Overview

overview

8

Static

static

8

83860877c3...18.apk

android-9-x86

7

83860877c3...18.apk

android-11-x64

6

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    83860877c3d786d7c05675bcbecb846e_JaffaCakes118

  • Size

    30.7MB

  • MD5

    83860877c3d786d7c05675bcbecb846e

  • SHA1

    5b912140a364e8efafc4c49badbce8dc991d2fc2

  • SHA256

    3dc8d27263a4679f83e31a5327367af1d416a2003802f97956447bad018f11ba

  • SHA512

    f97950009ed33a25099a6084ae71c45543d2fe4c955c132b0886f7fa35f8da286bb3dd5f5d1e1831a041107c8982597802bb5ba06b06cf0ebbbb1b2cc284a39c

  • SSDEEP

    786432:zOae/5YfJH0hYz7Q3RglHXxJunEcEZmxv/+7tcKxL9errST:6ao5MJjz7QBg9unEcQ2/+7OKxL9ef4

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 12 IoCs

Files

  • 83860877c3d786d7c05675bcbecb846e_JaffaCakes118
    .apk android arch:arm arch:x86

    com.hecom.Guanghua

    com.hecom.Guanghua.MainActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

83860877c3d786d7c05675bcbecb846e_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PROFILE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WRITE_SETTINGS

android.permission.READ_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.RECORD_AUDIO

android.permission.VIBRATE

com.hecom.Guanghua.permission.MIPUSH_RECEIVE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

com.hecom.Guanghua.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.hecom.Guanghua.permission.C2D_MESSAGE