General

  • Target

    8d8cbd5a3c59fc9c852558ca0f993c47_JaffaCakes118

  • Size

    11.9MB

  • MD5

    8d8cbd5a3c59fc9c852558ca0f993c47

  • SHA1

    f9c855c5bfecbe1baf43bfd8590232fabccd870b

  • SHA256

    1826e25f4ebdaddd4b8c8bfa2389290b5b10ea2000357e4ef339bea171c10e33

  • SHA512

    50e38b2460dce0bc81008f62361e0a6c66d8b31b19f3061ac294ffae9cccc84e97c43acbc9c7bf59aa8cfb613d90b232fb5bae92a953284b95d031181cedfddc

  • SSDEEP

    196608:ezSRb3ACIT0rTRdfYLNt0OLh7zNp3SZ+qKpF7VBYek4Ncc1QBBk0HW:eutg2RdfYLr0Yh7zNxbTpbBYRuNQBBS

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Requests dangerous framework permissions 13 IoCs

Files

  • 8d8cbd5a3c59fc9c852558ca0f993c47_JaffaCakes118
    .apk android arch:arm arch:x86

    com.nd.android.pandahome2

    com.nd.hilauncherdev.launcher.Launcher


  • com.nd.android.widget.pandahome.flashlight
    .apk android

    com.nd.android.widget.pandahome.flashlight

    com.nd.android.widget.pandahome.flashlight.uninstallfeedback.RecommendOtherLauncherActivity


  • com.nd.hilauncherdev.plugin.navigation_V_30_M_1ee3dfc5d30acaa1bff118557641471c.jar
    .apk android

    com.nd.hilauncherdev.plugin.navigation

    com.nd.hilauncherdev.plugin.navigation.activity.MainActivity


  • nd.jar
    .apk android

Android Permissions

8d8cbd5a3c59fc9c852558ca0f993c47_JaffaCakes118

Permissions

android.permission.EXPAND_STATUS_BAR

android.permission.GET_TASKS

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.BIND_APPWIDGET

com.nd.android.pandahome2.permission.READ_SETTINGS

com.nd.android.pandahome2.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

com.android.ContactWidget.permission.READ_SETTINGS

com.android.ContactWidget.permission.WRITE_SETTINGS

android.permission.ACCESS_WEATHERCLOCK_PROVIDER

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

com.android.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

com.tencent.qqlauncher.permission.READ_SETTINGS

com.android.mylauncher.permission.READ_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

com.dianxinos.dxhome.permission.READ_SETTINGS