General

  • Target

    7d042c727e9aa1803fe43184e70bf14d_JaffaCakes118

  • Size

    17.1MB

  • MD5

    7d042c727e9aa1803fe43184e70bf14d

  • SHA1

    cd9aad44b31506429b988bc494bd15e29cc60f1a

  • SHA256

    349dfc058f19b3079857efb4823da8ad84ea1eae478c4b21982e856f01fb6fbb

  • SHA512

    5a55e6b3a747904ed7a64ee91fad338295aa2b5a356059718c5670734ef60b49adf6c5732f9c0abfe3c8bb71542f478dbc7af1ff518743a44997412068613fc1

  • SSDEEP

    393216:jrHYc8dLOFH3MJATEV2SAGr17m8omM0vRj1k31dVq15:vZ8dKFHcJwEV2B/mM0EFe7

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 10 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 10 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 8 IoCs

Files

  • 7d042c727e9aa1803fe43184e70bf14d_JaffaCakes118
    .apk android arch:arm arch:x86

    cn.videoplusplus.shunfengche

    cn.videoplusplus.shunfengche.WelcomeActivity


  • amap_resource1_0_0.png
    .apk android

    com.example.amapsdkv2

    com.amap.api.maps.offlinemap.OfflineMapActivity


Android Permissions

7d042c727e9aa1803fe43184e70bf14d_JaffaCakes118

Permissions

android.permission.READ_LOGS

cn.videoplusplus.shunfengche.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.CAMERA

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE