792070c34430efeae6b25141d0ed25e4_JaffaCakes118

General

Target

792070c34430efeae6b25141d0ed25e4_JaffaCakes118
Size

8.5MB
MD5

792070c34430efeae6b25141d0ed25e4
SHA1

dcef0a1ef16d7f16fb7872e909cac686150d14ea
SHA256

b1c4f9d96df21753624c092b278f05ed36ea4f7bbc880069318c74e69c483e36
SHA512

08ca718941c5e9df1e6bfa6af02a18d64e3fc16954680eb320a3c38560dc38cdcb3ada8a76a7c11b5694ef9b47a674dd127393ebc6e522d94d15042ad7cdacc6
SSDEEP

196608:8mVsoAHeFVvUUE42y9+ohPLzRznyMihHl13QoKQn/OChV1v:LVsoAHCvUurpFzRmx3QU/OCh3

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

792070c34430efeae6b25141d0ed25e4_JaffaCakes118
.apk android

com.whatsapp

.Main

Activities

.Main

android.intent.action.MAIN

.XMLXplorerActivity

android.intent.action.GET_CONTENT

com.whatsapp.Conversation

android.intent.action.SENDTO

.ContactPicker

android.intent.action.PICK
android.intent.action.CREATE_SHORTCUT
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE

com.whatsapp.wallpaper.WallpaperPicker

com.whatsapp.intent.action.SET_WALLPAPER

com.whatsapp.wallpaper.ResetWallpaper

com.whatsapp.intent.action.RESET_WALLPAPER

.ResetPhoto

com.whatsapp.intent.action.RESET_GROUP_PHOTO

.RecordAudio

android.intent.action.GET_CONTENT
com.whatsapp.action.WHATSAPP_RECORDING

.accountsync.LoginActivity

android.intent.action.VIEW

.accountsync.ProfileActivity

android.intent.action.VIEW

.WebImagePicker

com.whatsapp.intent.action.SEARCH_PHOTO

.LocationPicker

android.intent.action.VIEW
android.intent.action.SEARCH

.LocationPicker2

android.intent.action.VIEW
android.intent.action.SEARCH

Permissions

com.whatsapp.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.GET_ACCOUNTS
android.permission.WRITE_CONTACTS
android.permission.INTERNET
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.VIBRATE
android.permission.RECORD_AUDIO
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CALL_PHONE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.WRITE_SETTINGS
android.permission.READ_SYNC_STATS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.GET_TASKS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.vending.BILLING
android.permission.READ_PROFILE
com.google.android.providers.gsf.permission.READ_GSERVICES
com.whatsapp.permission.MAPS_RECEIVE
android.permission.KILL_BACKGROUND_PROCESSES

Receivers

.BootReceiver

android.intent.action.BOOT_COMPLETED

.c2dm.C2DMBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

.ExternalMediaManager$ExternalMediaStateReceiver

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_BAD_REMOVAL
android.intent.action.MEDIA_REMOVED
android.intent.action.MEDIA_SHARED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.MEDIA_EJECT

.accountsync.PerformSyncManager

com.whatsapp.accountsync.intent.PERFORM_SYNC

Services

.accountsync.AccountAuthenticatorService

android.accounts.AccountAuthenticator

.accountsync.ContactsSyncAdapterService

android.content.SyncAdapter

Android Permissions

792070c34430efeae6b25141d0ed25e4_JaffaCakes118

Permissions

com.whatsapp.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.WRITE_CONTACTS

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.RECORD_AUDIO

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.WRITE_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.vending.BILLING

android.permission.READ_PROFILE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.whatsapp.permission.MAPS_RECEIVE

android.permission.KILL_BACKGROUND_PROCESSES

Sharing

General

Malware Config

Signatures

Files

com.whatsapp

.Main

Activities

.Main

.XMLXplorerActivity

com.whatsapp.Conversation

.ContactPicker

com.whatsapp.wallpaper.WallpaperPicker

com.whatsapp.wallpaper.ResetWallpaper

.ResetPhoto

.RecordAudio

.accountsync.LoginActivity

.accountsync.ProfileActivity

.WebImagePicker

.LocationPicker

.LocationPicker2

Permissions

Receivers

.BootReceiver

.c2dm.C2DMBroadcastReceiver

.ExternalMediaManager$ExternalMediaStateReceiver

.accountsync.PerformSyncManager

Services

.accountsync.AccountAuthenticatorService

.accountsync.ContactsSyncAdapterService

Android Permissions

792070c34430efeae6b25141d0ed25e4_JaffaCakes118