8b8d73ca4ea2435baf88025d731085ee_JaffaCakes118

General

Target
8b8d73ca4ea2435baf88025d731085ee_JaffaCakes118
Size 8.5MB
Sample240601-ye4lpach81
SHA256 52f31523589267de70c5a78f4a7a387eb94e4fd5567bf58082a6095a6ad02eea
MD5 8b8d73ca4ea2435baf88025d731085ee
SHA1 10d409b7c899df4c8ebbb20efcb29b29b503fc5f
SHA512 ee97c7552553a6468a3de028f811573158f9a67fa9ad0325b0281e90b795cc7ea85276a91b8def4009ae9be1529c902f244b853581b4c58dddb6f5eeb46ccb3f
SSDEEP 196608:zXBE9TG0LROVCIgKT9U2tGpnUkux1CqUIp6110rZiNy/5P:d29O0V4UqGpnU71v/U110Cy/h
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

8b8d73ca4ea2435baf88025d731085ee_JaffaCakes118

.apk 8.5MB

8b8d73ca4ea2435baf88025d731085ee_JaffaCakes118

SHA256 52f31523589267de70c5a78f4a7a387eb94e4fd5567bf58082a6095a6ad02eea
MD5 8b8d73ca4ea2435baf88025d731085ee
SHA1 10d409b7c899df4c8ebbb20efcb29b29b503fc5f
SHA512 ee97c7552553a6468a3de028f811573158f9a67fa9ad0325b0281e90b795cc7ea85276a91b8def4009ae9be1529c902f244b853581b4c58dddb6f5eeb46ccb3f
SSDEEP 196608:zXBE9TG0LROVCIgKT9U2tGpnUkux1CqUIp6110rZiNy/5P:d29O0V4UqGpnU71v/U110Cy/h
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.dezhou.tools

Android Permissions

8b8d73ca4ea2435baf88025d731085ee_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

com.dezhou.tools.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BIND_JOB_SERVICE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

8b8d73ca4ea2435baf88025d731085ee_JaffaCakes118

com.dezhou.tools.login.LoginActivity

com.dezhou.tools.sng.SngActivity

com.dezhou.tools.cash.CashActivity

com.dezhou.tools.cash.CashBanlanceResultActivity

com.dezhou.tools.MainActivity

com.dezhou.tools.login.NickNameActivity

com.dezhou.tools.sng.RiseActivity

com.dezhou.tools.sng.AddGamerAcitvity

com.dezhou.tools.sng.SngResultActivity

com.dezhou.tools.sng.SngRebuyActivity

com.dezhou.tools.cash.CashBalanceActivity

com.dezhou.tools.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.yanzhenjie.permission.PermissionActivity

com.uuzuche.lib_zxing.activity.CaptureActivity

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.dezhou.tools.receiver.MyReceiver

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

Sharing

General

Malware Config

Signatures

File Explorer

8b8d73ca4ea2435baf88025d731085ee_JaffaCakes118

com.dezhou.tools.login.LoginActivity

com.dezhou.tools.sng.SngActivity

com.dezhou.tools.cash.CashActivity

com.dezhou.tools.cash.CashBanlanceResultActivity

com.dezhou.tools.MainActivity

com.dezhou.tools.login.NickNameActivity

com.dezhou.tools.sng.RiseActivity

com.dezhou.tools.sng.AddGamerAcitvity

com.dezhou.tools.sng.SngResultActivity

com.dezhou.tools.sng.SngRebuyActivity

com.dezhou.tools.cash.CashBalanceActivity

com.dezhou.tools.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.yanzhenjie.permission.PermissionActivity

com.uuzuche.lib_zxing.activity.CaptureActivity

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.dezhou.tools.receiver.MyReceiver

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

Android Permissions

8b8d73ca4ea2435baf88025d731085ee_JaffaCakes118