94b6b207a4044608c4c3ed1da82d4964_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
94b6b207a4044608c4c3ed1da82d4964_JaffaCakes118
Size 10.6MB
Sample240604-nwfabafa5s
SHA256 c732e21a3263c96c11cf89dbce92a36d8506986bd7b024830f69c5626992d07a
MD5 94b6b207a4044608c4c3ed1da82d4964
SHA1 575559def3496f4cf301482b35785464a060b1b9
SHA512 3f54acd081d04017ced258edf3075934a9c8dbd65e63e5260f750edbf8c733321547197cf14af7e07cc4091cd6a4f4d77e3fd816056261358e0f39969cfda1de
SSDEEP 196608:nmSJ7GzXYbiBpqZuUN+3lbHgUI+lwO6DGIhoIZ6iAobxJxtobxJ86:mSJazOZuewld6D5mI0uJ206
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

94b6b207a4044608c4c3ed1da82d4964_JaffaCakes118

.apk 10.6MB
xq_skin_blue.zip

.apk 241KB
xq_skin_orange.zip

.apk 252KB
xq_skin_pink.zip

.apk 243KB
xq_skin_red.zip

.apk 252KB

94b6b207a4044608c4c3ed1da82d4964_JaffaCakes118

SHA256 c732e21a3263c96c11cf89dbce92a36d8506986bd7b024830f69c5626992d07a
MD5 94b6b207a4044608c4c3ed1da82d4964
SHA1 575559def3496f4cf301482b35785464a060b1b9
SHA512 3f54acd081d04017ced258edf3075934a9c8dbd65e63e5260f750edbf8c733321547197cf14af7e07cc4091cd6a4f4d77e3fd816056261358e0f39969cfda1de
SSDEEP 196608:nmSJ7GzXYbiBpqZuUN+3lbHgUI+lwO6DGIhoIZ6iAobxJxtobxJ86:mSJazOZuewld6D5mI0uJ206
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86 arch:mips

ibuger.dashentang

com.opencom.xiaonei.activity.InterestActivity

com.opencom.xiaonei.activity.DiscoverEventActivity

com.opencom.xiaonei.activity.CreateSectionActivity

com.opencom.xiaonei.activity.DiscoverSquareActivity

com.opencom.xiaonei.activity.SearchActivity

com.opencom.xiaonei.activity.SearchMoreActivity

com.opencom.dgc.activity.MessageDynamicActivity

com.opencom.dgc.activity.EditChannelSetAuthActivity

com.opencom.dgc.activity.PayHistoryActivity

com.opencom.dgc.MainActivity

android.intent.action.MAIN

com.opencom.dgc.activity.SplashActivity

com.opencom.dgc.activity.ZXingScannerActivity

com.opencom.dgc.activity.TopicsActivity

com.opencom.dgc.activity.MeActivity

com.opencom.dgc.activity.AboutAppActivity

com.opencom.dgc.activity.UpdateInfoActivity

com.opencom.dgc.activity.PicPostActivity

com.opencom.dgc.fragment.chat.FriendMsgActivity

com.opencom.dgc.activity.MeInboxActivity

com.opencom.dgc.activity.EditChannelActivity

com.opencom.xiaonei.activity.ChannelProfitActivity

com.opencom.dgc.activity.ForgetPwdActivity

com.opencom.dgc.activity.BaiduMapOverlayActivity

com.opencom.dgc.activity.EditPostActivity

com.opencom.dgc.activity.EditTradePostActivity

com.opencom.dgc.activity.NearbyPostedActivity

com.opencom.dgc.activity.SubReplyActivity

com.opencom.dgc.activity.SupportPostedListActivity

com.opencom.dgc.activity.SettingActivity

com.opencom.dgc.activity.LoginActivity

com.opencom.dgc.activity.HistoryActivity

com.opencom.dgc.activity.MyFileActivity

com.opencom.xiaonei.activity.FilePathSelectActivity

com.opencom.xiaonei.activity.FileSelectActivity

com.opencom.xiaonei.activity.FileImageSingleActivity

com.opencom.dgc.activity.RegisterActivity

com.opencom.dgc.authcredit.CreditScoreActivity

com.opencom.dgc.activity.ChatActivity

com.opencom.dgc.activity.FriendRequestListActivity

com.opencom.dgc.activity.MyCardActivity

com.opencom.dgc.activity.ActsListActivity

com.opencom.dgc.activity.AddFriendActivity

com.opencom.dgc.activity.InboxMeActivity

com.opencom.dgc.activity.VisitorInfoListActivity

com.opencom.dgc.activity.PostedNewActivity

com.opencom.dgc.activity.PicCirclePostActivity

com.opencom.dgc.activity.TradePostActivity

com.waychel.tools.activity.AddPhotosActivity

com.waychel.tools.activity.PhotosPreviewActivity

com.opencom.dgc.activity.SelectAddressActivity

com.opencom.dgc.activity.SelectPindaoActivity

com.opencom.dgc.activity.PersonalMainActivity

com.opencom.dgc.activity.PersonalInfoActivity

com.opencom.dgc.activity.ChangePasswordActivity

com.opencom.dgc.activity.ChangeNameActivity

com.opencom.dgc.activity.ChangePhoneActivity

com.opencom.dgc.activity.CommListActivity

com.opencom.dgc.activity.PersonalCardActivity

com.opencom.dgc.authcredit.AuthenticationActivity

com.opencom.dgc.activity.BindLoginActivity

com.opencom.dgc.activity.PostsDetailsActivity

com.opencom.dgc.activity.SectionMainActivity

com.opencom.dgc.activity.life.LifeActivity

com.opencom.dgc.activity.life.ShopListActivity

com.opencom.dgc.activity.life.ShopServicesActivity

com.opencom.dgc.activity.life.ShopDetailsActivity

com.opencom.dgc.activity.ShopMapActivity

com.opencom.dgc.PublicSectionActivity

com.opencom.dgc.activity.SectionSearchActivity

com.opencom.dgc.activity.SetManagerSearchActivity

com.opencom.dgc.activity.message.MessageActivity

com.opencom.dgc.activity.message.MessageDynamicActivity

com.opencom.dgc.authcredit.AuthSectionMainActivity

com.tencent.connect.common.AssistActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

ibuger.lbbs.LbbsPostViewActivity

android.intent.action.VIEW

com.mob.tools.MobUIShell

android.intent.action.VIEW

ibuger.dashentang.wxapi.WXEntryActivity

com.opencom.dgc.activity.MoreInfoWebViewActivity

com.opencom.dgc.activity.wallet.WalletActivity

com.opencom.dgc.activity.wallet.PointsActivity

com.opencom.dgc.activity.wallet.PointsExchangeActivity

com.opencom.dgc.activity.wallet.PointsPayActivity

com.opencom.dgc.activity.wallet.PointsDetailsActivity

com.opencom.dgc.activity.wallet.RewardActivity

com.opencom.dgc.activity.wallet.PrePayActivity

com.opencom.dgc.pay.PayWeChatQRCodeActivity

com.opencom.dgc.pay.PayWeChatConfirmationActivity

com.opencom.dgc.pay.PayWeChatCourseActivity

com.opencom.dgc.activity.wallet.WithDrawActivity

com.opencom.dgc.activity.wallet.PaySecurityActivity

com.opencom.dgc.activity.wallet.BindWithDrawAccountActivity

com.opencom.dgc.activity.wallet.WithDrawRecordActivity

com.opencom.dgc.activity.wallet.WithDrawRecordDetailsActivity

com.opencom.dgc.activity.wallet.BindWithDrawPhoneActivity

com.opencom.dgc.activity.phone.BindPhoneActivity

com.opencom.dgc.activity.phone.BindSelfPhoneActivity

com.opencom.dgc.activity.phone.PhoneActivity

com.opencom.dgc.activity.VerifyAccountActivity

com.opencom.dgc.activity.phone.EditPhoneActivity

com.opencom.dgc.activity.wallet.WithDrawSuccessActivity

com.opencom.dgc.activity.arrival.ArrivalMessageActivity

com.opencom.dgc.activity.arrival.ArrivalRewardActivity

com.opencom.dgc.activity.arrival.ArrivalPaySuccessActivity

com.opencom.dgc.activity.wallet.PaySuccessActivity

com.opencom.dgc.activity.arrival.ArrivalPointDetailActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.opencom.dgc.channel.date.PostDateActivity

com.opencom.dgc.channel.date.PayDateSuccessActivity

com.opencom.dgc.channel.date.ServiceProcedureActivity

cn.jpush.android.ui.PushActivity

com.opencom.dgc.photoselector.AddPhotosActivity

com.opencom.dgc.photoselector.PhotosPreviewActivity

com.opencom.dgc.channel.fm.PostFmActivity

com.opencom.dgc.channel.fm.PostFMCoverActivity

com.opencom.dgc.contact.ContactActivity

com.opencom.dgc.channel.date.RemindBuyerActivity

com.opencom.dgc.channel.date.DateHelpActivity

com.opencom.dgc.channel.date.OrderActivity

com.opencom.dgc.channel.date.OrderDetailActivity

com.opencom.dgc.channel.date.EvaluateActivity

com.opencom.dgc.channel.date.ServingActivity

com.opencom.dgc.channel.date.StartServiceActivity

com.opencom.dgc.channel.main.ChannelMainActivity

Android Permissions

94b6b207a4044608c4c3ed1da82d4964_JaffaCakes118

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.CHANGE_CONFIGURATION

android.permission.GET_TASKS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.BAIDU_LOCATION_SERVICE

android.permission.ACCESS_GPS

android.permission.CAMERA

ibuger.dashentang.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE