9067257744cdcded1332b023a4fe44a8_JaffaCakes118

General

Target
9067257744cdcded1332b023a4fe44a8_JaffaCakes118
Size 10.5MB
Sample240603-d2n5ashf51
SHA256 ffd35994a988dd57bd3d080d8e993e6933c160695484988dfebe23759777eb4b
MD5 9067257744cdcded1332b023a4fe44a8
SHA1 39a7c28ae8576e87362795e09a2ae78221e36bbd
SHA512 6861b8d3e57ab6d228750990d1fe412cd252c5565ab332886fde429f9a0f17b182d75e90ab22f8596b841e5a0a404e78225e2174e2047dbb59cae94e5998aa64
SSDEEP 196608:UNQ+BEwLh9eUM3VHmcUMMnboYSuY/0kdIS0oIWeWTMVeERABYShbzQ2K:45E4XeUM3VDUGYSuYcsIZn6iaZbkz
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

9067257744cdcded1332b023a4fe44a8_JaffaCakes118

.apk 10.5MB
37sy_Offline_Pay.apk

.apk 176KB
unicom_resource.dat

.apk 179KB

9067257744cdcded1332b023a4fe44a8_JaffaCakes118

SHA256 ffd35994a988dd57bd3d080d8e993e6933c160695484988dfebe23759777eb4b
MD5 9067257744cdcded1332b023a4fe44a8
SHA1 39a7c28ae8576e87362795e09a2ae78221e36bbd
SHA512 6861b8d3e57ab6d228750990d1fe412cd252c5565ab332886fde429f9a0f17b182d75e90ab22f8596b841e5a0a404e78225e2174e2047dbb59cae94e5998aa64
SSDEEP 196608:UNQ+BEwLh9eUM3VHmcUMMnboYSuY/0kdIS0oIWeWTMVeERABYShbzQ2K:45E4XeUM3VDUGYSuYcsIZn6iaZbkz
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.sxd.mcxxl

37sy_Offline_Pay.apk

SHA256 4b572a840212acec4952eb2667bb46ffd241149ca121075a7c9d3459775ff8ad
MD5 64cac73fb1d2820bfb04fd7549ea7cd6
SHA1 ae93edddc99b05aa7b668920e8bd1ea3831f1744
SHA512 1e7a9d11e926dfaf74de4604c42b05ec862f11226265e8f570a315f8ebc54ebc70bfa53e0a72aa5133df28d37af968656fbe503abbd40deec52807408ecfb766
SSDEEP 3072:xdO8UXQ/QkSuh+O79oz75aPkoyoisqwxjro+iuKzxzr1NjnIeC8AOZ768o4Qd:vUS4K+O7C5a8oy5sqwxro+jMnIPq56qS
MD5 SHA1 SHA512 SSDEEP

android

com.sy37.gamebox.pay

Android Permissions

9067257744cdcded1332b023a4fe44a8_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.GET_PACKAGE_SIZE

android.permission.WRITE_SETTINGS

android.permission.CALL_PHONE

android.permission.GET_TASKS

9067257744cdcded1332b023a4fe44a8_JaffaCakes118

org.cocos2dx.cpp.AppActivity

com.fgwan.sdk.offlinegame.SplashActivity

com.fgwan.sdk.offlinegame.api.pay.util.SQpayPlugin

cn.egame.terminal.paysdk.EgamePayActivity

com.dj37.gamecenter.ABService

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

com.dj37.receiver.SQReceiver

37sy_Offline_Pay.apk

.SQPayActivity

.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

net.sourceforge.simcpux.AppRegister

unicom_resource.dat

Sharing

General

Malware Config

Signatures

File Explorer

9067257744cdcded1332b023a4fe44a8_JaffaCakes118

org.cocos2dx.cpp.AppActivity

com.fgwan.sdk.offlinegame.SplashActivity

com.fgwan.sdk.offlinegame.api.pay.util.SQpayPlugin

cn.egame.terminal.paysdk.EgamePayActivity

com.dj37.gamecenter.ABService

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

com.dj37.receiver.SQReceiver

37sy_Offline_Pay.apk

.SQPayActivity

.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

net.sourceforge.simcpux.AppRegister

unicom_resource.dat

Android Permissions

9067257744cdcded1332b023a4fe44a8_JaffaCakes118