840c242f4bd395804c61c333b2d33ba6_JaffaCakes118

General

Target
840c242f4bd395804c61c333b2d33ba6_JaffaCakes118
Size 12.8MB
Sample240530-nffwxafe2s
SHA256 251e9c2049f573a3782fa934f05b3b43ee8207b0bc265a5f5fdc1a46467f6689
MD5 840c242f4bd395804c61c333b2d33ba6
SHA1 f2f18ebab3fe9cab520d760505a0d5fef69f0019
SHA512 e054a2b40b9d16a0849d688a0298c83c85ac53a2f973f231ca7424775a0e819c64ab324541b80661bf4e8d086a8915f104ae7b42e021978c30c0b6b0f6f98fab
SSDEEP 196608:YTdkL4GkJ6LAJb6pASoWmPhQi42BjzAaWNgPs5KqRcCQUF/5tE7cDO/XEpTwq3JA:YWUGk409rvdrYnKTq2J85O7wwUpTR+
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read SMS messages.	android.permission.READ_SMS

File Explorer

840c242f4bd395804c61c333b2d33ba6_JaffaCakes118

.apk 12.8MB

840c242f4bd395804c61c333b2d33ba6_JaffaCakes118

SHA256 251e9c2049f573a3782fa934f05b3b43ee8207b0bc265a5f5fdc1a46467f6689
MD5 840c242f4bd395804c61c333b2d33ba6
SHA1 f2f18ebab3fe9cab520d760505a0d5fef69f0019
SHA512 e054a2b40b9d16a0849d688a0298c83c85ac53a2f973f231ca7424775a0e819c64ab324541b80661bf4e8d086a8915f104ae7b42e021978c30c0b6b0f6f98fab
SSDEEP 196608:YTdkL4GkJ6LAJb6pASoWmPhQi42BjzAaWNgPs5KqRcCQUF/5tE7cDO/XEpTwq3JA:YWUGk409rvdrYnKTq2J85O7wwUpTR+
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.j8635026.fae

Android Permissions

840c242f4bd395804c61c333b2d33ba6_JaffaCakes118

Permissions

android.permission.INTERNET

com.huawei.android.launcher.permission.CHANGE_BADGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.CAMERA

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.RECORD_AUDIO

android.permission.FLASHLIGHT

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.RECEIVE_USER_PRESENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.j8635026.fae.permission.JPUSH_MESSAGE

android.permission.CHANGE_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.READ_SMS

840c242f4bd395804c61c333b2d33ba6_JaffaCakes118

com.uzmap.pkg.EntranceActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.tencent.connect.common.AssistActivity

com.apicloud.qqplus.LoginActivity

com.apicloud.qqplus.ShareActivity

com.tencent.tauth.AuthActivity

com.tencent.open.yyb.AppbarActivity

com.tencent.connect.avatar.ImageActivity

com.j8635026.fae.wxapi.WXEntryActivity

com.uzmap.pkg.uzsocket.UPnsService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.uzmap.pkg.uzapp.UPExtraBridge

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.open.apicloud.jpush.JPushReceiver

com.uzmap.pkg.uzapp.UProvider

com.uzmap.pkg.uzapp.DataProvider

cn.jpush.android.service.DataProvider

Sharing

General

Malware Config

Signatures

File Explorer

840c242f4bd395804c61c333b2d33ba6_JaffaCakes118

com.uzmap.pkg.EntranceActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.tencent.connect.common.AssistActivity

com.apicloud.qqplus.LoginActivity

com.apicloud.qqplus.ShareActivity

com.tencent.tauth.AuthActivity

com.tencent.open.yyb.AppbarActivity

com.tencent.connect.avatar.ImageActivity

com.j8635026.fae.wxapi.WXEntryActivity

com.uzmap.pkg.uzsocket.UPnsService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.uzmap.pkg.uzapp.UPExtraBridge

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.open.apicloud.jpush.JPushReceiver

com.uzmap.pkg.uzapp.UProvider

com.uzmap.pkg.uzapp.DataProvider

cn.jpush.android.service.DataProvider

Android Permissions

840c242f4bd395804c61c333b2d33ba6_JaffaCakes118