a9cfd628e9cc008965797a6
SSDEEP 196608:ZOC9t4GmFAkG5tPicgZ4YuCu/Evfis3uX0Jd2WibCtK2T0:Z6Gmpm8vfCX0Jfiei
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips arch:x86

com.baidu.news

.ui.IndexActivity

android.intent.action.MAIN com.baidu.news.mainpage

.ui.ColdStartActivity

.ui.MediaRankForwardedActivity

.ui.fragactivity.WaterfallFlowlActivity

.ui.SubsSimplyInfoListActivity

.offline.timer.OfflineTimerActivity

.offline.OfflineManageActivity

.ui.SubsInfoListActivity

.ui.SubjectActivity

.ui.fragactivity.BeautyGirlActivity

.ui.fragactivity.PicSetActivity

.ui.fragactivity.LocalNewsActivity

.ui.TopicActivity

.ui.TopicCenterActivity

.ui.AuthorDetailActivity

.ui.fragactivity.CollectActivity

.ui.PushMessageActivity

.ui.MessageBoxActivity

.ui.fragactivity.AppRecommdActivity

.video.ShortVideoAcitivity

.video.VideoListActivity

.video.VideoDetailActivity

.ui.SmartNewsActivity

.ui.InfoPreviewActivity

.ui.TagPreviewActivity

.ui.MediaRankingActivity

.ui.NewsmanRankActivity

.ui.AudioPlayActivity

com.baidu.sapi2.demos.activity.LoginActivity

com.baidu.sapi2.demos.activity.DynamicLoginActivity

com.baidu.sapi2.demos.activity.RegistActivity

com.baidu.sapi2.demos.activity.PhoneRegistActivity

com.baidu.sapi2.demos.activity.SmsCodeActivity

com.baidu.sapi2.demos.activity.FastRegActivity

com.baidu.sapi2.demos.activity.FillUnameActivity

com.baidu.account.FILL_NAME

com.baidu.sapi2.demos.activity.ForgetPwdActivity

.ui.CoverFlowActivity

.ui.BrowserActivity

.ui.ChooseCityActivity

.ui.NewsDetailActivity

com.baidu.news.detail

.ui.SearchCustomNewsDetailActivity

.ui.AccountManagerActivity

.ui.UserIdentityActivity

.ui.SettingActivity

.ui.AdvanceSettingActivity

.ui.FeedbackActivity

.ui.AboutActivity

.ui.PictureDetailActivity

.ui.PicturePreviewActivity

.ui.RadioPreviewActivity

.ui.ImagePreviewActivity

com.baidu.news.ui.picset.PicSetImgPreActivity

.ui.SearchNewsActivity

.ui.SearchActivity

.ui.RankingSearchActivity

com.baidu.news.share.AuthWeiboActivity

com.baidu.news.share.ShareWeiboActivity

com.baidu.news.share.ShareCommentActivity

.ui.SubscribeSourceListActivity

com.tencent.weibo.ui.AuthTencentActivity

com.tencent.weibo.ui.ShareTencentActivity

com.baidu.video.player.PlayerActivity

com.baidu.news.ui.ShareActivity

com.baidu.video.sniffer.LocalSnifferActivity

.ui.SubscribeCenterActivity2

.ui.SubscribeCenterActivity

.ui.CommentActivity

com.weibo.sdk.android.ui.AuthWeiboActivity

.qqcenter.AuthQQCenterActivity

.qqcenter.ShareQQCenterActivity

com.tencent.connect.common.AssistActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

.ui.ChannelCenterActivity

.ui.ChannelCenterEditActivity

.ui.ContentCustomActivity

.ui.SearchTopicNewActivity

.ui.AuthorPreviewActivity

.ui.MediaJoinActivity

.ui.ChooseCityEnterActivity

com.baidu.batsdk.feedback.FeedbackActivity

.widget.BaiduNews41Widget

android.appwidget.action.APPWIDGET_UPDATE

.widget.BaiduNews41SearchWidget

android.appwidget.action.APPWIDGET_UPDATE

.widget.BaiduNews42Widget

android.appwidget.action.APPWIDGET_UPDATE

com.baidu.sapi2.share.ShareReceiver

baidu.intent.action.SHARE baidu.intent.action.NEWSHARE baidu.intent.action.SHARE_V6

.weixin.WeixinAppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

.offline.timer.OfflineTimerReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE com.baidu.news.action.TIMER_START

.vspush.VSPushReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE com.baidu.news.action.push_message com.baidu.news.action.push_token com.baidu.news.action.push_start com.baidu.news.action.heartbeart

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE com.baidu.android.pushservice.action.notification.SHOW

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD com.baidu.android.pushservice.action.BIND_SYNC android.intent.action.PACKAGE_REMOVED

com.baidu.android.moplus.MoPlusReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE com.baidu.android.moplus.action.START com.baidu.android.pushservice.action.BIND_SYNC android.intent.action.PACKAGE_REMOVED

com.baidu.android.defense.push.PushMsgReceiver

com.baidu.android.pushservice.action.RECEIVE com.baidu.android.pushservice.action.MESSAGE com.baidu.android.pushservice.action.SDK_MESSAGE com.baidu.android.pushservice.action.sdk.RECEIVE

Android Permissions

67070043be312f7d7ae75f81dc825a4b_JaffaCakes118

Permissions

com.baidu.permission.SHARE

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD