7be8987c93c61dfc4c870439bbf1f154_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
7be8987c93c61dfc4c870439bbf1f154_JaffaCakes118
Size 5.3MB
Sample240528-gf9ewshe68
SHA256 d8f82c7beb7de24101b510e7bac9ac526b4fee6c5cfb7e1992f17ac99fa68048
MD5 7be8987c93c61dfc4c870439bbf1f154
SHA1 a05aa0036cf35468af16dd1826151dfb718343bf
SHA512 fc8a09abb8191b84752bd62b16fd75ab27e78ac84afe78dbb293cc7a96248ec66f55d50aa82316f8aac1fc8511a0546efe39d7794ce5d80ab449099475524237
SSDEEP 98304:h0D0fbtl624dI4UdPwh689eSYoZP4ret3HAhz/aK7AKg/ZzIouCpb:hPfb36OtwN9xl8z/aK7ARZMsx
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

7be8987c93c61dfc4c870439bbf1f154_JaffaCakes118

.apk 5.3MB

7be8987c93c61dfc4c870439bbf1f154_JaffaCakes118

SHA256 d8f82c7beb7de24101b510e7bac9ac526b4fee6c5cfb7e1992f17ac99fa68048
MD5 7be8987c93c61dfc4c870439bbf1f154
SHA1 a05aa0036cf35468af16dd1826151dfb718343bf
SHA512 fc8a09abb8191b84752bd62b16fd75ab27e78ac84afe78dbb293cc7a96248ec66f55d50aa82316f8aac1fc8511a0546efe39d7794ce5d80ab449099475524237
SSDEEP 98304:h0D0fbtl624dI4UdPwh689eSYoZP4ret3HAhz/aK7AKg/ZzIouCpb:hPfb36OtwN9xl8z/aK7ARZMsx
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.qunar.dangdi

.SloganActivity

android.intent.action.MAIN

.ChatActivity

.HomeActivity

.UserInfoActivity

.PersonListActivity

.SelectCityActivity

.LoginActivity

.QuickLoginActivity

.ResetPwActivity

.ChangePwActivity

.OrderActivity

.Order2Activity

.UserManagerActivity

.WebViewActivity

.SettingActivity

.FilterActivity

.ImpressActivity

.SearchResult

.EditImpressActivity

.SearchActivity

.ImpressDetailActivity

.MyZixunActivity

.MyImpressActivity

.OrderEditActivity

.OrderDetailActivity

.DatepickActivity

.ApplyRefundActivity

.CheckMobileActivity

.TopicActivity

.CommentActivity

.EditCommentActivity

.MyMessageActivity

.GoodDetailActivity

.PicShowActivity

com.qunar.sight.sight.SightDatepickActivity

com.qunar.sight.sight.SightSearchActivity

com.qunar.sight.sight.SightListActivity

com.qunar.sight.sight.SightSuggestionActivity

com.qunar.sight.sight.SightListFilterActivity

com.qunar.sight.sight.SightDetailActivity

com.qunar.sight.sight.SightDetailMapActivity

com.qunar.sight.sight.SightPriceListActivity

com.qunar.sight.sight.SightOrderListActivity

com.qunar.sight.sight.SightOrderActivity

com.qunar.sight.sight.SightOrderDetailActivity

com.qunar.sight.sight.SightOrderConfirmActivity

com.qunar.sight.sight.SightTTSPayResultActivity

com.qunar.sight.sight.SightImageListActivity

com.qunar.sight.sight.SightBookInfoActivity

com.qunar.sight.sight.SightImageGalleryActivity

com.qunar.sight.sight.SightBookingResultActivity

com.qunar.sight.WebActivity

com.qunar.sight.pay.TTSPaymentActivity

com.qunar.sight.pay.TTSPaymentBalancePswCreateActivity

com.qunar.sight.pay.TTSVouchActivity

Android Permissions

7be8987c93c61dfc4c870439bbf1f154_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.CALL_PHONE

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.KILL_BACKGROUND_PROCESSES

Sharing

General

Malware Config

Signatures

File Explorer

7be8987c93c61dfc4c870439bbf1f154_JaffaCakes118

.SloganActivity

.ChatActivity

.HomeActivity

.UserInfoActivity

.PersonListActivity

.SelectCityActivity

.LoginActivity

.QuickLoginActivity

.ResetPwActivity

.ChangePwActivity

.OrderActivity

.Order2Activity

.UserManagerActivity

.WebViewActivity

.SettingActivity

.FilterActivity

.ImpressActivity

.SearchResult

.EditImpressActivity

.SearchActivity

.ImpressDetailActivity

.MyZixunActivity

.MyImpressActivity

.OrderEditActivity

.OrderDetailActivity

.DatepickActivity

.ApplyRefundActivity

.CheckMobileActivity

.TopicActivity

.CommentActivity

.EditCommentActivity

.MyMessageActivity

.GoodDetailActivity

.PicShowActivity

com.qunar.sight.sight.SightDatepickActivity

com.qunar.sight.sight.SightSearchActivity

com.qunar.sight.sight.SightListActivity

com.qunar.sight.sight.SightSuggestionActivity

com.qunar.sight.sight.SightListFilterActivity

com.qunar.sight.sight.SightDetailActivity

com.qunar.sight.sight.SightDetailMapActivity

com.qunar.sight.sight.SightPriceListActivity

com.qunar.sight.sight.SightOrderListActivity

com.qunar.sight.sight.SightOrderActivity

com.qunar.sight.sight.SightOrderDetailActivity

com.qunar.sight.sight.SightOrderConfirmActivity

com.qunar.sight.sight.SightTTSPayResultActivity

com.qunar.sight.sight.SightImageListActivity

com.qunar.sight.sight.SightBookInfoActivity

com.qunar.sight.sight.SightImageGalleryActivity

com.qunar.sight.sight.SightBookingResultActivity

com.qunar.sight.WebActivity

com.qunar.sight.pay.TTSPaymentActivity

com.qunar.sight.pay.TTSPaymentBalancePswCreateActivity

com.qunar.sight.pay.TTSVouchActivity

.QunarService

com.umeng.common.net.DownloadingService

Android Permissions

7be8987c93c61dfc4c870439bbf1f154_JaffaCakes118