6eea8f732ef21198c3923c0fa56d22c5_JaffaCakes118

General

Target

6eea8f732ef21198c3923c0fa56d22c5_JaffaCakes118
Size

3.1MB
MD5

6eea8f732ef21198c3923c0fa56d22c5
SHA1

3d1407a1a152b244ea824969c1bad4c5475dfa74
SHA256

763146fe5cb53e123fbbde456f20a03fcc9c307ecaa3af7df70d097e7bde7fc5
SHA512

a1c299a0501335a2a5087a1bd97b53e98841fed01e5291a6430ddc2a8f6362d54ef67c410bc328d09ac1d7a0414f0009548d583d20dbd0f8bba9552b1df54da8
SSDEEP

49152:tvaQwKA6Cgi4zXVGfmCh3vSKSnFiH4mNTH:WH4CTH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to use SIP service.	android.permission.USE_SIP

Files

6eea8f732ef21198c3923c0fa56d22c5_JaffaCakes118
.apk android

com.android.phone

MobileNetworkSettings

Activities

EmergencyDialer

com.android.phone.EmergencyDialer.DIAL
com.android.phone.EmergencyDialer.DIAL

SimContacts

android.intent.action.VIEW

com.android.phone.settings.fdn.FdnList

android.intent.action.VIEW

OutgoingCallBroadcaster

android.intent.action.CALL
android.intent.action.CALL
android.intent.action.CALL
android.intent.action.CALL

InCallScreenShowActivation

com.android.phone.PERFORM_CDMA_PROVISIONING

MobileNetworkSettings

android.intent.action.VIEW
android.intent.action.MAIN
android.settings.DATA_ROAMING_SETTINGS

NetworkSetting

android.intent.action.MAIN
android.settings.NETWORK_OPERATOR_SETTINGS

GsmUmtsOptions

android.intent.action.MAIN

CdmaOptions

android.intent.action.MAIN

GsmUmtsCallOptions

android.intent.action.MAIN

CdmaCallOptions

android.intent.action.MAIN

GsmUmtsCallForwardOptions

android.intent.action.MAIN

GsmUmtsAdditionalCallOptions

android.intent.action.MAIN

CellBroadcastSms

android.intent.action.MAIN

com.android.phone.settings.fdn.FdnSetting

android.intent.action.MAIN

EnableIccPinScreen

android.intent.action.MAIN

ChangeIccPinScreen

android.intent.action.MAIN

DataRoamingReenable

android.intent.action.MAIN

RoamingSetting

android.intent.action.MAIN

CallFeaturesSetting

android.intent.action.VIEW
android.intent.action.MAIN
android.telecom.action.SHOW_CALL_SETTINGS
com.android.phone.CallFeaturesSetting.ADD_VOICEMAIL

EmergencyCallbackModeExitDialog

com.android.phone.action.ACTION_SHOW_ECM_EXIT_DIALOG
android.intent.action.ACTION_SHOW_NOTICE_ECM_BLOCK_OTHERS

com.android.services.telephony.sip.SipSettings

android.intent.action.MAIN
android.net.sip.NOTIFY

com.android.phone.settings.PhoneAccountSettingsActivity

android.telecom.action.CHANGE_PHONE_ACCOUNTS

Permissions

android.permission.BROADCAST_STICKY
android.permission.CALL_PHONE
android.permission.CALL_PRIVILEGED
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.READ_CONTACTS
android.permission.READ_CALL_LOG
android.permission.WRITE_CONTACTS
android.permission.WRITE_CALL_LOG
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNAL_SYSTEM_WINDOW
android.permission.VIBRATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.REORDER_TASKS
android.permission.CHANGE_CONFIGURATION
android.permission.WAKE_LOCK
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.STATUS_BAR
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.SEND_RESPOND_VIA_MESSAGE
android.permission.SET_TIME
android.permission.SET_TIME_ZONE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.MODIFY_PHONE_STATE
android.permission.DEVICE_POWER
android.permission.DISABLE_KEYGUARD
android.permission.INTERNET
android.permission.PROCESS_OUTGOING_CALLS
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_APN_SETTINGS
android.permission.BROADCAST_SMS
android.permission.BROADCAST_WAP_PUSH
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SHUTDOWN
android.permission.RECORD_AUDIO
android.permission.PERFORM_CDMA_PROVISIONING
android.permission.USE_SIP
android.permission.REBOOT
android.permission.UPDATE_LOCK
android.permission.INTERACT_ACROSS_USERS
android.permission.INTERACT_ACROSS_USERS_FULL
com.android.smspush.WAPPUSH_MANAGER_BIND
android.permission.MANAGE_USERS
android.permission.UPDATE_APP_OPS_STATS
android.permission.CONNECTIVITY_INTERNAL
android.permission.SET_PREFERRED_APPLICATIONS
android.permission.READ_SEARCH_INDEXABLES
android.permission.DUMP
android.permission.REGISTER_CALL_PROVIDER
android.permission.REGISTER_SIM_SUBSCRIPTION
android.permission.BIND_CARRIER_MESSAGING_SERVICE
android.permission.STOP_APP_SWITCHES

Receivers

ProcessOutgoingCallTest

android.intent.action.NEW_OUTGOING_CALL

OtaStartupReceiver

android.intent.action.BOOT_COMPLETED

com.android.services.telephony.sip.SipBroadcastReceiver

android.net.sip.SIP_SERVICE_UP
com.android.phone.SIP_INCOMING_CALL
com.android.phone.SIP_REMOVE_PHONE
com.android.phone.SIP_CALL_OPTION_CHANGED

PhoneGlobals$NotificationBroadcastReceiver

com.android.phone.ACTION_HANG_UP_ONGOING_CALL
com.android.phone.ACTION_CALL_BACK_FROM_NOTIFICATION
com.android.phone.ACTION_SEND_SMS_FROM_NOTIFICATION

Services

com.android.services.telephony.sip.SipCallServiceProvider

android.telecom.CallServiceProvider

com.android.services.telephony.sip.SipConnectionService

android.telecom.ConnectionService

com.android.services.telephony.TelephonyCallServiceProvider

android.telecom.CallServiceProvider

com.android.services.telephony.TelephonyConnectionService

android.telecom.ConnectionService

Android Permissions

6eea8f732ef21198c3923c0fa56d22c5_JaffaCakes118

Permissions

android.permission.BROADCAST_STICKY

android.permission.CALL_PHONE

android.permission.CALL_PRIVILEGED

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.WRITE_CONTACTS

android.permission.WRITE_CALL_LOG

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNAL_SYSTEM_WINDOW

android.permission.VIBRATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.REORDER_TASKS

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.STATUS_BAR

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.SEND_RESPOND_VIA_MESSAGE

android.permission.SET_TIME

android.permission.SET_TIME_ZONE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.DEVICE_POWER

android.permission.DISABLE_KEYGUARD

android.permission.INTERNET

android.permission.PROCESS_OUTGOING_CALLS

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_APN_SETTINGS

android.permission.BROADCAST_SMS

android.permission.BROADCAST_WAP_PUSH

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SHUTDOWN

android.permission.RECORD_AUDIO

android.permission.PERFORM_CDMA_PROVISIONING

android.permission.USE_SIP

android.permission.REBOOT

android.permission.UPDATE_LOCK

android.permission.INTERACT_ACROSS_USERS

android.permission.INTERACT_ACROSS_USERS_FULL

com.android.smspush.WAPPUSH_MANAGER_BIND

android.permission.MANAGE_USERS

Sharing

General

Malware Config

Signatures

Files

com.android.phone

MobileNetworkSettings

Activities

EmergencyDialer

SimContacts

com.android.phone.settings.fdn.FdnList

OutgoingCallBroadcaster

InCallScreenShowActivation

MobileNetworkSettings

NetworkSetting

GsmUmtsOptions

CdmaOptions

GsmUmtsCallOptions

CdmaCallOptions

GsmUmtsCallForwardOptions

GsmUmtsAdditionalCallOptions

CellBroadcastSms

com.android.phone.settings.fdn.FdnSetting

EnableIccPinScreen

ChangeIccPinScreen

DataRoamingReenable

RoamingSetting

CallFeaturesSetting

EmergencyCallbackModeExitDialog

com.android.services.telephony.sip.SipSettings

com.android.phone.settings.PhoneAccountSettingsActivity

Permissions

Receivers

ProcessOutgoingCallTest

OtaStartupReceiver

com.android.services.telephony.sip.SipBroadcastReceiver

PhoneGlobals$NotificationBroadcastReceiver

Services

com.android.services.telephony.sip.SipCallServiceProvider

com.android.services.telephony.sip.SipConnectionService

com.android.services.telephony.TelephonyCallServiceProvider

com.android.services.telephony.TelephonyConnectionService

Android Permissions

6eea8f732ef21198c3923c0fa56d22c5_JaffaCakes118