8c9d22dadb70f7c4aa8708987e197d30_JaffaCakes118

General

Target

8c9d22dadb70f7c4aa8708987e197d30_JaffaCakes118
Size

17.5MB
MD5

8c9d22dadb70f7c4aa8708987e197d30
SHA1

23da5c7f9baa8025ca9651a819af55e89a08800c
SHA256

ec1d9d50076ba528760cb5e9f14106ab9d87fa3d3444aa2dfc6de63acb7ff737
SHA512

195cd73ee7fce90b6f379228d525bfaa451d4e63c7f54733bda87d5e1569cc74bde5ed7084b25586012641db70dbb218d2f32bc3b47e24b695f32ab7360c1b1b
SSDEEP

393216:4OBWVEuwP5oCQ08J4Xs8+WaK/zhdFkhIw0O/k8gxfBhNI5I4biYAG:4OWCuNYe4Xs10zq+CkPXheliYAG

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

8c9d22dadb70f7c4aa8708987e197d30_JaffaCakes118
.apk .js android arch:arm polyglot

com.xiaoying.cardloan

com.tencent.tauth.AuthActivity

Activities

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.xiaoying.cardloan.wxapi.WXEntryActivity

android.intent.action.VIEW

com.xiaoying.cardloan.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.xiaoying.SchemeActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
MediaStore.Images.Media.INTERNAL_CONTENT_URI
MediaStore.Images.Media.EXTERNAL_CONTENT_URI
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_CONTACTS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.CAMERA
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_COARSE_UPDATES
android.permission.ACCESS_GPS
android.permission.ACCESS_ASSISTED_GPS
android.permission.ACCESS_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.asus.msa.SupplementaryDID.ACCESS
android.hardware.camera.autofocus
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
getui.permission.GetuiService.com.xiaoying.cardloan
android.permission.READ_LOGS
android.permission.LOCATION_HARDWARE

Receivers

com.xiaoying.common.push.NotificationClickReceiver

com.xiaoying.common.push.NotificationClickReceive

com.xiaoying.actionwidget.broadcast.NetWorkConnectChangedReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

Services

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

Android Permissions

8c9d22dadb70f7c4aa8708987e197d30_JaffaCakes118

Permissions

android.permission.INTERNET

MediaStore.Images.Media.INTERNAL_CONTENT_URI

MediaStore.Images.Media.EXTERNAL_CONTENT_URI

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_COARSE_UPDATES

android.permission.ACCESS_GPS

android.permission.ACCESS_ASSISTED_GPS

android.permission.ACCESS_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.asus.msa.SupplementaryDID.ACCESS

android.hardware.camera.autofocus

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

getui.permission.GetuiService.com.xiaoying.cardloan

android.permission.READ_LOGS

android.permission.LOCATION_HARDWARE

Sharing

General

Malware Config

Signatures

Files

com.xiaoying.cardloan

com.tencent.tauth.AuthActivity

Activities

com.tencent.tauth.AuthActivity

com.xiaoying.cardloan.wxapi.WXEntryActivity

com.xiaoying.cardloan.wxapi.WXPayEntryActivity

com.xiaoying.SchemeActivity

Permissions

Receivers

com.xiaoying.common.push.NotificationClickReceiver

com.xiaoying.actionwidget.broadcast.NetWorkConnectChangedReceiver

com.igexin.sdk.PushReceiver

Services

com.igexin.sdk.PushService

Android Permissions

8c9d22dadb70f7c4aa8708987e197d30_JaffaCakes118