906a9b8b116d95971794bdfb1c44670d_JaffaCakes118

General

Target
906a9b8b116d95971794bdfb1c44670d_JaffaCakes118
Size 16.8MB
Sample240603-d55lfsbc22
SHA256 3d9ec591f829440da0051dd755ecbf326e6f03f83eb3d88c51a6b633cb31b572
MD5 906a9b8b116d95971794bdfb1c44670d
SHA1 55d422dd1fe040e4edb89242789076e37778c797
SHA512 59dbd73d2517922cd7baa4dd9ad3e4a6621a467b5eafc8c68fe643f493f0d4143d9531d52c5f796ebd58f2e74b20a981a2320c6bf202efe707aaeee8e672b835
SSDEEP 393216:cHXa8UQ6gG3pxsCyyGjpoamTRpMXdmj+O0Vm7zSY9Nro5MYoFEET:cKUG3p2yGjpxuROXde+tVm7mY9BOkEET
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

906a9b8b116d95971794bdfb1c44670d_JaffaCakes118

.apk 16.8MB
AlipayMSP206_PPS3_V3.5.4.0619.apk

.apk 354KB

906a9b8b116d95971794bdfb1c44670d_JaffaCakes118

SHA256 3d9ec591f829440da0051dd755ecbf326e6f03f83eb3d88c51a6b633cb31b572
MD5 906a9b8b116d95971794bdfb1c44670d
SHA1 55d422dd1fe040e4edb89242789076e37778c797
SHA512 59dbd73d2517922cd7baa4dd9ad3e4a6621a467b5eafc8c68fe643f493f0d4143d9531d52c5f796ebd58f2e74b20a981a2320c6bf202efe707aaeee8e672b835
SSDEEP 393216:cHXa8UQ6gG3pxsCyyGjpoamTRpMXdmj+O0Vm7zSY9Nro5MYoFEET:cKUG3p2yGjpxuROXde+tVm7mY9BOkEET
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips

tv.pps.mobile

android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.BROADCAST_STICKY android.permission.WRITE_SETTINGS android.permission.VIBRATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.SYSTEM_ALERT_WINDOW android.permission.DISABLE_KEYGUARD android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.INTERNET android.permission.GET_TASKS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WRITE_EXTERNAL_STORAGE android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.VIBRATE android.permission.CHANGE_CONFIGURATION android.permission.WRITE_SETTINGS android.permission.RECORD_AUDIO android.permission.CHANGE_NETWORK_STATE android.permission.RESTART_PACKAGES android.permission.READ_EXTERNAL_STORAGE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CAMERA android.permission.RECORD_AUDIO android.permission.CHANGE_WIFI_STATE android.permission.FLASHLIGHT android.permission.CHANGE_WIFI_STATE android.permission.READ_LOGS android.permission.READ_CONTACTS com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.WRITE_SETTINGS com.huawei.launcher2.permission.READ_SETTINGS com.huawei.launcher2.permission.WRITE_SETTINGS com.huawei.launcher3.permission.READ_SETTINGS com.huawei.launcher3.permission.WRITE_SETTINGS com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS com.anddoes.launcher.permission.READ_SETTINGS com.anddoes.launcher.permission.WRITE_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.WRITE_SETTINGS com.fede.launcher.permission.READ_SETTINGS com.fede.launcher.permission.WRITE_SETTINGS org.adw.launcher.permission.READ_SETTINGS org.adw.launcher.permission.WRITE_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.qihoo360.launcher.permission.WRITE_SETTINGS com.lge.launcher.permission.READ_SETTINGS com.lge.launcher.permission.WRITE_SETTINGS com.aspire.mm.permission.READ_SETTINGS com.aspire.mm.permission.WRITE_SETTINGS android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.MOUNT_UNMOUNT_FILESYSTEMS com.android.browser.permission.READ_HISTORY_BOOKMARKS android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.CALL_PHONE android.permission.ACCESS_FINE_LOCATION android.permission.BAIDU_LOCATION_SERVICE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_MOCK_LOCATION android.permission.ACCESS_GPS

.WelcomeActivity

android.intent.action.MAIN

com.google.ads.AdActivity

.framework.FrameFragmentActivity

android.intent.action.VIEW tv.pps.mobile.action.VEDIOSNIFFER

tv.pps.module.player.video.PPSVideoPlayerActivity

tv.pps.module.iqiyiad.webview.PPSPlayerAdWebViewActivity

tv.pps.mobile.html5webviewcore.HTML5WebViewPlayer

tv.pps.mobile.html5webviewcore.HTML5WebViewTaobaoAD

tv.pps.mobile.wxapi.WXEntryActivity

.camera.LocalUploadActivity

.weather.WeatherActivity

.weather.WeatherCityActivity

.camera.UploadListActivity

.camera.VideoInfoActivity

.camera.EditVideoActivity

.camera.NewChannelActivity

.camera.WebViewActivity

.quickpass.QuickPassAcitivity

.quickpass.QuickPassHistoryAcitivity

.quickpass.QuickPassSendActivity

.quickpass.QuickPassReceiveActivity

.search.SearchBTWebViewActivity

.camera.CameraChannelActivity

tv.pps.mobile.qrcode.util.CaptureActivity

tv.pps.mobile.qrcode.util.SCAN android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.tencent.weibo.sdk.android.component.Authorize

tv.pps.vipmodule.MainActivity

tv.pps.vipmodule.alipay.ui.AliOrderPayActivity

tv.pps.vipmodule.alipay.ui.AliOrderIqyPayActivity

tv.pps.mobile.search.SearchBTListActivity

tv.pps.mobile.widget.SearchWidgetActivity

tv.pps.vipmodule.vip.ui.VipGiftWebViewActivity

.greentail.GreenTailActivity

tv.pps.mobile.action.greentail

.gamecenter.utils.AppStatusReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED

.widget.WidgetProvider

tv.pps.mobile.action.widget.click.intoapp android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.click.currentimage android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.click.preimage android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.click.nextimage android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.updateimage tv.pps.mobile.action.widget.restartservice

.widget.SearchWidget

tv.pps.mobile.widget.SearchWidget.SOURCE android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.widget.SearchWidget.INPUT android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.widget.SearchWidget.SEARCH android.appwidget.action.APPWIDGET_UPDATE

tv.pps.bi.receiver.ScreenBroadcastReceiver

android.intent.action.USER_PRESENT android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE

tv.pps.bi.receiver.AlarmReceiver

tv.pps.alarmReceiver

tv.pps.mobile.push.PushMessageReceiver

com.baidu.android.pushservice.action.MESSAGE com.baidu.android.pushservice.action.RECEIVE com.baidu.android.pushservice.action.notification.CLICK

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE com.baidu.android.pushservice.action.notification.SHOW com.baidu.android.pushservice.action.media.CLICK

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD com.baidu.android.pushservice.action.BIND_SYNC android.intent.action.PACKAGE_REMOVED

tv.pps.deliver.service.AlarmBroadcastReceiver

tv.pps.deliver.alarm

AlipayMSP206_PPS3_V3.5.4.0619.apk

SHA256 46f025d57f9aed1fb674c0fe8fc77add93cf00ea6e1633596955f33426be7688
MD5 12ae4560d8350db4bd6fa3bc1589614c
SHA1 dbbfce036a1823aaec9d1c7b621adbd7317f7fa9
SHA512 df7348142a8c294d0d7f7ce77795fd0f81f60831ca1831164e5060c900aa90af430b11f6972103a5c6307d81d8cdf095105a9ab3d01c2183d10d01910976c6fd
SSDEEP 6144:ipIlfloegHi/BBs3dWcfihtB7+Y3Ju4g29f5C8EcPK+WvyQcy2fn1E:ip2JgC/BBsNWfh3Vcc5CLE8Rcy2fn1E
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.alipay.android.app

Android Permissions

906a9b8b116d95971794bdfb1c44670d_JaffaCakes118

Permissions

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.RECORD_AUDIO

android.permission.CHANGE_NETWORK_STATE

android.permission.RESTART_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.CHANGE_WIFI_STATE

android.permission.READ_LOGS

android.permission.READ_CONTACTS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher2.permission.WRITE_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.huawei.launcher3.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.anddoes.launcher.permission.READ_SETTINGS

com.anddoes.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

Sharing

General

Malware Config

Signatures

File Explorer

906a9b8b116d95971794bdfb1c44670d_JaffaCakes118

.WelcomeActivity

com.google.ads.AdActivity

.framework.FrameFragmentActivity

tv.pps.module.player.video.PPSVideoPlayerActivity

tv.pps.module.iqiyiad.webview.PPSPlayerAdWebViewActivity

tv.pps.mobile.html5webviewcore.HTML5WebViewPlayer

tv.pps.mobile.html5webviewcore.HTML5WebViewTaobaoAD

tv.pps.mobile.wxapi.WXEntryActivity

.camera.LocalUploadActivity

.weather.WeatherActivity

.weather.WeatherCityActivity

.camera.UploadListActivity

.camera.VideoInfoActivity

.camera.EditVideoActivity

.camera.NewChannelActivity

.camera.WebViewActivity

.quickpass.QuickPassAcitivity

.quickpass.QuickPassHistoryAcitivity

.quickpass.QuickPassSendActivity

.quickpass.QuickPassReceiveActivity

.search.SearchBTWebViewActivity

.camera.CameraChannelActivity

tv.pps.mobile.qrcode.util.CaptureActivity

com.tencent.weibo.sdk.android.component.Authorize

tv.pps.vipmodule.MainActivity

tv.pps.vipmodule.alipay.ui.AliOrderPayActivity

tv.pps.vipmodule.alipay.ui.AliOrderIqyPayActivity

tv.pps.mobile.search.SearchBTListActivity

tv.pps.mobile.widget.SearchWidgetActivity

tv.pps.vipmodule.vip.ui.VipGiftWebViewActivity

.greentail.GreenTailActivity

org.openudid.OpenUDID_service

com.baidu.location.f

.gamecenter.download.DownloadService

tv.pps.module.download.impl.download.service.DownloadServiceImpl

.service.UpdateService

.service.CrashService

.service.DeliverService

.service.ApkDownService

.service.InitService

tv.pps.vipmodule.vip.utils.VipService

.service.SendLogService

tv.pps.mobile.camera.CameraService

.widget.WidgetUpdateService

tv.pps.bi.service.ListenService

tv.pps.bi.proto.SAService

com.baidu.android.pushservice.PushService

com.umeng.common.ufp.net.DownloadingService

tv.pps.deliver.service.PPSDeliverService

.gamecenter.utils.AppStatusReceiver

.widget.WidgetProvider

.widget.SearchWidget

tv.pps.bi.receiver.ScreenBroadcastReceiver

tv.pps.bi.receiver.AlarmReceiver

tv.pps.mobile.push.PushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

tv.pps.deliver.service.AlarmBroadcastReceiver

AlipayMSP206_PPS3_V3.5.4.0619.apk

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

.stability.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

.UserIdShareProvider

Android Permissions