Overview

overview

8

Static

static

8

6756c7dbb2...18.apk

android-9-x86

8

6756c7dbb2...18.apk

android-11-x64

1

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    6756c7dbb22b3498a748ceb3c78d5703_JaffaCakes118

  • Size

    26.1MB

  • MD5

    6756c7dbb22b3498a748ceb3c78d5703

  • SHA1

    66e063cd7f499cecc4667f22d4ba2237b832384f

  • SHA256

    d6855c782c561e002e9a4d518b6b243ec1d916f0373be4baccba8d52f1b4c466

  • SHA512

    912b2bb2a233e7aa1e31619ee1f670aacbede79ae84dbc6a38f61f1a4d4897c08c32ff7758d64c27a0657940bd4f4ca7cd7f9679dbcaf0dc2ed03b571d47107b

  • SSDEEP

    786432:V773JrSzv2bJJzv2bJOIYD/hGPsAjTKUr:V7FuWJW3YD8Ps2r

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 5 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 9 IoCs

Files

  • 6756c7dbb22b3498a748ceb3c78d5703_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.zhuanzhuanquan.kzb.merchant

    com.zhuanzhuanquan.kzb.merchant.main.view.activity.WelcomeActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

6756c7dbb22b3498a748ceb3c78d5703_JaffaCakes118

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_LOGS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

com.zhuanzhuanquan.kzb.merchant.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_NETWORK_STATE

android.permission.CAMERA

android.permission.FLASHLIGHT