6e986557a7a3d99af53844668f8d2894_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

Reason

could not process APK: checksum verification failed

Reason

could not process APK: checksum verification failed

Reason

could not process APK: checksum verification failed

Reason

could not process APK: checksum verification failed

Reason

could not process APK: checksum verification failed

Reason

could not process APK: checksum verification failed

General

Target

6e986557a7a3d99af53844668f8d2894_JaffaCakes118
Size

31.4MB
MD5

6e986557a7a3d99af53844668f8d2894
SHA1

13f84263957eb54e8762d4c87c19ff14c703a3af
SHA256

a5db07ed51eae66000576339c4ddd5dc6c47c2b1cb354dc1d070d52d56603006
SHA512

d5d1bc393642f08545eec12cbe948aa9fb680fd0fe7f590880ef1a99e32e0b425744e1fad120b91865224fdd042dbd8d5d0c807bd83d91f32659e2390f000ac8
SSDEEP

786432:oJEMvs0BPmNE9zBvRfV+UGDmwio915uhoU+gZtGLmWX9EkLY6Vxr2xnB8NJoL:Is0hmW9zYUGKw9KhoUCiWX9EkLY6VV2H

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

6e986557a7a3d99af53844668f8d2894_JaffaCakes118
.apk android arch:arm arch:x86

com.javgame.ddz

com.javgame.app.AppNativeActivity

Activities

com.javgame.app.AppNativeActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.READ_LOGS
android.permission.WRITE_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WAKE_LOCK
android.permission.DEVICE_POWER
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.CHANGE_NETWORK_STATE
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_COARSE_LOCATION
android.permission.VIBRATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.REORDER_TASKS

Receivers

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.javgame.ddz.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

com.skymobi.pay.sdk.normal.zimon.EpsReceiver

com.skymobi.pay.plugin.advert
com.skymobi.pay.plugin.recordupload
com.skymobi.pay.plugin.push
com.skymobi.pay.action.plugin
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.BOOT_COMPLETED
android.intent.action.PACKAGE_ADDED

com.qihoo.psdk.local.QBootReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

Services

com.umeng.message.UmengService

com.javgame.ddz.intent.action.START
com.javgame.ddz.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2

com.qihoo.psdk.remote.QRemoteService

com.qihoo.psdk.service.action.remote

com.qihoo.psdk.local.QLocalService

com.qihoo.psdk.service.action.local
com.skymobi.pay.plugin.advert_v10007.pl
.apk android

com.skymobi.pay.plugin.advert
com.skymobi.pay.plugin.main_v10008.pl
.apk android

com.skymobi.pay.plugin.main
com.skymobi.pay.plugin.push_v10005.pl
.apk android

com.skymobi.pay.plugin.push
com.skymobi.pay.plugin.recordupload_v10008.pl
.apk android

com.skymobi.pay.plugin.recordupload
com.skymobi.pay.plugin.smspay_v10010.pl
.apk android

com.skymobi.pay.plugin.smspay
skymobi_pay_wxplugin.apk
.apk android

com.skymobi.pay.wxplugin

com.skymobi.pay.wxplugin.wxapi.WXPayEntryActivity

Activities

Permissions

android.permission.INTERNET
com.skymobi.pay.plugin.thirdpay_v10007.pl
.apk android

com.skymobi.pay.plugin.thirdpay
skymobi_pay_wxplugin.apk
.apk android

com.skymobi.pay.wxplugin

com.skymobi.pay.wxplugin.wxapi.WXPayEntryActivity

Activities

Permissions

android.permission.INTERNET

Android Permissions

6e986557a7a3d99af53844668f8d2894_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

android.permission.DEVICE_POWER

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_COARSE_LOCATION

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.REORDER_TASKS

Sharing

Errors

General

Malware Config

Signatures

Files

com.javgame.ddz

com.javgame.app.AppNativeActivity

Activities

com.javgame.app.AppNativeActivity

Permissions

Receivers

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

com.skymobi.pay.sdk.normal.zimon.EpsReceiver

com.qihoo.psdk.local.QBootReceiver

Services

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

com.qihoo.psdk.remote.QRemoteService

com.qihoo.psdk.local.QLocalService

com.skymobi.pay.plugin.advert

com.skymobi.pay.plugin.main

com.skymobi.pay.plugin.push

com.skymobi.pay.plugin.recordupload

com.skymobi.pay.plugin.smspay

com.skymobi.pay.wxplugin

com.skymobi.pay.wxplugin.wxapi.WXPayEntryActivity

Activities

Permissions

com.skymobi.pay.plugin.thirdpay

com.skymobi.pay.wxplugin

com.skymobi.pay.wxplugin.wxapi.WXPayEntryActivity

Activities

Permissions

Android Permissions

6e986557a7a3d99af53844668f8d2894_JaffaCakes118