926f2dec9ef91a7a5bd9ac36531a984c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
926f2dec9ef91a7a5bd9ac36531a984c_JaffaCakes118
Size 11.7MB
Sample240603-twh9vsdd74
SHA256 1c4500da5f580c978d852ac4092e3962eca11659c52b104dbe702158e7e5f418
MD5 926f2dec9ef91a7a5bd9ac36531a984c
SHA1 0a5780497f03e060a753dffff60570b139e8360c
SHA512 2b91dc08942be8907e571062987d5afe2a0b312a2938381ae460d8db87fcec82fb114dd7ce670ccc0e689104ee8a6aaa761150a2a07da5d0a221b93a1b3aa748
SSDEEP 196608:wp1XFSkKlWousi8DIwd8HIPwPrb9iEy2ASOUIK6IZHiyTw8Es+EfXsDgeAC6lwmW:CXFTKlWoz1CoPwjb9jtIXIZKs+EkDr68
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Requests dangerous framework permissions 32 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

926f2dec9ef91a7a5bd9ac36531a984c_JaffaCakes118

.apk 11.7MB

926f2dec9ef91a7a5bd9ac36531a984c_JaffaCakes118

SHA256 1c4500da5f580c978d852ac4092e3962eca11659c52b104dbe702158e7e5f418
MD5 926f2dec9ef91a7a5bd9ac36531a984c
SHA1 0a5780497f03e060a753dffff60570b139e8360c
SHA512 2b91dc08942be8907e571062987d5afe2a0b312a2938381ae460d8db87fcec82fb114dd7ce670ccc0e689104ee8a6aaa761150a2a07da5d0a221b93a1b3aa748
SSDEEP 196608:wp1XFSkKlWousi8DIwd8HIPwPrb9iEy2ASOUIK6IZHiyTw8Es+EfXsDgeAC6lwmW:CXFTKlWoz1CoPwjb9jtIXIZKs+EkDr68
MD5 SHA1 SHA512 SSDEEP

android arch:arm

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

com.mf.xxyzgame.wpp.game.hlqsgdzz.U360

android.permission.READ_PHONE_STATE android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_WIFI_STATE android.permission.GET_TASKS android.permission.SYSTEM_ALERT_WINDOW android.permission.MOUNT_UNMOUNT_FILESYSTEMS com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.INSTALL_SHORTCUT android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.SEND_SMS android.permission.READ_PHONE_STATE android.permission.READ_CONTACTS android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_TASKS com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.WRITE_SETTINGS android.permission.RECORD_AUDIO android.permission.SET_WALLPAPER_HINTS android.permission.SET_WALLPAPER android.permission.BATTERY_STATS android.permission.GET_PACKAGE_SIZE android.permission.GET_TASKS android.permission.RESTART_PACKAGES android.permission.READ_PHONE_STATE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_NETWORK_STATE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_LOGS android.permission.READ_SMS android.permission.READ_CONTACTS android.permission.WRITE_SMS android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_WIFI_STATE android.permission.KILL_BACKGROUND_PROCESSES android.permission.ACCESS_FINE_LOCATION android.permission.RECORD_AUDIO android.permission.MODIFY_AUDIO_SETTINGS android.permission.CHANGE_CONFIGURATION com.android.launcher.permission.INSTALL_SHORTCUT android.permission.EXPAND_STATUS_BAR android.permission.WAKE_LOCK android.permission.INTERNET android.permission.SEND_SMS android.permission.ACCESS_NETWORK_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.READ_CONTACTS android.permission.WRITE_SMS android.permission.GET_TASKS android.permission.READ_EXTERNAL_STORAGE android.permission.RECEIVE_SMS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.RESTART_PACKAGES android.webkit.permission.PLUGIN android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.VIBRATE android.permission.MODIFY_AUDIO_SETTINGS android.permission.GET_ACCOUNTS android.permission.MANAGE_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.USE_CREDENTIALS android.permission.WRITE_SETTINGS android.permission.READ_SETTINGS android.permission.READ_LOGS

Android Permissions

926f2dec9ef91a7a5bd9ac36531a984c_JaffaCakes118

Permissions

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.RECORD_AUDIO

android.permission.SET_WALLPAPER_HINTS

android.permission.SET_WALLPAPER

android.permission.BATTERY_STATS

android.permission.GET_PACKAGE_SIZE

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_LOGS

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_SMS

926f2dec9ef91a7a5bd9ac36531a984c_JaffaCakes118

org.cocos2dx.cpp.AppActivity

cn.cmgame.billing.api.GameOpenActivity

cn.cmgame2_0.launch_model.shortcut.main.MiguHomeActivity

com.unicom.channel.paysecurity.SecurityActivity

com.mydefinemmpay.tool.logoAct

com.mydefinemmpay.tool.logoActJkzg

com.qihoo.gamecenter.sdk.activity.ContainerActivity

com.qihoopp.qcoinpay.QcoinActivity

com.alipay.sdk.app.H5PayActivity

com.iapppay.pay.channel.weixinpay.WeixinWapPayActivity

com.junnet.heepay.ui.activity.WelcomeActivity

com.junnet.heepay.ui.activity.WechatPaymentActivity

com.ipaynow.plugin.activity.PayMethodActivity

com.ipaynow.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

com.qihoo.psdk.app.QStatActivity

.wxapi.WXEntryActivity

com.qihoo.updatesdk.lib.UpdateTipDialogActivity

com.qihoo.gameunionforsdk.SimpleWebView

com.wedf.wngo.bcwuw.a.a.d.b

cn.cmgame.billing.service.GameService

com.unicom.channel.paysecurity.TouchPayService

com.qihoo.psdk.remote.QRemoteService

com.qihoo.psdk.local.QLocalService

com.qihoo.appstore.updatelib.CheckUpdateService

com.wedf.wngo.bcwuw.a.a.d.d

com.wedf.wngo.bcwuw.a.a.d.a

com.wedf.wngo.bcwuw.a.a.d.e

com.qihoo.psdk.local.QBootReceiver

com.wedf.wngo.bcwuw.a.a.d.c