99798afe7095dd5d5bd3ccf1fd264b9d_JaffaCakes118

General

Target

99798afe7095dd5d5bd3ccf1fd264b9d_JaffaCakes118
Size

2.6MB
MD5

99798afe7095dd5d5bd3ccf1fd264b9d
SHA1

85f83343dbec73841a2b0cdd65dcf83c62758d8f
SHA256

b0c0b8eed7f7f95c02b6efb3150abdc0ea50c502e5d849b4bb405fd7a9451a24
SHA512

baaa7a5286cf7cdbdd5b27e7c5bbf46c2649ef2e94bd0b62d029c3be60338e59fa7af088ba7cc8888c7bdc28d0b9c4e5ab43f32165e47e9f00dfbbe60a0e4145
SSDEEP

49152:MaRUn2X+hv4/6OM1cEsfumkiDyxEaPi+2cVdDmg7OGKzmutIg:M72uhKMGEsfuxiuxJPif0dDm11zCg

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

99798afe7095dd5d5bd3ccf1fd264b9d_JaffaCakes118
.apk android arch:arm

com.syezon.wifi

com.qihoo.util.StartActivity

Activities

com.syezon.wifi.LogoActivity

android.intent.action.MAIN

com.qihoo.util.StartActivity

android.intent.action.MAIN

com.syezon.wifi.WifiActivity

android.intent.action.VIEW

com.syezon.wifi.activity.WebQQActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_PHONE_STATE
android.permission.GET_PACKAGE_SIZE
android.permission.CLEAR_APP_CACHE
android.permission.GET_TASKS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RESTART_PACKAGES
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_LOGS
android.permission.WAKE_LOCK
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_COARSE_LOCATION
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CHANGE_CONFIGURATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNET
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_LOGS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.SET_PROCESS_LIMIT

Receivers

com.syezon.wifi.WifiConnectReceiver

android.net.wifi.RSSI_CHANGED
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.supplicant.CONNECTION_CHANGE

com.syezon.wifi.box.AppInstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

Services

Android Permissions

99798afe7095dd5d5bd3ccf1fd264b9d_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.GET_TASKS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RESTART_PACKAGES

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.CHANGE_CONFIGURATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_LOGS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_LOGS

android.permission.INTERNET

Sharing

General

Malware Config

Signatures

Files

com.syezon.wifi

com.qihoo.util.StartActivity

Activities

com.syezon.wifi.LogoActivity

com.qihoo.util.StartActivity

com.syezon.wifi.WifiActivity

com.syezon.wifi.activity.WebQQActivity

Permissions

Receivers

com.syezon.wifi.WifiConnectReceiver

com.syezon.wifi.box.AppInstallReceiver

Services

Android Permissions

99798afe7095dd5d5bd3ccf1fd264b9d_JaffaCakes118