9b50b6b2976147f2485bc79f13f94c91_JaffaCakes118

Reason

could not process APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target

9b50b6b2976147f2485bc79f13f94c91_JaffaCakes118
Size

23.1MB
MD5

9b50b6b2976147f2485bc79f13f94c91
SHA1

cd23e9ffdabf52e6ae9aed3c5827ead232f8d3f2
SHA256

50c2bcc363d45fc0bfbeb1c4997b85b0e02b0fc60ac4471e3f38a055be4cd080
SHA512

df25efefe8fd397669d1835c8a94a253f34652708dcebd5ceba59ea188c344d4948ef45d8aa570496cfae4abf3d3fc560159e656013b65a142b5f8229c209a58
SSDEEP

393216:OUKmqaL8QgeIe49ee1LQ4XEYIyWMIXkk25CbOpyZQE494tZW0XkoOxeU:POagx71LQ4XEYlWMCGwOpe4oZNXj8eU

Score

8^/10

upx

Patched UPX-packed file 2 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx
sample	patched_upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx
sample	upx

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE