92745f9117a6523a872cdc87b342d0fe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
92745f9117a6523a872cdc87b342d0fe_JaffaCakes118
Size 14.1MB
Sample240603-t1vtfsdf26
SHA256 31fad1ae5c1ba7e074da6bc1ad9dae2fb7b4f0b1e06f1786917a301385a0e73f
MD5 92745f9117a6523a872cdc87b342d0fe
SHA1 51c136e08731c4a9a42880649ace8d279faac5fa
SHA512 37d15737e3c7c20068d209aa0ccde8b5713c8609b49923aef842fed14a596bd28385d24e78f2df9f5c050759d0992e214995735c4125a6fc53204871718f84c0
SSDEEP 393216:xOkOgboEPnf0F/QuvPPPP3XkMvKJfLe4Dy/p3YceiUsBD:kkfbogKvXk1p0dteG
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

File Explorer

92745f9117a6523a872cdc87b342d0fe_JaffaCakes118

.apk 14.1MB

92745f9117a6523a872cdc87b342d0fe_JaffaCakes118

SHA256 31fad1ae5c1ba7e074da6bc1ad9dae2fb7b4f0b1e06f1786917a301385a0e73f
MD5 92745f9117a6523a872cdc87b342d0fe
SHA1 51c136e08731c4a9a42880649ace8d279faac5fa
SHA512 37d15737e3c7c20068d209aa0ccde8b5713c8609b49923aef842fed14a596bd28385d24e78f2df9f5c050759d0992e214995735c4125a6fc53204871718f84c0
SSDEEP 393216:xOkOgboEPnf0F/QuvPPPP3XkMvKJfLe4Dy/p3YceiUsBD:kkfbogKvXk1p0dteG
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.founder.poetry

com.mob.tools.MobUIShell

android.intent.action.VIEW com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

.wxapi.WXEntryActivity

com.tencent.connect.common.AssistActivity

com.hyphenate.chatuidemo.ui.MainActivity

com.founder.poetry.activities.UserGuideActivity

com.founder.poetry.activities.SplashActivity

android.intent.action.MAIN

com.founder.poetry.activities.MainActivity

com.founder.poetry.activities.AdvertisementActivity

com.founder.poetry.activities.LoginActivity

com.founder.poetry.activities.MatchPlatMyProductionActivity

com.founder.poetry.activities.PicNewsHistoryActivity

com.founder.poetry.activities.WinPrizeActivity

com.founder.poetry.activities.DialogActivity

com.china.poetry.complete.PublishWorkActivity

com.china.poetry.complete.PoemSearchActivity

com.china.poetry.WebViewActivity

com.china.poetry.space.privacy.FriendsList

com.china.poetry.space.SystemMessage

com.china.poetry.space.privacy.Blacklist

com.hyphenate.chatuidemo.ui.ChatActivity

com.hyphenate.applib.ui.ChatActivity

com.hyphenate.chatuidemo.ui.AddContactActivity

com.hyphenate.chatuidemo.ui.AddFriendActivity

com.china.poetry.complete.WorksSearch

com.china.poetry.space.FeedBackActivity

com.china.poetry.space.MyFans

com.china.poetry.complete.WorksList

com.china.poetry.space.MyConcern

com.founder.poetry.activities.UserProtocolActivity

com.founder.poetry.activities.CommitProductionActivity

com.founder.poetry.activities.WinPrizeYearActivity

com.founder.poetry.activities.WinPrizeListActivity

com.founder.poetry.activities.YueduPrizeListActivity

com.founder.poetry.activities.RegisterActivity

com.founder.poetry.activities.ResetPasswordActivity

com.founder.poetry.activities.WebViewActivity

com.founder.poetry.activities.CompetingPlatformsActivity

com.founder.poetry.activities.SubmitPoetryActivity

com.founder.poetry.activities.MatchPlatformNewsActivity

com.founder.poetry.activities.MatchDetailsActivity

com.founder.poetry.activities.WoYaoCanSaiActivity

com.founder.poetry.activities.SeedWorksActivity

com.founder.poetry.activities.SeedWorksDetailActivity

com.founder.poetry.activities.ZhuTiSouSuoActivity

com.founder.poetry.activities.BiaoQianYunActivity

com.founder.poetry.activities.PoetryDetailInfoActivity

com.founder.poetry.activities.PoetryStudyActivity

com.founder.poetry.activities.QuestionAnswerActivity

com.founder.poetry.activities.SettingsActivity

com.founder.poetry.activities.ThemeSearchActivity

com.founder.poetry.activities.ThemeSearchResultActivity

com.founder.poetry.activities.DoggerelActivity

com.founder.poetry.activities.MyDoggerelActivity

com.founder.poetry.activities.DoggerelDetailActivity

com.founder.poetry.activities.DoggerelSearchActivity

com.founder.poetry.activities.DoggerelSearchResultActivity

com.founder.poetry.activities.AboutActivity

com.founder.poetry.activities.CopyrightDesActivity

com.founder.poetry.activities.CommitDoggerelActivity

com.china.poetry.complete.ThemeDetail

com.china.poetry.complete.ThemeDetail1

com.china.poetry.space.MyMail

com.china.poetry.space.Mail_detail

com.china.poetry.complete.PoetryDetail

com.china.poetry.space.OthersSpace

com.china.poetry.space.ChangeSex

com.china.poetry.space.ActivateActivity

com.china.poetry.space.MyMemberActivity

com.china.poetry.space.ReviewActivity

com.china.poetry.space.PrivacySetting

com.china.poetry.space.CityChoose

com.china.poetry.space.ChangeEdit

com.china.poetry.space.NewsActivity

com.china.poetry.complete.MyConcern

com.china.poetry.space.BasicSetting

com.china.poetry.space.MyWorks

com.china.poetry.space.PersonalSetting

com.china.poetry.space.MyCollection

com.china.poetry.space.MySpace

com.china.poetry.space.MyTopic

com.china.poetry.complete.PublishActivity

com.china.poetry.complete.PublishTopicActivity

com.china.poetry.college.CollegeMain

com.china.poetry.college.ThemeDetail

com.china.poetry.space.MyWebViewActivity

com.china.poetry.complete.PoemToFriends

com.founder.poetry.activities.PingLunDaYouShiActivity

com.founder.poetry.activities.MyPushNewsActivity

com.founder.poetry.activities.PushNewsListActivity

com.founder.poetry.activities.ShieldManagerActivity

com.founder.poetry.activities.SearchPushNewsActivity

com.founder.poetry.activities.MyEventActivity

com.founder.poetry.activities.PeotrySearchActivity

com.founder.poetry.activities.SearchActivity

com.founder.poetry.activities.SearchResultActivity

com.founder.poetry.activities.MessageDetailInfoActivity

com.founder.poetry.activities.FeedBackActivity

com.china.poetry.space.SearchFriends

cn.sharesdk.framework.ShareSDKUIShell

android.intent.action.VIEW

cn.jpush.android.ui.PushActivity

com.founder.jpush.JPushInfoActivity

jpush.testAction

com.hyphenate.easeui.ui.EaseBaiduMapActivity

com.hyphenate.chatuidemo.ui.NewFriendsMsgActivity

com.hyphenate.chatuidemo.ui.ForwardMessageActivity

com.hyphenate.chatuidemo.ui.ContextMenuActivity

com.hyphenate.easeui.ui.EaseShowBigImageActivity

com.hyphenate.easeui.ui.EaseShowNormalFileActivity

com.hyphenate.chatuidemo.ui.VoiceCallActivity

com.hyphenate.chatuidemo.ui.VideoCallActivity

com.hyphenate.chatuidemo.ui.EditActivity

com.hyphenate.easeui.ui.EaseShowVideoActivity

com.founder.poetry.activities.BiSaiWebViewActivity

com.founder.poetry.activities.PicNewsHistorySearchActivity

com.china.poetry.complete.ShiCiDetailsActivity

com.hyphenate.chatuidemo.ui.ImageGridActivity

com.hyphenate.chatuidemo.ui.RecorderVideoActivity

com.hyphenate.chatuidemo.ui.DiagnoseActivity

com.hyphenate.chatuidemo.ui.OfflinePushNickActivity

com.hyphenate.chatuidemo.ui.RobotsActivity

com.hyphenate.chatuidemo.ui.UserProfileActivity

com.umeng.update.UpdateDialogActivity

Android Permissions

92745f9117a6523a872cdc87b342d0fe_JaffaCakes118

Permissions

com.founder.poetry.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.BROADCAST_STICKY

com.android.launcher.permission.READ_SETTINGS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.READ_CONTACTS

com.google.android.c2dm.permission.RECEIVE