892965862ecf6dfba48e1c015ea063ed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
892965862ecf6dfba48e1c015ea063ed_JaffaCakes118
Size 7.6MB
Sample240601-c7rxpsfh45
SHA256 157d3f1be4493f95efdd1c4ac73d02a808e795f081df3a0aaac355ed4f51b187
MD5 892965862ecf6dfba48e1c015ea063ed
SHA1 c5b2e0614f96da3ef7cecfb059bc8c49a0a54005
SHA512 2dd0e54d1a46a37e2b10d31ccda35f524e1a9b399c245cc51d18bd339cdfe53feca26b18d7d91e42577d413ccc91e7fb4706cddaaaf560372890b104dd8f52c6
SSDEEP 196608:yODloyE/BRqw/cR9zSTJRGte/zm5cpiYP4mGVjwPHV:yODu/OyS9GTJ8DC4YP4mGSV
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

892965862ecf6dfba48e1c015ea063ed_JaffaCakes118

.apk 7.6MB
base.bin

.apk 882KB
dynamic.jar

.apk 108KB
gdtadv2.jar

.apk 184KB

892965862ecf6dfba48e1c015ea063ed_JaffaCakes118

SHA256 157d3f1be4493f95efdd1c4ac73d02a808e795f081df3a0aaac355ed4f51b187
MD5 892965862ecf6dfba48e1c015ea063ed
SHA1 c5b2e0614f96da3ef7cecfb059bc8c49a0a54005
SHA512 2dd0e54d1a46a37e2b10d31ccda35f524e1a9b399c245cc51d18bd339cdfe53feca26b18d7d91e42577d413ccc91e7fb4706cddaaaf560372890b104dd8f52c6
SSDEEP 196608:yODloyE/BRqw/cR9zSTJRGte/zm5cpiYP4mGVjwPHV:yODu/OyS9GTJ8DC4YP4mGSV
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.mianfeizs.book

android.permission.BATTERY_STATS android.permission.DISABLE_KEYGUARD android.permission.RECEIVE_BOOT_COMPLETED android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.READ_EXTERNAL_STORAGE com.chineseall.singlebook.permission.JPUSH_MESSAGE android.permission.RECEIVE_USER_PRESENT android.permission.READ_PHONE_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_COARSE_UPDATES android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_NETWORK_STATE android.permission.CAMERA android.permission.GET_TASKS android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.KILL_BACKGROUND_PROCESSES android.permission.READ_LOGS android.permission.CHANGE_CONFIGURATION android.permission.CALL_PHONE com.android.launcher.permission.INSTALL_SHORTCUT android.permission.WRITE_EXTERNAL_STORAGE android.permission.VIBRATE android.permission.WRITE_SETTINGS android.permission.MODIFY_AUDIO_SETTINGS android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.DOWNLOAD_WITHOUT_NOTIFICATION com.google.android.gms.permission.ACTIVITY_RECOGNITION com.google.android.c2dm.permission.RECEIVE android.permission.BROADCAST_STICKY android.permission.WRITE_GSERVICES android.permission.ACCESS_DOWNLOAD_MANAGER android.permission.EXPAND_STATUS_BAR getui.permission.GetuiService.com.mianfeizs.book android.permission.BROADCAST_PACKAGE_ADDED android.permission.BROADCAST_PACKAGE_CHANGED android.permission.BROADCAST_PACKAGE_INSTALL android.permission.BROADCAST_PACKAGE_REPLACED android.permission.RESTART_PACKAGES android.permission.CHANGE_NETWORK_STATE com.mianfeizs.book.permission.MIPUSH_RECEIVE android.permission.WRITE_SETTINGS com.meizu.flyme.push.permission.RECEIVE com.meizu.c2dm.permission.RECEIVE com.mianfeizs.book.push.permission.MESSAGE com.mianfeizs.book.permission.C2D_MESSAGE android.permission.ACCESS_COARSE_LOCATION com.mianfeizs.book.permission.JPUSH_MESSAGE android.permission.WAKE_LOCK

com.chineseall.reader.ui.FlashActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.CREATE_SHORTCUT

com.chineseall.reader.ui.FrameActivity

com.chineseall.reader.ui.ChapterContentActivity

com.chineseall.reader.ui.WebViewActivity

com.chineseall.reader.ui.view.DetailWebViewActivity

com.chineseall.reader.search.SearchActivity

com.chineseall.reader.ui.view.StartNewWebActivity

com.chineseall.reader.ui.view.RecommendWebActivity

com.chineseall.reader.ui.ReadActivity

com.chineseall.reader.ui.AppInfoActivity

com.chineseall.reader.ui.EarnIntegralActivity

com.mianfeizs.book.intent.action.earn

com.chineseall.reader.ui.view.OperPictureActivity

com.chineseall.reader.ui.ImportLocalBookActivity

com.chineseall.reader.ui.SocialShareActivity

com.mianfeizs.book.intent.action.share

com.chineseall.readerapi.comment.PostChapterCommentActivity

com.chineseall.reader.ui.BoardActivity

com.chineseall.live.LiveActivity

com.chineseall.live.LiveLoadingActivity

com.chineseall.push.PushLandingActivity

com.qq.e.ads.ADActivity

com.chineseall.reader.ui.view.MiGuPayActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.chineseall.ads.juxiao.JxReaderLandingPageActivity

com.chineseall.ads.juxiao.JxNormalLandingPageActivity

com.ak.android.bridge.AKActivity

com.afk.client.ads.AdActivity

com.afk.permission.RequestPermissionActivity

com.umeng.qq.tencent.AuthActivity

android.intent.action.VIEW

com.umeng.qq.tencent.AssistActivity

com.mianfeizs.book.wxapi.WXEntryActivity

com.iclicash.advlib.ui.front.ADBrowser

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.chineseall.reader.ui.util.InstallorUnstallAppBroadcastReceiver

android.intent.action.PACKAGE_ADDED

com.chineseall.readerapi.NetChangedReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT com.igexin.sdk.action.refreshls android.intent.action.MEDIA_MOUNTED android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.sdk.MiuiPushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.MESSAGE_ARRIVED com.xiaomi.mipush.ERROR

com.meizu.cloud.pushsdk.SystemReceiver

com.meizu.cloud.pushservice.action.PUSH_SERVICE_START

com.igexin.sdk.FlymePushReceiver

com.meizu.flyme.push.intent.MESSAGE com.meizu.flyme.push.intent.REGISTER.FEEDBACK com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK com.meizu.c2dm.intent.REGISTRATION com.meizu.c2dm.intent.RECEIVE

com.igexin.sdk.HmsPushReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE com.huawei.android.push.intent.CLICK com.huawei.intent.action.PUSH_STATE

com.huawei.hms.support.api.push.PushEventReceiver

com.huawei.intent.action.PUSH

com.chineseall.push.jg.JPushReceiver

cn.jpush.android.intent.REGISTRATION cn.jpush.android.intent.MESSAGE_RECEIVED cn.jpush.android.intent.NOTIFICATION_RECEIVED cn.jpush.android.intent.NOTIFICATION_OPENED cn.jpush.android.intent.CONNECTION

com.chineseall.ads.AdLogReceiver

FREEBOOK_AD_LOG_INPUT_ACTION

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

cn.jpush.android.service.AlarmReceiver

Android Permissions

892965862ecf6dfba48e1c015ea063ed_JaffaCakes118

Permissions

android.permission.BATTERY_STATS

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

com.chineseall.singlebook.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_COARSE_UPDATES

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.CAMERA

android.permission.GET_TASKS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_LOGS

android.permission.CHANGE_CONFIGURATION

android.permission.CALL_PHONE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

com.google.android.gms.permission.ACTIVITY_RECOGNITION

com.google.android.c2dm.permission.RECEIVE

android.permission.BROADCAST_STICKY

android.permission.WRITE_GSERVICES

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.EXPAND_STATUS_BAR

getui.permission.GetuiService.com.mianfeizs.book

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.CHANGE_NETWORK_STATE

com.mianfeizs.book.permission.MIPUSH_RECEIVE

android.permission.WRITE_SETTINGS

com.meizu.flyme.push.permission.RECEIVE

com.meizu.c2dm.permission.RECEIVE

com.mianfeizs.book.push.permission.MESSAGE

Sharing

General

Malware Config

Signatures

File Explorer

892965862ecf6dfba48e1c015ea063ed_JaffaCakes118

com.chineseall.reader.ui.FlashActivity

com.chineseall.reader.ui.FrameActivity

com.chineseall.reader.ui.ChapterContentActivity

com.chineseall.reader.ui.WebViewActivity

com.chineseall.reader.ui.view.DetailWebViewActivity

com.chineseall.reader.search.SearchActivity

com.chineseall.reader.ui.view.StartNewWebActivity

com.chineseall.reader.ui.view.RecommendWebActivity

com.chineseall.reader.ui.ReadActivity

com.chineseall.reader.ui.AppInfoActivity

com.chineseall.reader.ui.EarnIntegralActivity

com.chineseall.reader.ui.view.OperPictureActivity

com.chineseall.reader.ui.ImportLocalBookActivity

com.chineseall.reader.ui.SocialShareActivity

com.chineseall.readerapi.comment.PostChapterCommentActivity

com.chineseall.reader.ui.BoardActivity

com.chineseall.live.LiveActivity

com.chineseall.live.LiveLoadingActivity

com.chineseall.push.PushLandingActivity

com.qq.e.ads.ADActivity

com.chineseall.reader.ui.view.MiGuPayActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.chineseall.ads.juxiao.JxReaderLandingPageActivity

com.chineseall.ads.juxiao.JxNormalLandingPageActivity

com.ak.android.bridge.AKActivity

com.afk.client.ads.AdActivity

com.afk.permission.RequestPermissionActivity

com.umeng.qq.tencent.AuthActivity

com.umeng.qq.tencent.AssistActivity

com.mianfeizs.book.wxapi.WXEntryActivity

com.iclicash.advlib.ui.front.ADBrowser

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.qq.e.comm.DownloadService

com.chineseall.ads.AdvertisementService

com.igexin.sdk.PushService

com.igexin.download.DownloadService

com.chineseall.push.getui.IGeTuiService

com.chineseall.push.getui.IGeTuiPushIntentService

com.afk.client.ads.DownloadService

com.chineseall.readerapi.content.ChapterDownloadManager

com.chineseall.readerapi.ReaderService

com.xiaomi.mipush.sdk.PushMessageHandler

com.xiaomi.mipush.sdk.MessageHandleService

com.meizu.cloud.pushsdk.NotificationService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.chineseall.reader.ui.util.InstallorUnstallAppBroadcastReceiver

com.chineseall.readerapi.NetChangedReceiver

com.igexin.sdk.PushReceiver

com.igexin.download.DownloadReceiver

com.igexin.sdk.MiuiPushReceiver

com.meizu.cloud.pushsdk.SystemReceiver

com.igexin.sdk.FlymePushReceiver

com.igexin.sdk.HmsPushReceiver

com.huawei.hms.support.api.push.PushEventReceiver

com.chineseall.push.jg.JPushReceiver

com.chineseall.ads.AdLogReceiver

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.igexin.download.DownloadProvider

com.chineseall.readerapi.utils.CommonInfoProvider

com.ak.android.provider.AKProvider

base.bin

dynamic.jar

gdtadv2.jar

Android Permissions

892965862ecf6dfba48e1c015ea063ed_JaffaCakes118