8dd7c1bba6929f3a6d96d0b697748e04_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
8dd7c1bba6929f3a6d96d0b697748e04_JaffaCakes118
Size 9.7MB
Sample240602-m3yjssbb5t
SHA256 73ce0801147f8ac19242d837e7d4f2f3331429005751723c0d1d06acf209a616
MD5 8dd7c1bba6929f3a6d96d0b697748e04
SHA1 528ad28047e07513fc03f702e12d05de9e6a658c
SHA512 1d9606e4b327116671bc85d24309595e3888c4a85d04b7f064eb12c154ec8ab7fb35b7c58497c8a82ff92a639d4e636efaddf02b418c78cb7ea6ebc53b4159be
SSDEEP 196608:82tKbUYwu+bdshM+FixWHCo/1O7XX3FL+OP9J80wt1qdRITBuu:Vx3pshXMrMOgt1qdq
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

8dd7c1bba6929f3a6d96d0b697748e04_JaffaCakes118

.apk 9.7MB
CommonPlugin-1.0.apk

.apk 392KB
FrameworkPlugin-1.0.apk

.apk 13KB
HandWallPlugin-1.0.apk

.apk 178KB
__pasys_remote_banner.jar

.apk 108KB
__pasys_remote_feeds.jar

.apk 51KB

8dd7c1bba6929f3a6d96d0b697748e04_JaffaCakes118

SHA256 73ce0801147f8ac19242d837e7d4f2f3331429005751723c0d1d06acf209a616
MD5 8dd7c1bba6929f3a6d96d0b697748e04
SHA1 528ad28047e07513fc03f702e12d05de9e6a658c
SHA512 1d9606e4b327116671bc85d24309595e3888c4a85d04b7f064eb12c154ec8ab7fb35b7c58497c8a82ff92a639d4e636efaddf02b418c78cb7ea6ebc53b4159be
SSDEEP 196608:82tKbUYwu+bdshM+FixWHCo/1O7XX3FL+OP9J80wt1qdRITBuu:Vx3pshXMrMOgt1qdq
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.jiecao.news.jiecaonews

com.jiecao.news.jiecaonews.view.activity.StartActivity

android.intent.action.MAIN android.intent.action.CREATE_SHORTCUT

com.jiecao.news.jiecaonews.view.activity.MainActivity

com.jiecao.news.jiecaonews.view.activity.SeriesActivity

com.jiecao.news.jiecaonews.view.DetailArticle

android.intent.action.VIEW

com.jiecao.news.jiecaonews.view.activity.GuideActivity

com.jiecao.news.jiecaonews.view.activity.GuideV2Activity

com.jiecao.news.jiecaonews.view.activity.CommentListActivity

com.jiecao.news.jiecaonews.view.MessageCenter

com.jiecao.news.jiecaonews.view.activity.WebBrowserActivity

com.jiecao.news.jiecaonews.view.activity.UserProfileActivity

com.jiecao.news.jiecaonews.view.activity.SendCommentActivity

com.jiecao.news.jiecaonews.view.activity.UgcPublishActivity

com.jiecao.news.jiecaonews.view.activity.SigninActivity

com.jiecao.news.jiecaonews.view.activity.ShakeActivity

com.jiecao.news.jiecaonews.view.activity.UgcContentActivity

com.jiecao.news.jiecaonews.view.activity.UgcTopicDetailActivity

android.intent.action.VIEW

com.jiecao.news.jiecaonews.view.activity.FragmentContainerActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.umeng.socialize.view.ShareActivity

com.jiecao.news.jiecaonews.wxapi.WXEntryActivity

com.jiecao.news.jiecaonews.view.activity.ChatActivity

com.jiecao.news.jiecaonews.view.activity.UserProfileEditActivity

com.jiecao.news.jiecaonews.view.activity.ImagePreviewActivity

com.alimama.mobile.sdk.shell.AlimamaWall

com.alimama.mobile.sdk.shell.AlimamaDetail

com.jiecao.news.jiecaonews.view.activity.UgcTopicActivity

com.jiecao.news.jiecaonews.view.activity.AdSplashActivity

com.baidu.mobad.feeds.BaiduActivity

CommonPlugin-1.0.apk

SHA256 154baad68ece78eec31c8b3a3ca806b13420134378f4607943f3e2fe562deddb
MD5 fa0685902135fb10a2334d25195d5b00
SHA1 444dd952b2001be538fc9771da67f1d378b64b52
SHA512 eeae54acabbfb60f1be1e9a9ba41835c6b73b4741c4d5ba9debace7ae9317e2b47451e5eb464e086d8350290ead73849c46b251e081477d7e25a08ba11ae8d11
SSDEEP 12288:d0IzkKDzV01+akXm9hkIkgYbBTT5a8Xiz:LFD+3kX0kgYbBTT5aRz
MD5 SHA1 SHA512 SSDEEP

android

com.taobao.munion.plugin.cm

HandWallPlugin-1.0.apk

SHA256 2668fc736a14ee740480bb3405771d8902a73488f2107d38e18941b4753f8e4e
MD5 f8b5e6f678a17c267fd733306d4fd5a8
SHA1 55b0f75061354d77672778febea18dc1a9ebc5bf
SHA512 96bec4ec0a77dabfa36f6dc6d138a944c7904117cf015338941005889a74edf112523bb52b921968ebe93e4399704911988d8815fde749c2ddba8e1ade152b1d
SSDEEP 3072:FgKa0/eOp8v6PZqf/AUcaEr/bM4zil1Ho1roDhdI5IMp7aNE8XvxMy6I:yKa6eOn6/fcJr/zzC1H2oQa+aNMy6I
MD5 SHA1 SHA512 SSDEEP

android

com.alimama.mobile.sdk.handle

Android Permissions

8dd7c1bba6929f3a6d96d0b697748e04_JaffaCakes118

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

com.jiecao.news.jiecaonews.permission.MIPUSH_RECEIVE

android.permission.READ_LOGS

Sharing

General

Malware Config

Signatures

File Explorer

8dd7c1bba6929f3a6d96d0b697748e04_JaffaCakes118

com.jiecao.news.jiecaonews.view.activity.StartActivity

com.jiecao.news.jiecaonews.view.activity.MainActivity

com.jiecao.news.jiecaonews.view.activity.SeriesActivity

com.jiecao.news.jiecaonews.view.DetailArticle

com.jiecao.news.jiecaonews.view.activity.GuideActivity

com.jiecao.news.jiecaonews.view.activity.GuideV2Activity

com.jiecao.news.jiecaonews.view.activity.CommentListActivity

com.jiecao.news.jiecaonews.view.MessageCenter

com.jiecao.news.jiecaonews.view.activity.WebBrowserActivity

com.jiecao.news.jiecaonews.view.activity.UserProfileActivity

com.jiecao.news.jiecaonews.view.activity.SendCommentActivity

com.jiecao.news.jiecaonews.view.activity.UgcPublishActivity

com.jiecao.news.jiecaonews.view.activity.SigninActivity

com.jiecao.news.jiecaonews.view.activity.ShakeActivity

com.jiecao.news.jiecaonews.view.activity.UgcContentActivity

com.jiecao.news.jiecaonews.view.activity.UgcTopicDetailActivity

com.jiecao.news.jiecaonews.view.activity.FragmentContainerActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.umeng.socialize.view.ShareActivity

com.jiecao.news.jiecaonews.wxapi.WXEntryActivity

com.jiecao.news.jiecaonews.view.activity.ChatActivity

com.jiecao.news.jiecaonews.view.activity.UserProfileEditActivity

com.jiecao.news.jiecaonews.view.activity.ImagePreviewActivity

com.alimama.mobile.sdk.shell.AlimamaWall

com.alimama.mobile.sdk.shell.AlimamaDetail

com.jiecao.news.jiecaonews.view.activity.UgcTopicActivity

com.jiecao.news.jiecaonews.view.activity.AdSplashActivity

com.baidu.mobad.feeds.BaiduActivity

com.jiecao.news.jiecaonews.service.StartService

com.jiecao.news.jiecaonews.service.DataService

com.jiecao.news.jiecaonews.service.MusicService

com.baidu.location.f

com.jiecao.news.jiecaonews.service.ObtainLocationService

com.alimama.mobile.sdk.shell.DownloadingService

com.xiaomi.push.service.XMPushService

com.xiaomi.mipush.sdk.PushMessageHandler

com.xiaomi.mipush.sdk.MessageHandleService

com.easemob.chat.EMChatService

fm.jiecao.danmu.library.DMService

com.jiecao.news.jiecaonews.service.MusicIntentReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.jiecao.news.jiecaonews.receiver.JCPushMessageReceiver

com.jiecao.news.jiecaonews.BootCompletedReceiver

CommonPlugin-1.0.apk

com.taobao.newxp.view.UMDetail

com.taobao.munion.base.download.DownloadProvider

FrameworkPlugin-1.0.apk

HandWallPlugin-1.0.apk

com.taobao.test.MainActivity

com.taobao.newxp.view.UMDetail

com.taobao.newxp.view.handler.umwall.AlimamaWall

com.taobao.munion.base.download.DownloadingService

__pasys_remote_banner.jar

__pasys_remote_feeds.jar

Android Permissions

8dd7c1bba6929f3a6d96d0b697748e04_JaffaCakes118