8225c6d10364ed5f61e48dc78fde946c_JaffaCakes118

General

Target
8225c6d10364ed5f61e48dc78fde946c_JaffaCakes118
Size 4.2MB
Sample240529-2bepyada43
SHA256 013e87fd689f7e85167626a8a1841b34f715245e631436d8ddd32da7252892c1
MD5 8225c6d10364ed5f61e48dc78fde946c
SHA1 4458cda8cb776f95f40bdd0308ee621d5bca2de8
SHA512 6872893e1ed63ff0ea5c79bcc4870d51b1832826bf49911f25b00e54216d1f39ac9088525b39ee9831d47ac969c9ebf5e23b2ab7d6e64dbab24c89f8b3efc155
SSDEEP 98304:SNBdNcSTvCJl6TI/kYFS7B0bZs+Bt9DjVvl5FkD4MmuEAMhCky:CQmCbeI/xFS7KlsuFjr/a4Mn4Cky
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

8225c6d10364ed5f61e48dc78fde946c_JaffaCakes118

.apk 4.2MB
tcore.jar

.apk 142KB

8225c6d10364ed5f61e48dc78fde946c_JaffaCakes118

SHA256 013e87fd689f7e85167626a8a1841b34f715245e631436d8ddd32da7252892c1
MD5 8225c6d10364ed5f61e48dc78fde946c
SHA1 4458cda8cb776f95f40bdd0308ee621d5bca2de8
SHA512 6872893e1ed63ff0ea5c79bcc4870d51b1832826bf49911f25b00e54216d1f39ac9088525b39ee9831d47ac969c9ebf5e23b2ab7d6e64dbab24c89f8b3efc155
SSDEEP 98304:SNBdNcSTvCJl6TI/kYFS7B0bZs+Bt9DjVvl5FkD4MmuEAMhCky:CQmCbeI/xFS7KlsuFjr/a4Mn4Cky
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

io.dcloud.H5FD95166

android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.GET_TASKS com.android.launcher.permission.INSTALL_SHORTCUT android.permission.GET_TASKS android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.VIBRATE android.permission.WAKE_LOCK android.permission.CALL_PHONE android.permission.ACCESS_WIFI_STATE android.permission.INTERACT_ACROSS_USERS_FULL android.permission.SYSTEM_ALERT_WINDOW android.permission.WRITE_EXTERNAL_STORAGE android.permission.GET_TOP_ACTIVITY_INFO android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_SETTINGS android.permission.RECEIVE_BOOT_COMPLETED com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS com.android.launcher2.permission.READ_SETTINGS com.android.launcher3.permission.READ_SETTINGS com.yulong.android.launcherL.permission.READ_SETTINGS com.meizu.flyme.launcher.permission.READ_SETTINGS com.bbk.launcher2.permission.READ_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.qiku.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.READ_SETTINGS com.zte.mifavor.launcher.permission.READ_SETTINGS com.lenovo.launcher.permission.READ_SETTINGS com.google.android.launcher.permission.READ_SETTINGS com.yulong.android.launcher3.READ_SETTINGS org.adw.launcher.permission.READ_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.lge.launcher.permission.READ_SETTINGS net.qihoo.launcher.permission.READ_SETTINGS org.adwfreak.launcher.permission.READ_SETTINGS org.adw.launcher_donut.permission.READ_SETTINGS com.huawei.launcher3.permission.READ_SETTINGS com.fede.launcher.permission.READ_SETTINGS com.sec.android.app.twlauncher.settings.READ_SETTINGS com.tencent.qqlauncher.permission.READ_SETTINGS com.huawei.launcher2.permission.READ_SETTINGS com.ebproductions.android.launcher.permission.READ_SETTINGS com.nd.android.launcher.permission.READ_SETTINGS com.yulong.android.launcher.permission.READ_SETTINGS com.android.mylauncher.permission.READ_SETTINGS com.ztemt.launcher.permission.READ_SETTINGS cn.nubia.launcher.permission.READ_SETTINGS com.gionee.amisystem.permission.READ_SHORTCUT getui.permission.GetuiService.io.dcloud.H5FD95166

Android Permissions

8225c6d10364ed5f61e48dc78fde946c_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TOP_ACTIVITY_INFO

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.yulong.android.launcherL.permission.READ_SETTINGS

com.meizu.flyme.launcher.permission.READ_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.qiku.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.zte.mifavor.launcher.permission.READ_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.READ_SETTINGS

com.yulong.android.launcher3.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

com.sec.android.app.twlauncher.settings.READ_SETTINGS

com.tencent.qqlauncher.permission.READ_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.ebproductions.android.launcher.permission.READ_SETTINGS

8225c6d10364ed5f61e48dc78fde946c_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.appstream.StreamAppMainActivity

io.dcloud.appstream.StreamAppsAbout

io.dcloud.WebAppActivity

io.dcloud.multiprocess.activity.WebAppActivity1

io.dcloud.appstream.OpenStreamAppTransferActivity

io.dcloud.ProcessMediator

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

io.dcloud.WebviewActivity

com.ak.torch.shell.landingpage.TorchActivity

io.dcloud.adapter.io.MiniServerService

io.dcloud.streamdownload.DownloadService

io.dcloud.appstream.service.DaemonService

io.dcloud.appstream.service.ProtectService

io.dcloud.multiprocess.service.MultiProcessService

com.igexin.sdk.PushService

io.dcloud.feature.apsGt.GTNormalIntentService

io.dcloud.feature.apsGt.GTNormalPushService

io.dcloud.common.adapter.io.PushReceiver

io.dcloud.common.adapter.io.DownloadReceiver

io.dcloud.appstream.receiver.DaemonReceiver

com.igexin.sdk.PushReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

com.ak.torch.shell.provider.TorchProvider

tcore.jar

Sharing

General

Malware Config

Signatures

File Explorer

8225c6d10364ed5f61e48dc78fde946c_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.appstream.StreamAppMainActivity

io.dcloud.appstream.StreamAppsAbout

io.dcloud.WebAppActivity

io.dcloud.multiprocess.activity.WebAppActivity1

io.dcloud.appstream.OpenStreamAppTransferActivity

io.dcloud.ProcessMediator

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

io.dcloud.WebviewActivity

com.ak.torch.shell.landingpage.TorchActivity

io.dcloud.adapter.io.MiniServerService

io.dcloud.streamdownload.DownloadService

io.dcloud.appstream.service.DaemonService

io.dcloud.appstream.service.ProtectService

io.dcloud.multiprocess.service.MultiProcessService

com.igexin.sdk.PushService

io.dcloud.feature.apsGt.GTNormalIntentService

io.dcloud.feature.apsGt.GTNormalPushService

io.dcloud.common.adapter.io.PushReceiver

io.dcloud.common.adapter.io.DownloadReceiver

io.dcloud.appstream.receiver.DaemonReceiver

com.igexin.sdk.PushReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

com.ak.torch.shell.provider.TorchProvider

tcore.jar

Android Permissions

8225c6d10364ed5f61e48dc78fde946c_JaffaCakes118