9b50b6b2976147f2485bc79f13f94c91_JaffaCakes118

Reason

could not process APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target
9b50b6b2976147f2485bc79f13f94c91_JaffaCakes118
Size 23.1MB
Sample240610-t1ataatejp
SHA256 50c2bcc363d45fc0bfbeb1c4997b85b0e02b0fc60ac4471e3f38a055be4cd080
MD5 9b50b6b2976147f2485bc79f13f94c91
SHA1 cd23e9ffdabf52e6ae9aed3c5827ead232f8d3f2
SHA512 df25efefe8fd397669d1835c8a94a253f34652708dcebd5ceba59ea188c344d4948ef45d8aa570496cfae4abf3d3fc560159e656013b65a142b5f8229c209a58
SSDEEP 393216:OUKmqaL8QgeIe49ee1LQ4XEYIyWMIXkk25CbOpyZQE494tZW0XkoOxeU:POagx71LQ4XEYlWMCGwOpe4oZNXj8eU
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

upx

Malware Config

Signatures

Patched UPX-packed file 2 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx
sample	patched_upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx
sample	upx

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

9b50b6b2976147f2485bc79f13f94c91_JaffaCakes118

.apk 23.1MB
amap_resource1_0_0.png

.apk 24KB
autonavi_Resource1_1_0.png

.apk 1016KB

9b50b6b2976147f2485bc79f13f94c91_JaffaCakes118

SHA256 50c2bcc363d45fc0bfbeb1c4997b85b0e02b0fc60ac4471e3f38a055be4cd080
MD5 9b50b6b2976147f2485bc79f13f94c91
SHA1 cd23e9ffdabf52e6ae9aed3c5827ead232f8d3f2
SHA512 df25efefe8fd397669d1835c8a94a253f34652708dcebd5ceba59ea188c344d4948ef45d8aa570496cfae4abf3d3fc560159e656013b65a142b5f8229c209a58
SSDEEP 393216:OUKmqaL8QgeIe49ee1LQ4XEYIyWMIXkk25CbOpyZQE494tZW0XkoOxeU:POagx71LQ4XEYlWMCGwOpe4oZNXj8eU
MD5 SHA1 SHA512 SSDEEP

android arch:arm

Patched UPX-packed file

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

autonavi_Resource1_1_0.png

SHA256 eefa1beadbd54e830187eec627b1145767a223a75e0a51142b809adff26d6e73
MD5 ca416b9a195afd3fad887b83b5c4338e
SHA1 3c2fe205b7c4daa8eba4139fdfd4a88c46b135e4
SHA512 612f6d24c7b2e85f8a41648df6a2256204363c9d6195f738ad15e2c7c0bd9993d4c24c27cf1e006ad8637274ed35d916ca251e1d7c2704861ce5e758e4ff337d
SSDEEP 12288:qXo3+VPNODQ/zDuXUE3bc6vf6Sk42buEkB2yU5F3v:yMEO8/vxELc6vf6yjLwyUPv
MD5 SHA1 SHA512 SSDEEP

android

Patched UPX-packed file

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

com.example.navigationsdk

9b50b6b2976147f2485bc79f13f94c91_JaffaCakes118

amap_resource1_0_0.png

autonavi_Resource1_1_0.png

.WelcomeActivity

com.amap.api.navi.AmapRouteActivity

.GPSNaviActivity

com.amap.api.location.APSService

com.example.navigationsdk.MockReceiver

Sharing

Errors

General

Malware Config

Signatures

File Explorer

9b50b6b2976147f2485bc79f13f94c91_JaffaCakes118

amap_resource1_0_0.png

autonavi_Resource1_1_0.png

.WelcomeActivity

com.amap.api.navi.AmapRouteActivity

.GPSNaviActivity

com.amap.api.location.APSService

com.example.navigationsdk.MockReceiver