Overview

overview

8

Static

static

8

6c427ef1e9...18.apk

android-9-x86

1

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

autonavi_R..._0.apk

android-9-x86

autonavi_R..._0.apk

android-10-x64

autonavi_R..._0.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    6c427ef1e98eca668e401549056fa97c_JaffaCakes118

  • Size

    18.7MB

  • MD5

    6c427ef1e98eca668e401549056fa97c

  • SHA1

    b597f7a0262c16784bc9a256dccada780dc94550

  • SHA256

    0c50803ac938a4d023c4af93962a86b59aac45f5a308b14aef57000edc8d4198

  • SHA512

    d66cf765de61df386296d2ab855c1685f9b5fadf79e310a24bf9ceca2919fcd005afd6b967e4d6d9515301670e36daf158cd5d4ea96f9cd51e3e0b1903345bf1

  • SSDEEP

    393216:+KmqaLVau0yWzvGweoh+C6BgWjwosZDHHer6sG:+Oaxtl/BoAC6KiwosZDew

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 7 IoCs

Files

  • 6c427ef1e98eca668e401549056fa97c_JaffaCakes118
    .apk android arch:arm

    com.gzevcop.icsp

    com.gzevcop.icsp.app.splash.SplashActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


  • autonavi_Resource1_1_0.png
    .apk android

    com.amap.api.navi

    com.amap.api.navi.AmapRouteActivity


Android Permissions

6c427ef1e98eca668e401549056fa97c_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.VIBRATE

android.permission.RECEIVE_USER_PRESENT

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

com.gzevcop.icsp.permission.JPUSH_MESSAGE