935ab14e332e00900733b08f2e738300_JaffaCakes118

General

Target
935ab14e332e00900733b08f2e738300_JaffaCakes118
Size 5.9MB
Sample240604-ch2qlshf6z
SHA256 2832995f968e658c7c14d45224acaa0bdb395a5bddda29383dcda50109b5ce96
MD5 935ab14e332e00900733b08f2e738300
SHA1 41843b6de8e5524b5cf113f60e67777cbd11f18c
SHA512 1b503e6060ed68d3404a55b988e7342c174a5f73689260bad2ca75e41385b2f64c2f1e8aa0cd072d09289226749579bf9e4ea144b29f473b816cfe2f0cfcfd49
SSDEEP 98304:+1P0t5vouyHwy3KEYfaVSwrxL0y1gxmDOJuac4Z+W86uuo9G6B7oUspgPlfd8osp:vt1otRYi5LBgxs7ZM+W8X9G6odpg4ENw
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

935ab14e332e00900733b08f2e738300_JaffaCakes118

.apk 5.9MB

935ab14e332e00900733b08f2e738300_JaffaCakes118

SHA256 2832995f968e658c7c14d45224acaa0bdb395a5bddda29383dcda50109b5ce96
MD5 935ab14e332e00900733b08f2e738300
SHA1 41843b6de8e5524b5cf113f60e67777cbd11f18c
SHA512 1b503e6060ed68d3404a55b988e7342c174a5f73689260bad2ca75e41385b2f64c2f1e8aa0cd072d09289226749579bf9e4ea144b29f473b816cfe2f0cfcfd49
SSDEEP 98304:+1P0t5vouyHwy3KEYfaVSwrxL0y1gxmDOJuac4Z+W86uuo9G6B7oUspgPlfd8osp:vt1otRYi5LBgxs7ZM+W8X9G6odpg4ENw
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips arch:x86

com.kingkr.kvwgiso

Android Permissions

935ab14e332e00900733b08f2e738300_JaffaCakes118

Permissions

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RESTART_PACKAGES

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_GPS

android.permission.ACCESS_ASSISTED_GPS

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.SET_DEBUG_APP

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

org.simalliance.openmobileapi.SMARTCARD

android.permission.NFC

android.permission.CAMERA

android.permission.FLASHLIGHT

com.kingkr.kvwgiso.permission.JPUSH_MESSAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

935ab14e332e00900733b08f2e738300_JaffaCakes118

com.kingkr.webapp.activity.MainActivity

com.kingkr.webapp.activity.WebActivity

com.kingkr.webapp.activity.AboutActivity

com.kingkr.webapp.activity.ThirdpartyActivity

com.kingkr.webapp.activity.ViewPagerActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.kingkr.kvwgiso.wxapi.WXEntryActivity

com.kingkr.kvwgiso.wxapi.WXPayEntryActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.alipay.sdk.app.H5PayActivity

com.momo.zxing.activity.CaptureActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.kingkr.webapp.service.DownloadAdveService

com.kingkr.webapp.service.AudioPlayService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.jsyh.pushlibrary.MyReceiver

Sharing

General

Malware Config

Signatures

File Explorer

935ab14e332e00900733b08f2e738300_JaffaCakes118

com.kingkr.webapp.activity.MainActivity

com.kingkr.webapp.activity.WebActivity

com.kingkr.webapp.activity.AboutActivity

com.kingkr.webapp.activity.ThirdpartyActivity

com.kingkr.webapp.activity.ViewPagerActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.kingkr.kvwgiso.wxapi.WXEntryActivity

com.kingkr.kvwgiso.wxapi.WXPayEntryActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.alipay.sdk.app.H5PayActivity

com.momo.zxing.activity.CaptureActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.kingkr.webapp.service.DownloadAdveService

com.kingkr.webapp.service.AudioPlayService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.jsyh.pushlibrary.MyReceiver

Android Permissions

935ab14e332e00900733b08f2e738300_JaffaCakes118