8905559c0ac2cf27e507ba1eecc956ce_JaffaCakes118

General

Target

8905559c0ac2cf27e507ba1eecc956ce_JaffaCakes118
Size

10.7MB
MD5

8905559c0ac2cf27e507ba1eecc956ce
SHA1

7909d4862572795530a806e0bd77c3e61ea95813
SHA256

c87b2ea06a04c7b526a4bdaaeeab62766ed06addb283af51f7af45ed6e6d3504
SHA512

bb64172877935c4611f30fdd5e202e83c8f7c49dac295cb3f3e3d08033edcec5e6162e8a7a954830eb884da50bba8ac99782dbaff8ac25d4296e941140a7efee
SSDEEP

196608:RfgXulq/GtJCzla8vAPWh/AYQCLxIp/qBVfHF1/ngJXpth:RfgVu6lLAP3dCVIpCBxgTth

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

8905559c0ac2cf27e507ba1eecc956ce_JaffaCakes118
.apk android arch:arm

cn.catcap.qhta

.qhta

Activities

.qhta

android.intent.action.MAIN

mm.purchasesdk.iapservice.BillingLayoutActivity

cn.catcap.qhta.com.mmiap.activity

safiap.framework.ui.UpdateHintActivity

safiap.framework.ACTION_TO_INSTALL
safiap.framework.ACTION_TO_INSTALL_IAP
safiap.framework.ACTION_NETWORK_ERROR_IAP
safiap.framework.ACTION_NETWORK_ERROR_FRAMEWORK

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.INTERNET
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.DISABLE_KEYGUARD

Receivers

safiap.framework.CheckUpdateReceiver

safiap.framework.ACTION_CANCEL_NOTIFICATION
safiap.GET_SHARED_DATA
safiap.framework.ACTION_SET_TIMER

cn.play.dserv.DsReceiver

cn.play.dservice
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

Services

mm.purchasesdk.iapservice.PurchaseService

com.aspire.purchaseservice.BIND
cn.catcap.qhta.purchaseservice.BIND
android.intent.action.MAIN

safiap.framework.SafFrameworkManager

safiap.framework.sdk.ISAFFramework
safiap.framework.ACTION_START_DOWNLOAD
safiap.framework.ACTION_CHECK_UPDATE

Android Permissions

8905559c0ac2cf27e507ba1eecc956ce_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.DISABLE_KEYGUARD

Sharing

General

Malware Config

Signatures

Files

cn.catcap.qhta

.qhta

Activities

.qhta

mm.purchasesdk.iapservice.BillingLayoutActivity

safiap.framework.ui.UpdateHintActivity

Permissions

Receivers

safiap.framework.CheckUpdateReceiver

cn.play.dserv.DsReceiver

Services

mm.purchasesdk.iapservice.PurchaseService

safiap.framework.SafFrameworkManager

Android Permissions

8905559c0ac2cf27e507ba1eecc956ce_JaffaCakes118