9fb502f594d26b00a1a35ccb897d617b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

Reason

could not process APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

Reason

could not process APK: invalid header size: 0

Reason

could not process APK: invalid header size: 0

Reason

could not process APK: invalid header size: 0

Reason

could not process APK: invalid header size: 0

Reason

could not process APK: invalid header size: 0

Reason

could not process APK: invalid header size: 0

General

Target

9fb502f594d26b00a1a35ccb897d617b_JaffaCakes118
Size

26.3MB
MD5

9fb502f594d26b00a1a35ccb897d617b
SHA1

fa7598ca79a48e7aac446108b4bab3ff9a51945b
SHA256

de9a1ea18d6d09bd0dacfb842a8aab212dec1e7447b0f01419b7b3e655e69c10
SHA512

08e8e7e47ed81579e5d8669dc0ab0b5f9922fb3d2dc3bb2eba37d086d90cad6fca0bfed5f7d9e1239e54db1e562f267b68dd0f77cd243ac49dcb8783cc841e6c
SSDEEP

786432:krxvTf/G/4fI8ZdCG8NYT1CrtpMq46nvuF:krFno4oG9T1ytOq46vA

Score

8^/10

upx

Malware Config

Signatures

Patched UPX-packed file 2 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx
sample	patched_upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx
sample	upx

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

9fb502f594d26b00a1a35ccb897d617b_JaffaCakes118
.apk android arch:arm
amap_resource1_0_0.png
.apk android

com.example.amapsdkv2
autonavi_Resource1_1_0.png
.apk android

com.example.navigationsdk

.WelcomeActivity

Activities

.WelcomeActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE

Receivers

com.example.navigationsdk.MockReceiver

com.navi.mockgps

Services
business.apk
.apk android

com.business

com.business.ui.MyRechargeActivity

Activities
dex_xg.jar
.apk android
help.apk
.apk android

com.help

com.help.ui.ActiveCenterActivity

Activities

Permissions

android.permission.CALL_PHONE
jjc.apk
.apk android

com.jjc

com.jjc.jczq.ui.JczqChooseActivity

Activities
main.apk
.apk android arch:arm arch:mips arch:x86

com.main

com.main.ui.HomeFragmentActivity

Activities

Permissions

android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
other.apk
.apk android

com.other

com.other.common.ui.BuySuccessActivity

Activities

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
szc.apk
.apk android

com.szc

com.szc.pl3.ui.Pl3ChooseActivity

Activities

Sharing

Errors

General

Malware Config

Signatures

Files

com.example.amapsdkv2

com.example.navigationsdk

.WelcomeActivity

Activities

.WelcomeActivity

Permissions

Receivers

com.example.navigationsdk.MockReceiver

Services

com.business

com.business.ui.MyRechargeActivity

Activities

com.help

com.help.ui.ActiveCenterActivity

Activities

Permissions

com.jjc

com.jjc.jczq.ui.JczqChooseActivity

Activities

com.main

com.main.ui.HomeFragmentActivity

Activities

Permissions

com.other

com.other.common.ui.BuySuccessActivity

Activities

Permissions

com.szc

com.szc.pl3.ui.Pl3ChooseActivity

Activities