848daf1ffd998cf8e65ecb724f8bb09d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
848daf1ffd998cf8e65ecb724f8bb09d_JaffaCakes118
Size 22.5MB
Sample240530-sa1rcadd46
SHA256 e20bbc2bc438555fd768cc4f3bffa76801e847dcbd00ed9be2b649d68ec69f9c
MD5 848daf1ffd998cf8e65ecb724f8bb09d
SHA1 ec016a1cddc318970147c71224d247b23e42dc09
SHA512 c839fcbd6a5a6867b32fb6573816e46be4a4ac0402b7f999af70e511f3447ca1dcf16787986c9c957275296d7523898230a9419541554cf09c4e27d9cb0d74e0
SSDEEP 393216:UfnPEczhVYQzWYcLz+KonorE3rSAfplI/a8GQ8iUXHOTuYSPdwwHBflOBaj6uLg+:GhVYtY2+xM6ffp2z87HOTuYiGwHaBzuZ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read SMS messages.	android.permission.READ_SMS

File Explorer

848daf1ffd998cf8e65ecb724f8bb09d_JaffaCakes118

.apk 22.5MB

848daf1ffd998cf8e65ecb724f8bb09d_JaffaCakes118

SHA256 e20bbc2bc438555fd768cc4f3bffa76801e847dcbd00ed9be2b649d68ec69f9c
MD5 848daf1ffd998cf8e65ecb724f8bb09d
SHA1 ec016a1cddc318970147c71224d247b23e42dc09
SHA512 c839fcbd6a5a6867b32fb6573816e46be4a4ac0402b7f999af70e511f3447ca1dcf16787986c9c957275296d7523898230a9419541554cf09c4e27d9cb0d74e0
SSDEEP 393216:UfnPEczhVYQzWYcLz+KonorE3rSAfplI/a8GQ8iUXHOTuYSPdwwHBflOBaj6uLg+:GhVYtY2+xM6ffp2z87HOTuYiGwHaBzuZ
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.cyjh.gundam

android.permission.GET_TASKS android.permission.SET_DEBUG_APP android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_ACCOUNTS android.permission.USE_CREDENTIALS android.permission.MANAGE_ACCOUNTS android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.DISABLE_KEYGUARD android.permission.RECEIVE_USER_PRESENT android.permission.WRITE_SETTINGS android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.permission.KILL_BACKGROUND_PROCESSES android.permission.VIBRATE android.permission.WAKE_LOCK android.permission.PROCESS_OUTGOING_CALLS android.permission.MODIFY_AUDIO_SETTINGS android.permission.INTERACT_ACROSS_USERS_FULL android.permission.MOUNT_FORMAT_FILESYSTEMS android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_CONTACTS android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.CAMERA android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.RESTART_PACKAGES android.permission.RECEIVE_BOOT_COMPLETED android.permission.RECEIVE_SMS android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.BROADCAST_PACKAGE_ADDED android.permission.BROADCAST_PACKAGE_CHANGED android.permission.BROADCAST_PACKAGE_INSTALL android.permission.BROADCAST_PACKAGE_REPLACED android.permission.EXPAND_STATUS_BAR android.permission.READ_LOGS android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.SEND_SMS android.permission.CALL_PHONE android.permission.PACKAGE_USAGE_STATS android.permission.READ_SMS com.cyjh.gundam.permission.JPUSH_MESSAGE

com.cyjh.gundam.activity.GuiActivity

android.intent.action.MAIN

com.cyjh.gundam.activity.GunDamMainActivity

com.cyjh.gundam.activity.AddAttentionActivity

com.cyjh.gundam.activity.TwitterContentActivity

com.cyjh.gundam.activity.TwitterContentGameActivity

com.cyjh.gundam.activity.SendTwitterActivity

com.cyjh.gundam.activity.SendGameActicity

com.cyjh.gundam.activity.SendGameEditActicity

com.cyjh.gundam.activity.TwitterListActivity

com.cyjh.gundam.fengwo.ui.activity.ChooseLocalGamesActivity

com.cyjh.gundam.activity.FeedbacksActivity

com.cyjh.gundam.activity.SettingActivity

com.cyjh.gundam.activity.BigImgGameActivity

com.cyjh.gundam.activity.GameBigImgShowActivity

com.cyjh.gundam.activity.FeedbackActivity

com.cyjh.gundam.activity.login.LoginChangeActivity

com.cyjh.gundam.activity.login.LoginMainActivity

com.cyjh.gundam.activity.login.LoginPhoneActivity

com.cyjh.gundam.activity.login.LoginRegisterActivity

com.cyjh.gundam.activity.login.LoginForgetActivity

com.cyjh.gundam.activity.login.LoginVerifiActivity

com.cyjh.gundam.activity.FansActivity

com.cyjh.gundam.activity.AttentionListActivity

com.cyjh.gundam.activity.MakedActivity

com.cyjh.gundam.activity.StatisticsActivity

com.cyjh.gundam.activity.ReleasedActivity

com.cyjh.gundam.fengwo.ui.activity.MessageActivity

com.cyjh.gundam.activity.TopicInfoActivity

com.cyjh.gundam.fengwo.ui.activity.ScriptStatisticsAllDataActivity

com.cyjh.gundam.activity.GameStatisticsDetailActivity

com.cyjh.gundam.fengwo.ui.activity.MyScriptActivity

com.cyjh.gundam.activity.DialogActivity

com.cyjh.gundam.fengwo.ui.activity.SearchActivity

com.cyjh.gundam.activity.Html5PageActivity

com.cyjh.gundam.activity.TopicSearchInfoActivity

com.cyjh.gundam.activity.SummerWebActivity

com.cyjh.gundam.activity.SummerWebOfWelcomePageActivity

com.cyjh.gundam.activity.AppStoreInfoActivity

com.cyjh.gundam.activity.HelpCenterActivity

com.cyjh.gundam.activity.HelperConterInfoAct

com.cyjh.gundam.redenvelop.activity.ScreenActivity

com.cyjh.gundam.vip.view.activity.VipInstructionsActivity

com.cyjh.gundam.redenvelop.activity.RedGuiActivity

com.cyjh.gundam.redenvelop.activity.RedAttentionActivity

com.cyjh.gundam.redenvelop.activity.RedNoDutyActivity

com.cyjh.gundam.vip.view.activity.AccountInsureActivity

com.cyjh.gundam.fengwo.ui.OutUser1Dialog

com.cyjh.gundam.fengwo.ui.AdvanceCheckDialog

com.cyjh.gundam.fengwoscript.ui.pop.AdvanceOwnerDialog

com.cyjh.gundam.fengwo.ui.activity.OneKeyHookActivity

com.cyjh.gundam.fengwo.ui.activity.HookDetailActivity

com.cyjh.gundam.fengwo.ui.activity.UMengNotifyActivity

com.cyjh.gundam.fengwo.ui.activity.HookNextDetailActivity

com.cyjh.gundam.fengwo.ui.activity.HookNextDetailImgShowActivity

com.cyjh.gundam.activity.AccountSafe

com.umeng.socialize.editorpage.ShareActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.cyjh.gundam.wxapi.WXEntryActivity

com.cyjh.gundam.wxapi.WXPayEntryActivity

com.cyjh.gundam.vip.view.activity.LoginRegisterWebActivity

com.alipay.sdk.app.H5PayActivity

com.cyjh.gundam.vip.view.activity.VipInsureScheduleActivity

com.cyjh.gundam.vip.view.activity.MessageCheckActivity

com.cyjh.gundam.vip.view.activity.MessageNoticeActivity

com.cyjh.gundam.vip.view.activity.VipPayRecordsActivity

com.cyjh.gundam.fengwo.ui.activity.DevelopersActivity

com.cyjh.gundam.activity.GameOrderResultActivity

com.cyjh.gundam.fengwo.ui.activity.HotActActivity

com.cyjh.gundam.fengwo.ui.activity.AssistantLibActivity

com.cyjh.gundam.fengwo.ui.activity.CrackGamesActivity

com.cyjh.gundam.fengwo.ui.activity.CrackGamesDetailActivity

com.cyjh.gundam.cloudhook.ui.activity.YGJ3NoticeMsgActivity

com.cyjh.gundam.wxapi.HookDredgeVSServiceActivity

com.cyjh.gundam.fengwo.ui.activity.HookSuggestFeedBackActivity

com.cyjh.gundam.fengwo.ui.activity.SweepCodeActivity

com.cyjh.gundam.fengwo.ui.activity.cloud.CloudHookChooseGameActivity

com.cyjh.gundam.fengwo.ui.activity.cloud.CloudHookScriptSetListActivity

com.cyjh.gundam.fengwo.ui.activity.cloud.CloudHookScriptSetDetailActivity

com.cyjh.gundam.mall.ui.activity.MallActivity

com.cyjh.gundam.fengwo.ui.activity.cloud.CloudHookHomePage

com.cyjh.gundam.cloudhook.ui.activity.YGJ3NoticeMsgDetailActivity

com.cyjh.gundam.fengwo.ui.activity.cloud.CloudHookChooseLoginMethodActivity

com.cyjh.gundam.fengwo.ui.activity.GameVoucherListActivity

com.cyjh.gundam.fengwo.ui.activity.GameVoucherDetailActivity

com.cyjh.gundam.fengwo.ui.activity.MyGameVoucherActivity

com.cyjh.gundam.fengwo.ui.activity.ScriptStatisticsDetailActivity

com.cyjh.gundam.fengwo.ui.activity.cloud.CloudHookAddGameActivity

com.cyjh.gundam.fengwo.ui.activity.cloud.YDLCloudHookChooseGameChannelActivity

com.cyjh.gundam.fengwo.ui.activity.cloud.YDLCloudVisualizationActivity

com.cyjh.gundam.fengwo.ui.activity.cloud.YDLCloudWhereasMethodActivity

com.lcardy.pay.activity.WapPayWebView

com.lcardy.pay.activity.AppPayDialogView

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.cyjh.gundam.redenvelop.service.WechatAccService

android.accessibilityservice.AccessibilityService

com.kaopu.download.kernel.DownloadService

com.cyjh.mobileanjian.ipc.IpcService

com.cyjh.mobileanjian.input.inputkb

android.view.InputMethod

com.cyjh.gundam.fengwoscript.service.ScriptService

com.cyjh.gundam.service.ScriptService

com.cyjh.gundam.service.MyPushIntentService

com.umeng.message.UmengService

com.cyjh.gundam.intent.action.START com.cyjh.gundam.intent.action.COCKROACH org.agoo.android.intent.action.PING_V4

com.umeng.message.UmengIntentService

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService org.android.agoo.client.ElectionReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action com.umeng.message.unregistercallback.action com.umeng.message.message.handler.action com.umeng.message.autoupdate.handler.action

com.umeng.message.UmengDownloadResourceService

com.umeng.message.local.UmengLocalNotificationService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER cn.jpush.android.intent.REPORT cn.jpush.android.intent.PushService cn.jpush.android.intent.PUSH_TIME

cn.jpush.android.service.DaemonService

cn.jpush.android.intent.DaemonService

com.cyjh.gundam.receiver.NewProBroadcastReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

com.cyjh.gundam.fengwo.receiver.MutualOutReceiver

com.cyjh.gundam.download.DownLoadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED

com.cyjh.gundam.tools.downloads.receiver.DownloadNotificationReceiver

com.cyjh.gundam.receiver.PhoneStatReceiver

android.intent.action.PHONE_STATE android.intent.action.NEW_OUTGOING_CALL

com.cyjh.gundam.receiver.NotificationReceiver

SEND_DOWN_ACTION

com.cyjh.gundam.vip.receive.VipNotificationReceive

com.cyjh.gundam.vip.manager.VipNotificationManager

com.cyjh.gundam.receiver.JPushReceiver

cn.jpush.android.intent.REGISTRATION cn.jpush.android.intent.MESSAGE_RECEIVED cn.jpush.android.intent.NOTIFICATION_RECEIVED cn.jpush.android.intent.NOTIFICATION_OPENED

com.cyjh.gundam.cloudhook.receiver.BroadcastEvent

com.cyjh.gundam.POP_AD_CLICK android.intent.action.PACKAGE_ADDED

com.umeng.message.NotificationProxyBroadcastReceiver

com.umeng.message.SystemReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_REMOVED

com.umeng.message.MessageReceiver

org.agoo.android.intent.action.RECEIVE

com.umeng.message.ElectionReceiver

org.agoo.android.intent.action.ELECTION_RESULT_V4

com.umeng.message.RegistrationReceiver

com.cyjh.gundam.intent.action.COMMAND

com.umeng.message.UmengMessageBootReceiver

android.intent.action.BOOT_COMPLETED

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

cn.jpush.android.service.AlarmReceiver

Android Permissions

848daf1ffd998cf8e65ecb724f8bb09d_JaffaCakes118

Permissions

android.permission.GET_TASKS

android.permission.SET_DEBUG_APP

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.MOUNT_FORMAT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_CONTACTS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.EXPAND_STATUS_BAR

android.permission.READ_LOGS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.SEND_SMS

android.permission.CALL_PHONE

android.permission.PACKAGE_USAGE_STATS

android.permission.READ_SMS

com.cyjh.gundam.permission.JPUSH_MESSAGE