918f2d67dac0ca4d89545e245a0e79e5_JaffaCakes118

General

Target
918f2d67dac0ca4d89545e245a0e79e5_JaffaCakes118
Size 10.4MB
Sample240603-m8lr7adf64
SHA256 0f3dcfe3fa0d50de8dc94661b3d96b56f6d53e74433e4a4c1e3fc6cbfe70fa0e
MD5 918f2d67dac0ca4d89545e245a0e79e5
SHA1 f1e51af21afe74ea2a0507c638bd7ab7299e596f
SHA512 7409b20cb2ca2a4d476e67a3f190e870d922cd0e2ad7837b50c619ca5904e0bab91f6cf035bb6eec465896f35fcb6099fa0d76ed84d21cdff39d7398ae87cfd4
SSDEEP 196608:j7nePLTI7QAQQoKaJybgEkxbMmS6jqtDHm02amFdu1yFr2QLxlTuqAq2Airr:YLk7oKyEkrzZ9/BrxRuqAXNrr
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

918f2d67dac0ca4d89545e245a0e79e5_JaffaCakes118

.apk 10.4MB

918f2d67dac0ca4d89545e245a0e79e5_JaffaCakes118

SHA256 0f3dcfe3fa0d50de8dc94661b3d96b56f6d53e74433e4a4c1e3fc6cbfe70fa0e
MD5 918f2d67dac0ca4d89545e245a0e79e5
SHA1 f1e51af21afe74ea2a0507c638bd7ab7299e596f
SHA512 7409b20cb2ca2a4d476e67a3f190e870d922cd0e2ad7837b50c619ca5904e0bab91f6cf035bb6eec465896f35fcb6099fa0d76ed84d21cdff39d7398ae87cfd4
SSDEEP 196608:j7nePLTI7QAQQoKaJybgEkxbMmS6jqtDHm02amFdu1yFr2QLxlTuqAq2Airr:YLk7oKyEkrzZ9/BrxRuqAXNrr
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.yxxinglin.xzid825106

Android Permissions

918f2d67dac0ca4d89545e245a0e79e5_JaffaCakes118

Permissions

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.SEND_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_LOGS

org.simalliance.openmobileapi.SMARTCARD

android.permission.NFC

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

getui.permission.GetuiService.com.yxxinglin.xzid825106

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.CHANGE_NETWORK_STATE

com.yxxinglin.xzid825106.permission.MIPUSH_RECEIVE

android.permission.WRITE_SETTINGS

com.meizu.flyme.push.permission.RECEIVE

com.meizu.c2dm.permission.RECEIVE

com.yxxinglin.xzid825106.push.permission.MESSAGE

com.yxxinglin.xzid825106.permission.C2D_MESSAGE

918f2d67dac0ca4d89545e245a0e79e5_JaffaCakes118

demo.MainActivity

com.jiguang.h5.SplashActivity

com.sy37sdk.views.SY37web

com.alipay.sdk.app.H5PayActivity

com.sqwan.msdk.selfcheck.SQSelfCheckHelp

demo.wxapi.WXEntryActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.sy37sdk.floatView.FloatWindowService

com.igexin.sdk.PushService

com.igexin.download.DownloadService

com.jiguang.h5.CustomGetuiIntentService

com.jiguang.h5.CustomGetuiPushService

com.sy37sdk.receiver.NotifyReceiver

com.sqwan.msdk.receiver.SQPushReceiver

com.igexin.sdk.PushReceiver

com.igexin.download.DownloadReceiver

com.igexin.download.DownloadProvider

Sharing

General

Malware Config

Signatures

File Explorer

918f2d67dac0ca4d89545e245a0e79e5_JaffaCakes118

demo.MainActivity

com.jiguang.h5.SplashActivity

com.sy37sdk.views.SY37web

com.alipay.sdk.app.H5PayActivity

com.sqwan.msdk.selfcheck.SQSelfCheckHelp

demo.wxapi.WXEntryActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.sy37sdk.floatView.FloatWindowService

com.igexin.sdk.PushService

com.igexin.download.DownloadService

com.jiguang.h5.CustomGetuiIntentService

com.jiguang.h5.CustomGetuiPushService

com.sy37sdk.receiver.NotifyReceiver

com.sqwan.msdk.receiver.SQPushReceiver

com.igexin.sdk.PushReceiver

com.igexin.download.DownloadReceiver

com.igexin.download.DownloadProvider

Android Permissions

918f2d67dac0ca4d89545e245a0e79e5_JaffaCakes118