Errors

Reason
could not process APK: zip: not a valid zip file

General

  • Target

    7d7c8d7569988ef700d21d684dab5177_JaffaCakes118

  • Size

    23.9MB

  • MD5

    7d7c8d7569988ef700d21d684dab5177

  • SHA1

    f9950d9179217f1bc461258282fc0ef660c7c4c3

  • SHA256

    52b215109f845bb62e3d3471619d2713cd72f609762f809eed505331e228f6ff

  • SHA512

    72a0d376e53d756acb039dc3f556570b56291b2c57336eebd5efe9ee9e07e71a68e8ac467f41e55af63f2944ca372df55bd9152b3815a4b7c796d2108fbae8b9

  • SSDEEP

    393216:mG9634xU54n65Atg/RmC5gUelNiLWs3Fr0grfD2sYtXV8htkqyxcfeCHxQ4N745c:Z634C+62RC5LelshCgDYtXSht5VwRk9/

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • 7d7c8d7569988ef700d21d684dab5177_JaffaCakes118
    .apk android arch:arm arch:x86

    com.llx.rageface

    com.dbgj.stasdk.activity.StaWelcomeActivity


  • muzhiwanapp.apk
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    com.muzhiwan.market

    com.muzhiwan.market.ui.activity.SplashActivity


  • mzw_d
    .apk android arch:arm

    com.muzhiwan.download.drive

    com.muzhiwan.lib.drive.TestActivity


  • mzw_g
    .apk android
  • stasdk_core
    .apk android

    com.dbgj.stacore

    com.stasdk.sdktest.MainActivity


  • bdxadsdk.jar
    .apk android
  • gdtadv2.jar
    .apk android

Android Permissions

7d7c8d7569988ef700d21d684dab5177_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

com.android.vending.BILLING

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.CHANGE_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION