94a079810e2d8bc5bce1f51689b74481_JaffaCakes118

General

Target
94a079810e2d8bc5bce1f51689b74481_JaffaCakes118
Size 4.8MB
Sample240604-nb6xjaec5x
SHA256 6ddb3538d42dc88e76eea1a4824ec975a9d753ab4d0ab5a2973049526c3256ef
MD5 94a079810e2d8bc5bce1f51689b74481
SHA1 5f2df6ce49be0f818818d7156d95756e4f3a8c04
SHA512 a7de8fbe87ac588c388ae42dd62b32b99b031eed038cb8eca7d1274cb0c28a2498678237eb5d6eadb1da9ef0406e7193d8672f8fbf9556b853140da8d4982cc6
SSDEEP 98304:GP8QwG+nPdfbNvN9J8CleS6NuwGxrP6E40ydaMwafNHJq:GkQwvnJNvneSA+rPJGdSUdJq
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

File Explorer

94a079810e2d8bc5bce1f51689b74481_JaffaCakes118

.apk 4.8MB
res.bin

.apk 190KB

94a079810e2d8bc5bce1f51689b74481_JaffaCakes118

SHA256 6ddb3538d42dc88e76eea1a4824ec975a9d753ab4d0ab5a2973049526c3256ef
MD5 94a079810e2d8bc5bce1f51689b74481
SHA1 5f2df6ce49be0f818818d7156d95756e4f3a8c04
SHA512 a7de8fbe87ac588c388ae42dd62b32b99b031eed038cb8eca7d1274cb0c28a2498678237eb5d6eadb1da9ef0406e7193d8672f8fbf9556b853140da8d4982cc6
SSDEEP 98304:GP8QwG+nPdfbNvN9J8CleS6NuwGxrP6E40ydaMwafNHJq:GkQwvnJNvneSA+rPJGdSUdJq
MD5 SHA1 SHA512 SSDEEP

android

com.nhcq

com.supersdk.application.MySplashActivity

android.intent.action.MAIN

com.supersdk.game.GameActivity

com.super.sdk.MAIN

com.wancms.sdk.ui.LoginActivity

com.wancms.sdk.floatwindow.FloatWebActivity

com.wancms.sdk.ui.ChargeActivity

com.wancms.sdk.ui.TrumpetActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.alipay.sdk.auth.AuthActivity

com.tencent.connect.common.AssistActivity

com.alipay.sdk.app.H5PayActivity

com.wancms.sdk.ui.WeChatPayActivity

android.intent.action.MAIN android.intent.action.VIEW

com.wancms.sdk.ui.WebPayActivity

com.wancms.sdk.ui.SFTWebPayActivity

com.wancms.sdk.ui.XQTWebPayActivity

com.wancms.sdk.ui.YYWebPayActivity

com.wancms.sdk.ui.WFTWebPayActivity

com.wancms.sdk.ui.HuifubaoWebPayActivity

com.wancms.sdk.ui.JZWebPayActivity

com.wancms.sdk.ui.HaiBeiWebPayActivity

com.wancms.sdk.ui.WXH5PayActivity

com.wancms.sdk.wxapi.WXEntryActivity

com.wancms.sdk.wxapi.WXPayEntryActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.shengpay.express.smc.ExpressSmcClientActivity

android.intent.action.MAIN

com.wancms.sdk.ui.PhoneBindingActivity

Android Permissions

94a079810e2d8bc5bce1f51689b74481_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.GET_TASKS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.MODE_WORLD_READABLE

android.permission.RECEIVE_SMS

94a079810e2d8bc5bce1f51689b74481_JaffaCakes118

com.supersdk.application.MySplashActivity

com.supersdk.game.GameActivity

com.wancms.sdk.ui.LoginActivity

com.wancms.sdk.floatwindow.FloatWebActivity

com.wancms.sdk.ui.ChargeActivity

com.wancms.sdk.ui.TrumpetActivity

com.tencent.tauth.AuthActivity

com.alipay.sdk.auth.AuthActivity

com.tencent.connect.common.AssistActivity

com.alipay.sdk.app.H5PayActivity

com.wancms.sdk.ui.WeChatPayActivity

com.wancms.sdk.ui.WebPayActivity

com.wancms.sdk.ui.SFTWebPayActivity

com.wancms.sdk.ui.XQTWebPayActivity

com.wancms.sdk.ui.YYWebPayActivity

com.wancms.sdk.ui.WFTWebPayActivity

com.wancms.sdk.ui.HuifubaoWebPayActivity

com.wancms.sdk.ui.JZWebPayActivity

com.wancms.sdk.ui.HaiBeiWebPayActivity

com.wancms.sdk.ui.WXH5PayActivity

com.wancms.sdk.wxapi.WXEntryActivity

com.wancms.sdk.wxapi.WXPayEntryActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.shengpay.express.smc.ExpressSmcClientActivity

com.wancms.sdk.ui.PhoneBindingActivity

com.wancms.sdk.WancmsSDKAppService

com.sina.weibo.sdk.net.DownloadService

com.wancms.sdk.AppRegister

res.bin

Sharing

General

Malware Config

Signatures

File Explorer

94a079810e2d8bc5bce1f51689b74481_JaffaCakes118

com.supersdk.application.MySplashActivity

com.supersdk.game.GameActivity

com.wancms.sdk.ui.LoginActivity

com.wancms.sdk.floatwindow.FloatWebActivity

com.wancms.sdk.ui.ChargeActivity

com.wancms.sdk.ui.TrumpetActivity

com.tencent.tauth.AuthActivity

com.alipay.sdk.auth.AuthActivity

com.tencent.connect.common.AssistActivity

com.alipay.sdk.app.H5PayActivity

com.wancms.sdk.ui.WeChatPayActivity

com.wancms.sdk.ui.WebPayActivity

com.wancms.sdk.ui.SFTWebPayActivity

com.wancms.sdk.ui.XQTWebPayActivity

com.wancms.sdk.ui.YYWebPayActivity

com.wancms.sdk.ui.WFTWebPayActivity

com.wancms.sdk.ui.HuifubaoWebPayActivity

com.wancms.sdk.ui.JZWebPayActivity

com.wancms.sdk.ui.HaiBeiWebPayActivity

com.wancms.sdk.ui.WXH5PayActivity

com.wancms.sdk.wxapi.WXEntryActivity

com.wancms.sdk.wxapi.WXPayEntryActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.shengpay.express.smc.ExpressSmcClientActivity

com.wancms.sdk.ui.PhoneBindingActivity

com.wancms.sdk.WancmsSDKAppService

com.sina.weibo.sdk.net.DownloadService

com.wancms.sdk.AppRegister

res.bin

Android Permissions

94a079810e2d8bc5bce1f51689b74481_JaffaCakes118