79d54a6a94329db7dd33eb28449a5fab_JaffaCakes118

General

Target
79d54a6a94329db7dd33eb28449a5fab_JaffaCakes118
Size 5.2MB
Sample240527-vh84ssca32
SHA256 93bd04ef01c2616eb415dca83067c66a48547def7dbf133a5503f1105240bbc7
MD5 79d54a6a94329db7dd33eb28449a5fab
SHA1 46294d7b08b617bea13b33829483d22e64944007
SHA512 dcc20aa1a01472feb997222f14c134d85741981bbd9157e395334762ff6fe6e5716e3b921a51045b77a6141eab0b48f0424bd1da122b9cf9c27eaefc2f27e1ee
SSDEEP 98304:ypzhCr7l3wkJLJ5yJhEB9mD06INxIlVsb/IIl:yVup3wYLJsIBwlINxFb/L
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

79d54a6a94329db7dd33eb28449a5fab_JaffaCakes118

.apk 5.2MB

79d54a6a94329db7dd33eb28449a5fab_JaffaCakes118

SHA256 93bd04ef01c2616eb415dca83067c66a48547def7dbf133a5503f1105240bbc7
MD5 79d54a6a94329db7dd33eb28449a5fab
SHA1 46294d7b08b617bea13b33829483d22e64944007
SHA512 dcc20aa1a01472feb997222f14c134d85741981bbd9157e395334762ff6fe6e5716e3b921a51045b77a6141eab0b48f0424bd1da122b9cf9c27eaefc2f27e1ee
SSDEEP 98304:ypzhCr7l3wkJLJ5yJhEB9mD06INxIlVsb/IIl:yVup3wYLJsIBwlINxFb/L
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.wta.NewCloudApp.jiuwei238019

com.wta.NewCloudApp.activity.AboutActivity

com.wta.NewCloudApp.activity.NewAboutActivity

com.wta.NewCloudApp.voice.SpeechActivity

com.wta.NewCloudApp.audioplayers.NewSpeechActivity

com.wta.NewCloudApp.activity.DownLoadActivity

com.wta.NewCloudApp.activity.CropImageActivity

com.wta.NewCloudApp.activity.ShowWebImageActivity

com.wta.NewCloudApp.activity.TopicProductActivity

com.wta.NewCloudApp.activity.ProgressDialogActivity

com.wta.NewCloudApp.activity.GuanyuActivity

com.wta.NewCloudApp.plugin.VideoActivity

com.wta.NewCloudApp.activity.ZitianNewsActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW

com.wta.NewCloudApp.jiuwei238019.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wta.NewCloudApp.jiuwei238019.wxapi.WXPayEntryActivity

cn.sharesdk.framework.AuthorizeActivity

com.wta.NewCloudApp.activity.WXEntryActivity

com.mob.tools.MobUIShell

android.intent.action.VIEW com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

cn.sharesdk.tencent.qq.ReceiveActivity

android.intent.action.VIEW

com.zf.myzxing.CaptureActivity

com.zf.myzxing.ResultActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.king.photo.activity.AlbumActivity

com.king.photo.activity.ImageFile

com.king.photo.activity.ShowAllPhoto

com.king.photo.activity.GalleryActivity

Android Permissions

79d54a6a94329db7dd33eb28449a5fab_JaffaCakes118

Permissions

getui.permission.GetuiService.com.wta.NewCloudApp.jiuwei238019

android.permission.INTERNET

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_USER_PRESENT

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WRITE_SETTINGS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.DELETE_CACHE_FILES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SET_WALLPAPER

android.permission.GET_TASKS

Sharing

General

Malware Config

Signatures

File Explorer

79d54a6a94329db7dd33eb28449a5fab_JaffaCakes118

com.wta.NewCloudApp.activity.AboutActivity

com.wta.NewCloudApp.activity.NewAboutActivity

com.wta.NewCloudApp.voice.SpeechActivity

com.wta.NewCloudApp.audioplayers.NewSpeechActivity

com.wta.NewCloudApp.activity.DownLoadActivity

com.wta.NewCloudApp.activity.CropImageActivity

com.wta.NewCloudApp.activity.ShowWebImageActivity

com.wta.NewCloudApp.activity.TopicProductActivity

com.wta.NewCloudApp.activity.ProgressDialogActivity

com.wta.NewCloudApp.activity.GuanyuActivity

com.wta.NewCloudApp.plugin.VideoActivity

com.wta.NewCloudApp.activity.ZitianNewsActivity

com.wta.NewCloudApp.jiuwei238019.wxapi.WXEntryActivity

com.wta.NewCloudApp.jiuwei238019.wxapi.WXPayEntryActivity

cn.sharesdk.framework.AuthorizeActivity

com.wta.NewCloudApp.activity.WXEntryActivity

com.mob.tools.MobUIShell

cn.sharesdk.tencent.qq.ReceiveActivity

com.zf.myzxing.CaptureActivity

com.zf.myzxing.ResultActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.king.photo.activity.AlbumActivity

com.king.photo.activity.ImageFile

com.king.photo.activity.ShowAllPhoto

com.king.photo.activity.GalleryActivity

com.wta.NewCloudApp.activity.MyService

com.baidu.location.f

com.wta.NewCloudApp.activity.VersionService

com.wta.NewCloudApp.activity.NetworkStateService

com.wta.NewCloudApp.updatemyapp.UpdateService

com.igexin.sdk.PushService

com.igexin.download.DownloadService

com.wta.NewCloudApp.activity.PushService

com.wta.NewCloudApp.activity.WtaPushService

com.wta.NewCloudApp.NewStt.UpdateService

com.wta.NewCloudApp.activity.BootReceiver

com.wta.NewCloudApp.wxpay.AppRegister

com.igexin.sdk.PushReceiver

com.igexin.download.DownloadReceiver

com.igexin.download.DownloadProvider

Android Permissions

79d54a6a94329db7dd33eb28449a5fab_JaffaCakes118