99a4907f56f6d38289d1ae8a05795cdb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

99a4907f56f6d38289d1ae8a05795cdb_JaffaCakes118
Size

27.4MB
MD5

99a4907f56f6d38289d1ae8a05795cdb
SHA1

a47122c30e79381ebbf4ef2124066a8d2374ccb5
SHA256

2e79bf9a6ef95dc860e5b69baae8a0829864db0ab54dafd050f7314bc68de782
SHA512

6fb66ec6c21d7c1a50f2ace1b29c914ad167765aeba8ae85251d15d787dbc102fcad661ae4002b0b3075980633e56dee92fd373fad117c06ee586768fd75a55a
SSDEEP

786432:3nzrrMDRDe0C9pqpAtxSBB7quq9jlqxeDbhPdU4yUT57L:3zf0t09pq+SB2uT2bB64yUT5v

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

99a4907f56f6d38289d1ae8a05795cdb_JaffaCakes118
.apk android arch:arm

com.sg.android.devil

com.sg.android.devil.killdevils

Activities

com.sg.android.devil.killdevils

android.intent.action.MAIN

cn.cmgame.billing.api.GameOpenActivity

android.intent.action.CHINAMOBILE_OMS_GAME

Permissions

com.android.vending.BILLING
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.READ_LOGS
android.permission.ACCESS_WIFI_STATE
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_TASKS
android.permission.ACCESS_FINE_LOCATION
android.permission.RESTART_PACKAGES
android.permission.ACCESS_COARSE_LOCATION
android.permission.VIBRATE
android.permission.DISABLE_KEYGUARD
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SEND_SMS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_NETWORK_STATE
android.permission.GET_ACCOUNTS
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.NFC
org.simalliance.openmobileapi.SMARTCARD

Receivers

cn.play.dserv.DsReceiver

cn.play.dservice
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.sg.android.devil.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

Services

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

com.sg.android.devil.unicom.wostore.unipay.securityserviceframework

com.umeng.message.UmengService

com.sg.android.devil.intent.action.START
com.sg.android.devil.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2
alipay_plugin.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService
qihoo_plugin.jar
.apk android
unicom_resource.dat
.apk android

com.unicom.resourcepro

Android Permissions

99a4907f56f6d38289d1ae8a05795cdb_JaffaCakes118

Permissions

com.android.vending.BILLING

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.RESTART_PACKAGES

android.permission.ACCESS_COARSE_LOCATION

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_ACCOUNTS

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.NFC

org.simalliance.openmobileapi.SMARTCARD

Sharing

General

Malware Config

Signatures

Files

com.sg.android.devil

com.sg.android.devil.killdevils

Activities

com.sg.android.devil.killdevils

cn.cmgame.billing.api.GameOpenActivity

Permissions

Receivers

cn.play.dserv.DsReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

Services

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.unicom.resourcepro

Android Permissions

99a4907f56f6d38289d1ae8a05795cdb_JaffaCakes118