General

  • Target

    8a0983730df39f0d83e2d0eadb76eb8c_JaffaCakes118

  • Size

    30.4MB

  • MD5

    8a0983730df39f0d83e2d0eadb76eb8c

  • SHA1

    1217e1f7abeac73d0d7aeffcce307cdc102ac648

  • SHA256

    3002ad5899ef0a74c0d31f6caeeac7b40a17f052644fc3a058339eac57b78f43

  • SHA512

    03217ef35ac3623397ce574b0cf350d994526f8e1c021bdcc2f7e5b84ea62cf74f98ded17d6c20232ea7fa03ccc1a40bafb6ded1e3b460a6437547b7a71ecc0f

  • SSDEEP

    786432:RAfxiCzJZlF1SUPRZl8PGxRF+oyFbrf0Ph:REcCz/rPuPGjdyFbrsPh

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 12 IoCs

Files

  • 8a0983730df39f0d83e2d0eadb76eb8c_JaffaCakes118
    .apk android arch:arm arch:x86

    com.szttzf.app

    io.dcloud.PandoraEntry


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

8a0983730df39f0d83e2d0eadb76eb8c_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.GET_ACCOUNTS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_CONTACTS

android.permission.READ_LOGS

android.permission.READ_PHONE_STATE

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_CONTACTS

android.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

com.asus.msa.SupplementaryDID.ACCESS

com.huawei.android.launcher.permission.CHANGE_BADGE