99f7fa8e3e29edf07399d68e31fe1136_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
99f7fa8e3e29edf07399d68e31fe1136_JaffaCakes118
Size 30.8MB
Sample240606-e68j6shf56
SHA256 59379aa4dd91a4b346a125561ef27ccdc8a12e8a1a88cf88c7746f9ed37e559c
MD5 99f7fa8e3e29edf07399d68e31fe1136
SHA1 194dac31c5df728461d97c652c22733b76fe639f
SHA512 8d2e36447fea4ca676b1abdccbe41ff38e3b39f0324e6a051865da8fcfc37ea4b79cce4554d1763cd3bada7279645b059b7097d554a2e699f212d43d7065dd39
SSDEEP 393216:uKfOhKeiMyW7iKJ70Y+x/CK2IulFlmPVuhx2sUBIKz1Epg0UNZVEEh8xkVZukD29:uWOhKd07iKh/+xaFPUG2sXg0UN3EPxFd
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx
sample	upx

Requests dangerous framework permissions 21 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG

File Explorer

99f7fa8e3e29edf07399d68e31fe1136_JaffaCakes118

.apk 30.8MB
tf.png

.apk 12KB
unicom_resource.dat

.apk 114KB

99f7fa8e3e29edf07399d68e31fe1136_JaffaCakes118

SHA256 59379aa4dd91a4b346a125561ef27ccdc8a12e8a1a88cf88c7746f9ed37e559c
MD5 99f7fa8e3e29edf07399d68e31fe1136
SHA1 194dac31c5df728461d97c652c22733b76fe639f
SHA512 8d2e36447fea4ca676b1abdccbe41ff38e3b39f0324e6a051865da8fcfc37ea4b79cce4554d1763cd3bada7279645b059b7097d554a2e699f212d43d7065dd39
SSDEEP 393216:uKfOhKeiMyW7iKJ70Y+x/CK2IulFlmPVuhx2sUBIKz1Epg0UNZVEEh8xkVZukD29:uWOhKd07iKh/+xaFPUG2sXg0UN3EPxFd
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

com.sg.dljz.qihu

android.permission.RECORD_AUDIO android.permission.SET_WALLPAPER_HINTS android.permission.SET_WALLPAPER android.permission.BATTERY_STATS android.permission.GET_PACKAGE_SIZE android.permission.GET_TASKS android.permission.RESTART_PACKAGES android.permission.READ_PHONE_STATE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_NETWORK_STATE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_LOGS android.permission.READ_SMS android.permission.READ_CONTACTS android.permission.WRITE_SMS android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_WIFI_STATE android.permission.KILL_BACKGROUND_PROCESSES android.permission.ACCESS_FINE_LOCATION android.permission.RECORD_AUDIO android.permission.MODIFY_AUDIO_SETTINGS android.permission.CHANGE_CONFIGURATION com.android.launcher.permission.INSTALL_SHORTCUT android.permission.EXPAND_STATUS_BAR android.permission.WAKE_LOCK android.permission.INTERNET android.permission.SEND_SMS android.permission.ACCESS_NETWORK_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.READ_CONTACTS android.permission.WRITE_SMS android.permission.GET_TASKS android.permission.READ_EXTERNAL_STORAGE android.permission.RECEIVE_SMS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.RESTART_PACKAGES android.webkit.permission.PLUGIN android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.VIBRATE android.permission.MODIFY_AUDIO_SETTINGS android.permission.GET_ACCOUNTS android.permission.MANAGE_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.USE_CREDENTIALS android.permission.WRITE_SETTINGS android.permission.READ_SETTINGS android.permission.READ_LOGS android.permission.READ_EXTERNAL_STORAGE android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.WRITE_SETTINGS android.permission.READ_CALL_LOG android.permission.USE_FINGERPRINT android.permission.DISABLE_KEYGUARD

Android Permissions

99f7fa8e3e29edf07399d68e31fe1136_JaffaCakes118

Permissions

android.permission.RECORD_AUDIO

android.permission.SET_WALLPAPER_HINTS

android.permission.SET_WALLPAPER

android.permission.BATTERY_STATS

android.permission.GET_PACKAGE_SIZE

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_LOGS

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_SMS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_FINE_LOCATION

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_CONFIGURATION

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.EXPAND_STATUS_BAR

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.WRITE_SMS

android.permission.GET_TASKS

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RESTART_PACKAGES

android.webkit.permission.PLUGIN

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.GET_ACCOUNTS

99f7fa8e3e29edf07399d68e31fe1136_JaffaCakes118

com.sg.kbz.doulongzhanshi.AndroidLauncher

cn.cmgame.billing.api.GameOpenActivity

com.sg.game.unity.StartActivity

com.qihoo.gamecenter.sdk.activity.ContainerActivity

com.alipay.sdk.app.H5PayActivity

com.iapppay.pay.channel.weixinpay.WeixinWapPayActivity

com.junnet.heepay.ui.activity.WelcomeActivity

com.junnet.heepay.ui.activity.WechatPaymentActivity

com.ipaynow.plugin.activity.PayMethodActivity

com.ipaynow.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

com.qihoo.psdk.app.QStatActivity

com.qihoo.updatesdk.lib.UpdateTipDialogActivity

com.qihoo.gameunionforsdk.SimpleWebView

cn.cmgame2_0.launch_model.shortcut.main.MiguHomeActivity

com.unicom.channel.paysecurity.SecurityActivity

cn.egame.terminal.paysdk.EgamePayActivity

cn.egame.terminal.sdk.EgameCoreActivity

com.unicom.wostore.unipay.paysecurity.SecurityActivity

com.qihoo.psdk.remote.QRemoteService

com.qihoo.psdk.local.QLocalService

com.qihoo.appstore.updatelib.CheckUpdateService

cn.cmgame.billing.service.GameService

com.unicom.channel.paysecurity.TouchPayService

cn.egame.terminal.sdk.EgameCoreService

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

com.datalab.sms.OpayService

com.datalab.sms.NotifierService

com.qihoo.psdk.local.QBootReceiver

cn.egame.terminal.sdk.EgameCoreReceiver

com.unicom.xiaowo.SecurityReceiver

tf.png

unicom_resource.dat