878a16f169a62c42a47a6615dc651d01_JaffaCakes118

General

Target

878a16f169a62c42a47a6615dc651d01_JaffaCakes118
Size

8.3MB
MD5

878a16f169a62c42a47a6615dc651d01
SHA1

984d2f392601cff4ba2f0b2e29fd10d530d78450
SHA256

0e3eda81dc70c0764d38fffab8dabbf40a6665e9dd0d604e92d357bebfd98f26
SHA512

e0d2723855bd886f9875e7d70605e8ddce54320d52a1a2331aeea64907d2e55070ac5343ac9315a93eb4d02fd00f77c57b12e3b7796d8fef0749410f8be16e90
SSDEEP

196608:nLALb9OLXxU1MWka3m8vh6Hw/nDRY4KqobvMuZVuFHloDGT:n81Jk98iw/i4KLYuZVuRuST

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

878a16f169a62c42a47a6615dc651d01_JaffaCakes118
.apk android arch:arm arch:x86

com.fly.gs

com.fly.gs.activities.Welcome

Activities

com.fly.gs.activities.Welcome

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.fly.ju.u.FlyJuActivity

android.intent.action.MAIN

corg.gams.dasj.Gamea

android.intent.action.CREATE_SHORTCUT

Permissions

android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.INTERNET
android.permission.ACCES_MOCK_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_GPS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.RESTART_PACKAGES
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
com.android.launcher.permission.READ_SETTINGS
android.permission.BROADCAST_STICKY
android.permission.BAIDU_LOCATION_SERVICE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECORD_AUDIO
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.INSTALL_SHORTCUT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_CONFIGURATION

Receivers

com.umeng.message.SystemReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.MessageReceiver

org.agoo.android.intent.action.RECEIVE

com.umeng.message.ElectionReceiver

org.agoo.android.intent.action.ELECTION_RESULT_V4

com.umeng.message.RegistrationReceiver

com.fly.gs.intent.action.COMMAND

com.umeng.message.BootBroadcastReceiver

android.intent.action.BOOT_COMPLETED

net.youmi.android.AdReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_INSTALL

com.fly.ku.KuReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.fly.ju.n.FlyJuReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.RESUME
android.intent.action.USER_PRESENT
android.intent.action.MEDIA_MOUNTED
android.intent.action.PACKAGE_REMOVED

corg.gams.dasj.Gamer

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

Services

com.umeng.message.UmengService

com.fly.gs.intent.action.START
com.fly.gs.intent.action.COCKROACH
org.agoo.android.intent.action.PING_V4
BaiduNaviSDK_Resource_v1_0_0.png
.apk android

com.baidu.navisdk

com.baidu.navi.api.MainActivity

Activities

com.baidu.navi.api.MainActivity

android.intent.action.MAIN

Android Permissions

878a16f169a62c42a47a6615dc651d01_JaffaCakes118

Permissions

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCES_MOCK_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_GPS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

com.android.launcher.permission.READ_SETTINGS

android.permission.BROADCAST_STICKY

android.permission.BAIDU_LOCATION_SERVICE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_CONFIGURATION

Sharing

General

Malware Config

Signatures

Files

com.fly.gs

com.fly.gs.activities.Welcome

Activities

com.fly.gs.activities.Welcome

com.tencent.tauth.AuthActivity

com.fly.ju.u.FlyJuActivity

corg.gams.dasj.Gamea

Permissions

Receivers

com.umeng.message.SystemReceiver

com.umeng.message.MessageReceiver

com.umeng.message.ElectionReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.BootBroadcastReceiver

net.youmi.android.AdReceiver

com.fly.ku.KuReceiver

com.fly.ju.n.FlyJuReceiver

corg.gams.dasj.Gamer

Services

com.umeng.message.UmengService

com.baidu.navisdk

com.baidu.navi.api.MainActivity

Activities

com.baidu.navi.api.MainActivity

Android Permissions

878a16f169a62c42a47a6615dc651d01_JaffaCakes118