9170d0546c0cd3241c5b20ce2c765f3e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
9170d0546c0cd3241c5b20ce2c765f3e_JaffaCakes118
Size 16.9MB
Sample240603-mf68esce27
SHA256 51d8b56a44c625e4dbd2b5627249535d5b9cef300f189958c2f9a7116d25f884
MD5 9170d0546c0cd3241c5b20ce2c765f3e
SHA1 63785d9239de5999143092eeb042cf2940f0f340
SHA512 302e69f4018e9d0354e56a7d98551c726bed0be0b3c94dd711bc9ab60cb08c8f29d88c4fea5b71037b7804e10bf6f3b80dc84200a47b595fde483cf64f63251e
SSDEEP 393216:iztpnkjJ3an04XbxtQapeOIFbY3+F7NTJZzLlBXd4oXp:s4U0mbx/gY367N9xLlBtHp
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

9170d0546c0cd3241c5b20ce2c765f3e_JaffaCakes118

.apk 16.9MB
alipay_plugin_20140529msp.apk

.apk 3.6MB
mobile_sp.apk

.apk 730KB

9170d0546c0cd3241c5b20ce2c765f3e_JaffaCakes118

SHA256 51d8b56a44c625e4dbd2b5627249535d5b9cef300f189958c2f9a7116d25f884
MD5 9170d0546c0cd3241c5b20ce2c765f3e
SHA1 63785d9239de5999143092eeb042cf2940f0f340
SHA512 302e69f4018e9d0354e56a7d98551c726bed0be0b3c94dd711bc9ab60cb08c8f29d88c4fea5b71037b7804e10bf6f3b80dc84200a47b595fde483cf64f63251e
SSDEEP 393216:iztpnkjJ3an04XbxtQapeOIFbY3+F7NTJZzLlBXd4oXp:s4U0mbx/gY367N9xLlBtHp
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.horner.ndajia

com.horner.ndajia.ui.WelActivity

android.intent.action.MAIN

.pdf.PdfActivity

com.horner.ndajia.interbook.InterBookActivity

com.hl.android.HLReader

org.geometerplus.android.fbreader.FBReader

org.geometerplus.android.fbreader.share.ShareMenuActivity

com.mouee.fbreader.activity.TextSearchActivity

android.intent.action.SEARCH

org.geometerplus.android.fbreader.TOCActivity

org.geometerplus.android.fbreader.BookmarksMoueeAcvtivity

com.horner.ndajia.ui.MainActivity

com.horner.ndajia.ui.BookStoreActivity

com.horner.ndajia.ui.BookShelfActivity

com.horner.ndajia.ui.BookShoppingActivity

com.horner.ndajia.ui.UserActivity

com.horner.ndajia.ui.BookDetailActivity

com.horner.ndajia.ui.LoginActivity

com.horner.ndajia.ui.AgreementActivity

com.horner.ndajia.ui.RegistActivity

com.horner.ndajia.ui.ForgetActivity

com.horner.ndajia.ui.ForgetNextActivity

com.horner.ndajia.ui.FeedbackActivity

com.horner.ndajia.ui.AboutActivity

com.horner.ndajia.ui.InfoSettingActivity

com.horner.ndajia.ui.ModifyPasswordActivity

com.horner.ndajia.ui.BookCollectionActivity

com.horner.ndajia.ui.HasBuyActivity

com.horner.ndajia.ui.BookAllCommentsActivity

com.horner.ndajia.ui.CloudSpaceActivity

com.horner.ndajia.ui.WifiActivity

com.horner.ndajia.ui.BookManagerActivity

com.horner.ndajia.ui.BookGridActivity

com.horner.ndajia.ui.AllFreeBooksActivity

com.horner.ndajia.ui.BookListActivity

com.horner.ndajia.ui.SearchActivity

com.horner.ndajia.ui.BookShareActivity

com.horner.ndajia.ui.PulishiCommentActivity

com.horner.ndajia.ui.LockScreenActivity

com.horner.ndajia.ui.BookCatagoryListActivity

com.horner.ndajia.ui.BookSubjectListActivity

com.horner.ndajia.ui.BookWebViewActivity

com.horner.ndajia.ui.SearchLocalActivity

com.horner.ndajia.ui.BookSubCatagoryActivity

com.horner.ndajia.ui.PaymentActivity

com.horner.ndajia.ui.ReadCardPaymentActivity

com.horner.ndajia.ui.BookCatagolueActivity

com.horner.ndajia.ui.ReadCardActivity

com.horner.ndajia.ui.ExchangeActivity

com.horner.ndajia.ui.ExchangeNextActivity

com.horner.ndajia.ui.ForgetCompleteActivity

com.horner.ndajia.ui.ExchangeCompleteActivity

com.horner.ndajia.ui.BookTextCatagoryActivity

com.horner.ndajia.ui.RegistCompleteActivity

com.horner.ndajia.ui.ModifyNameActivity

com.horner.ndajia.ui.ImportResultActivity

cn.sharesdk.framework.ShareSDKUIShell

alipay_plugin_20140529msp.apk

SHA256 ff2772cd4f8fb2eebd1939761823056e0ea2e5782b6985dce5027a6db7679961
MD5 23c9a6e9e4d9800e783923e0a9ae4d00
SHA1 ce6628104ee862539be81f4398d8c96e46d7c3ba
SHA512 ac5a4047b71c68f194d8171e093598681e2ab6bb730a9fd900eea5413ce64e31da3f1cd2c4f2fe97f86515e5b27168a9fbffe014805107f545acfd947c5cc620
SSDEEP 49152:kMPr/CPIFZlICKAr3RP6FcZfTcyTICKNz28PYoZrr1OYXugY:97d6UrOy8PJ9Ob9
MD5 SHA1 SHA512 SSDEEP

android

com.alipay.android.client.pad

.apad.MainActivity

.apad.MyAlipayActivity

.apad.ConsumeRecordActivity

.AlipayRegister

.AlipayGphoneLogin

.AlipayAbout

.AlipayHelp

.AlipayMessage

.SubItemPayActivity

com.eg.android.taobao

.SubItemAccountOutputActivity

.SubItemAccountInputActivity

.SubItemDealQueryActivity

.SubItemScoreListActivity

.SubItemGetMoneyActivity

.SubItemGetMoney3Activity

.SubItemAccountQueryActivity

.SubItemPhoneInputActivity

.SubItemCardActivity

.AlipayPhoneBinding

.AlipayPhoneBindingCheckcode

.SubItemPucPayActivity

android.net.http.NETWORK_STATE android.intent.action.PROXY_CHANGE

.AlipayCashRegister

.AlipayContact

.AlipayViewMsg

.WebViewActivity

.AlipayUserInfoSupplement

.AlipayGetLoginPassword

.AlipayGetPaymentPassword

.AlipayModifyPassword

.AlipayAccountManage

.WelcomeUse

android.intent.action.MAIN

.AlipayNavigationTabActivity

.AlipayMsgActivity

.AlipayShowSystemMsgDetail

.AlipayDealDetailInfoActivity

.AlipayAccountBindingChoice

.AlipaySafePaySetting

.AlipayBarcodeDisplay

.AlipayBarcodePayGuideActivity

.AlipayAgentPay

.AlipayAgentAnylink

.AlipayAgentSomeone

.AlipayCashcardAdd

.AlipayCashcardManage

.CreditcardRepay.AlipayCreditcardRepay

.CreditcardRepay.AlipayCreditcardConfirm

.CreditcardRepay.AlipayCreditcardManage

.CreditcardRepay.AlipayCreditcardNew

.CreditcardRepay.AlipayCreditcardRemind

.webapp.webActivity

.webapp.AuthoActivity

InnerSSLSocket

com.google.zxing.client.BarcodeCaptureActivity

com.alipay.android.client.pad.AccountInfoSet

android.intent.action.MAIN

Android Permissions

9170d0546c0cd3241c5b20ce2c765f3e_JaffaCakes118

Permissions

android.permission.GET_TASKS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RESTART_PACKAGES

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_SETTINGS

Sharing

General

Malware Config

Signatures

File Explorer

9170d0546c0cd3241c5b20ce2c765f3e_JaffaCakes118

com.horner.ndajia.ui.WelActivity

.pdf.PdfActivity

com.horner.ndajia.interbook.InterBookActivity

com.hl.android.HLReader

org.geometerplus.android.fbreader.FBReader

org.geometerplus.android.fbreader.share.ShareMenuActivity

com.mouee.fbreader.activity.TextSearchActivity

org.geometerplus.android.fbreader.TOCActivity

org.geometerplus.android.fbreader.BookmarksMoueeAcvtivity

com.horner.ndajia.ui.MainActivity

com.horner.ndajia.ui.BookStoreActivity

com.horner.ndajia.ui.BookShelfActivity

com.horner.ndajia.ui.BookShoppingActivity

com.horner.ndajia.ui.UserActivity

com.horner.ndajia.ui.BookDetailActivity

com.horner.ndajia.ui.LoginActivity

com.horner.ndajia.ui.AgreementActivity

com.horner.ndajia.ui.RegistActivity

com.horner.ndajia.ui.ForgetActivity

com.horner.ndajia.ui.ForgetNextActivity

com.horner.ndajia.ui.FeedbackActivity

com.horner.ndajia.ui.AboutActivity

com.horner.ndajia.ui.InfoSettingActivity

com.horner.ndajia.ui.ModifyPasswordActivity

com.horner.ndajia.ui.BookCollectionActivity

com.horner.ndajia.ui.HasBuyActivity

com.horner.ndajia.ui.BookAllCommentsActivity

com.horner.ndajia.ui.CloudSpaceActivity

com.horner.ndajia.ui.WifiActivity

com.horner.ndajia.ui.BookManagerActivity

com.horner.ndajia.ui.BookGridActivity

com.horner.ndajia.ui.AllFreeBooksActivity

com.horner.ndajia.ui.BookListActivity

com.horner.ndajia.ui.SearchActivity

com.horner.ndajia.ui.BookShareActivity

com.horner.ndajia.ui.PulishiCommentActivity

com.horner.ndajia.ui.LockScreenActivity

com.horner.ndajia.ui.BookCatagoryListActivity

com.horner.ndajia.ui.BookSubjectListActivity

com.horner.ndajia.ui.BookWebViewActivity

com.horner.ndajia.ui.SearchLocalActivity

com.horner.ndajia.ui.BookSubCatagoryActivity

com.horner.ndajia.ui.PaymentActivity

com.horner.ndajia.ui.ReadCardPaymentActivity

com.horner.ndajia.ui.BookCatagolueActivity

com.horner.ndajia.ui.ReadCardActivity

com.horner.ndajia.ui.ExchangeActivity

com.horner.ndajia.ui.ExchangeNextActivity

com.horner.ndajia.ui.ForgetCompleteActivity

com.horner.ndajia.ui.ExchangeCompleteActivity

com.horner.ndajia.ui.BookTextCatagoryActivity

com.horner.ndajia.ui.RegistCompleteActivity

com.horner.ndajia.ui.ModifyNameActivity

com.horner.ndajia.ui.ImportResultActivity

cn.sharesdk.framework.ShareSDKUIShell

com.horner.ndajia.provider.MyProvider

alipay_plugin_20140529msp.apk

.apad.MainActivity

.apad.MyAlipayActivity

.apad.ConsumeRecordActivity

.AlipayRegister

.AlipayGphoneLogin

.AlipayAbout

.AlipayHelp

.AlipayMessage

.SubItemPayActivity

.SubItemAccountOutputActivity

.SubItemAccountInputActivity

.SubItemDealQueryActivity

.SubItemScoreListActivity

.SubItemGetMoneyActivity

.SubItemGetMoney3Activity

.SubItemAccountQueryActivity

.SubItemPhoneInputActivity