92dd1b51436d6148bf480f38399efce8_JaffaCakes118

General

Target
92dd1b51436d6148bf480f38399efce8_JaffaCakes118
Size 5.8MB
Sample240603-2pfjdscf66
SHA256 aeb893e5b2b546e9f330b3a80e79999c612315020b8dd18b3a985fd966eea434
MD5 92dd1b51436d6148bf480f38399efce8
SHA1 e2514578d20abadd8b0440e6360f8d5e010e7565
SHA512 122b6b3f1a0e80109c53334eb152ec7db764088719acd2a36007fbbd1b0bf5d14b121f667ea512575d71dd3cb467db06fd1c9801f67aa8773db40f358467e5ba
SSDEEP 98304:uLAYUhszDDNL2E3ZSu/ukKfzyUM/Xusmb4JyGph78sbJCOVzPhnbIAxYi/m860lA:EhJLyD/fsvnh5EOtBIWYiu8fJTuQjLGj
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read SMS messages.	android.permission.READ_SMS

File Explorer

92dd1b51436d6148bf480f38399efce8_JaffaCakes118

.apk 5.8MB

92dd1b51436d6148bf480f38399efce8_JaffaCakes118

SHA256 aeb893e5b2b546e9f330b3a80e79999c612315020b8dd18b3a985fd966eea434
MD5 92dd1b51436d6148bf480f38399efce8
SHA1 e2514578d20abadd8b0440e6360f8d5e010e7565
SHA512 122b6b3f1a0e80109c53334eb152ec7db764088719acd2a36007fbbd1b0bf5d14b121f667ea512575d71dd3cb467db06fd1c9801f67aa8773db40f358467e5ba
SSDEEP 98304:uLAYUhszDDNL2E3ZSu/ukKfzyUM/Xusmb4JyGph78sbJCOVzPhnbIAxYi/m860lA:EhJLyD/fsvnh5EOtBIWYiu8fJTuQjLGj
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.zdebao.zdb

Android Permissions

92dd1b51436d6148bf480f38399efce8_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_CONTACTS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_CONTACTS

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CAMERA

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.FLASHLIGHT

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

android.permission.WRITE_SMS

android.permission.READ_SMS

92dd1b51436d6148bf480f38399efce8_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

com.zdebao.zdb.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.igexin.sdk.PushActivity

com.igexin.getuiext.activity.GetuiExtActivity

com.zdebao.zdb.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.zdebao.zdb.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

io.dcloud.adapter.io.MiniServerService

com.baidu.location.f

com.igexin.sdk.PushService

com.igexin.download.DownloadService

com.igexin.getuiext.service.GetuiExtService

io.dcloud.feature.apsGt.PushMessageReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.getuiext.service.PayloadReceiver

com.igexin.download.DownloadProvider

Sharing

General

Malware Config

Signatures

File Explorer

92dd1b51436d6148bf480f38399efce8_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

com.zdebao.zdb.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.igexin.sdk.PushActivity

com.igexin.getuiext.activity.GetuiExtActivity

com.zdebao.zdb.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.zdebao.zdb.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

io.dcloud.adapter.io.MiniServerService

com.baidu.location.f

com.igexin.sdk.PushService

com.igexin.download.DownloadService

com.igexin.getuiext.service.GetuiExtService

io.dcloud.feature.apsGt.PushMessageReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.getuiext.service.PayloadReceiver

com.igexin.download.DownloadProvider

Android Permissions

92dd1b51436d6148bf480f38399efce8_JaffaCakes118