6bf63b21664fed6b13c6546bb7a4a6c4_JaffaCakes118

General

Target

6bf63b21664fed6b13c6546bb7a4a6c4_JaffaCakes118
Size

22.6MB
MD5

6bf63b21664fed6b13c6546bb7a4a6c4
SHA1

54d35ddd13c6d94d31b8d2181a23069fd86e3d14
SHA256

8652ba3c5e27536c73517f572edf483eeddc424502c206cb04fda23881886d95
SHA512

3328918e6059a55533db22ad6b1eddf7db90346fc4b21ca91b9e6919de95d28ed2ccaad7f5291e1cfd61ca946d3f564650dce7a8260074030b4ff0c154d431c6
SSDEEP

393216:wE6dC0ZjxqFgqs/9dqc8l6zrlNh7cGUs/NxL9Uld95ibf:H6dtx1qH6zlGsVdOld6bf

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

6bf63b21664fed6b13c6546bb7a4a6c4_JaffaCakes118
.apk android arch:arm arch:mips arch:x86

com.camera.galaxyx

com.camera.function.main.ui.GalaxyxSplashActivity

Activities

com.camera.function.main.ui.GalaxyxSplashActivity

android.intent.action.MAIN

com.camera.function.main.ui.CameraPreviewActivity

android.media.action.IMAGE_CAPTURE
android.media.action.IMAGE_CAPTURE_SECURE
android.media.action.STILL_IMAGE_CAMERA
android.media.action.STILL_IMAGE_CAMERA_SECURE
android.media.action.VIDEO_CAMERA
android.media.action.VIDEO_CAPTURE

com.edit.imageeditlibrary.editimage.EditImageActivity

android.intent.action.SEND

com.appsflyer.adx.ads.suggest.SuggestActivity

android.intent.action.VIEW

com.appsflyer.adx.ads.suggest.AppDetailRandomActivity

android.intent.action.VIEW

Permissions

android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_LOGS
android.permission.WAKE_LOCK
com.android.vending.BILLING
com.google.android.c2dm.permission.RECEIVE
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.android.vending.CHECK_LICENSE
com.android.vending.BILLING
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE

Receivers

com.appsflyer.adx.broadcast.InstallReferrer

com.android.vending.INSTALL_REFERRER

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.appsflyer.adx.firebase.CloudMessageService

com.google.firebase.MESSAGING_EVENT

com.appsflyer.adx.firebase.CloudMessageID

com.google.firebase.INSTANCE_ID_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

6bf63b21664fed6b13c6546bb7a4a6c4_JaffaCakes118

Permissions

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_LOGS

android.permission.WAKE_LOCK

com.android.vending.BILLING

com.google.android.c2dm.permission.RECEIVE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.vending.CHECK_LICENSE

com.android.vending.BILLING

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.camera.galaxyx

com.camera.function.main.ui.GalaxyxSplashActivity

Activities

com.camera.function.main.ui.GalaxyxSplashActivity

com.camera.function.main.ui.CameraPreviewActivity

com.edit.imageeditlibrary.editimage.EditImageActivity

com.appsflyer.adx.ads.suggest.SuggestActivity

com.appsflyer.adx.ads.suggest.AppDetailRandomActivity

Permissions

Receivers

com.appsflyer.adx.broadcast.InstallReferrer

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.appsflyer.adx.firebase.CloudMessageService

com.appsflyer.adx.firebase.CloudMessageID

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

6bf63b21664fed6b13c6546bb7a4a6c4_JaffaCakes118