849d72023ed4b19cb552c7d7e4dbc89b_JaffaCakes118

General

Target

849d72023ed4b19cb552c7d7e4dbc89b_JaffaCakes118
Size

20.6MB
MD5

849d72023ed4b19cb552c7d7e4dbc89b
SHA1

da1c0e3ae1f7da49819a3f0df2012cac43a69460
SHA256

dd781eaa888d27b9463f890a7ef7dc0240310ec0c23bd3c7cb1f095d2d5f587c
SHA512

693e0df1d1e55cf2db2a2facab7bde669a49655da818e027eb04cfe6e05cf67163139cf3763756c17d737bb88bb26eaaf2f85a6eb078c6a7c633b80122b6e364
SSDEEP

393216:MFe52FfJCi2vaSAigE9r31Nxy0JNa/e7YHZmqFFse3U+gVMF:0Fx52hgiJy0jUhFmedgM

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

849d72023ed4b19cb552c7d7e4dbc89b_JaffaCakes118
.apk android arch:arm

com.gunqiu

com.gunqiu.activity.GQSplashActivity

Activities

com.gunqiu.activity.GQSplashActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.gunqiu.WBShareActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.REQUEST_INSTALL_PACKAGES
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.CAMERA
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.GET_ACCOUNTS
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.SET_DEBUG_APP
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.RECEIVE_USER_PRESENT
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RESTART_PACKAGES
android.permission.BROADCAST_STICKY
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.GET_TASKS
android.permission.BLUETOOTH
android.permission.BATTERY_STATS
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED

Receivers

com.gunqiu.polling.NetworkReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.gunqiu.receiver.HomeWatcherReceiver

android.intent.action.CLOSE_SYSTEM_DIALOGS

com.gunqiu.receiver.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

com.example.libappupdate.receiver.ApkDownLoadCompleteReciver

android.intent.action.DOWNLOAD_COMPLETE

com.taobao.accs.EventReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.USER_PRESENT

com.taobao.accs.ServiceReceiver

com.taobao.accs.intent.action.COMMAND
com.taobao.accs.intent.action.START_FROM_AGOO

com.taobao.agoo.AgooCommondReceiver

com.gunqiu.intent.action.COMMAND
android.intent.action.PACKAGE_REMOVED

Services

com.gunqiu.polling.PollingService

com.gunqiu.polling.PollingService

com.gunqiu.app.DAppUpdateService

com.gunqiu.app.DAppUpdateService

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.SERVICE
com.taobao.accs.intent.action.ELECTION

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

com.umeng.message.UmengIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.XiaomiIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action
com.umeng.message.enablecallback.action
com.umeng.message.disablecallback.action
com.umeng.message.message.handler.action

Android Permissions

849d72023ed4b19cb552c7d7e4dbc89b_JaffaCakes118

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.CAMERA

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.GET_ACCOUNTS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.SET_DEBUG_APP

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.RECEIVE_USER_PRESENT

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RESTART_PACKAGES

android.permission.BROADCAST_STICKY

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_TASKS

android.permission.BLUETOOTH

android.permission.BATTERY_STATS

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

Sharing

General

Malware Config

Signatures

Files

com.gunqiu

com.gunqiu.activity.GQSplashActivity

Activities

com.gunqiu.activity.GQSplashActivity

com.gunqiu.WBShareActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.gunqiu.polling.NetworkReceiver

com.gunqiu.receiver.HomeWatcherReceiver

com.gunqiu.receiver.AppRegister

com.example.libappupdate.receiver.ApkDownLoadCompleteReciver

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

com.taobao.agoo.AgooCommondReceiver

Services

com.gunqiu.polling.PollingService

com.gunqiu.app.DAppUpdateService

com.taobao.accs.ChannelService

com.taobao.accs.data.MsgDistributeService

org.android.agoo.accs.AgooService

com.umeng.message.UmengIntentService

com.umeng.message.XiaomiIntentService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

Android Permissions

849d72023ed4b19cb552c7d7e4dbc89b_JaffaCakes118