9c72e6cccd1b36a5fd451ab895d27931_JaffaCakes118

General

Target

9c72e6cccd1b36a5fd451ab895d27931_JaffaCakes118
Size

20.4MB
MD5

9c72e6cccd1b36a5fd451ab895d27931
SHA1

d8b9107b4a27ebfceacbc27ca330a3253bbc510d
SHA256

16f35b423632ff1482248a46a6d559e5618e7453314294bac670377782bde6a3
SHA512

ddf61edf6e9bd09487344fa5d1f663bd439ed939b8705677aaf9fe9c50fa38a8edb3bf91cb306c562ff96ed01fe23996ce9d03b17c4e26b489f36c4152ac53b2
SSDEEP

393216:FI8Dq0EpZqti/7u0x0VcZSt/FHpNHy6x2v87TPIkPgirMWPk:a8D+pgyv0+AvJy6x2vm07t

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

9c72e6cccd1b36a5fd451ab895d27931_JaffaCakes118
.apk android arch:arm

com.bzct

com.bzct.dachuan.view.activity.LauncherActivity

Activities

com.bzct.dachuan.view.activity.LauncherActivity

android.intent.action.MAIN

com.bzct.dachuan.view.activity.car.RealTimeCallActivity

com.bzct.dachuan.intent.ACTION_VOICE_CALL
com.bzct.dachuan.intent.ACTION_VIDEO_CALL

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

Permissions

com.bzct.dachuan.permission.RECEIVE_MSG
com.bzct.dachuan.permission.INCOMING_CALL
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.INTERNET
android.permission.CALL_PHONE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECORD_AUDIO
android.permission.GET_TASKS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.DISABLE_KEYGUARD
android.permission.BROADCAST_STICKY
getui.permission.GetuiService.com.bzct

Receivers

com.bzct.dachuan.view.receiver.DownloadReceiver

android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED

com.yuntongxun.ecsdk.booter.CCPReceivers$ConnectionReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.yuntongxun.ecsdk.booter.CCPReceivers$BootReceiver

android.intent.action.BOOT_COMPLETED

com.bzct.dachuan.view.ronglian.YuntxNotifyReceiver

com.bzct.dachuan.action.VOIP_CALL
com.bzct.dachuan.action.MESSAGE
com.bzct.dachuan.action.NOTIFICATION_CLICK
com.bzct.dachuan.action.PERSON_VERSION
com.bzct.dachuan.action.SOFT_UPDATER

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

Services

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

Android Permissions

9c72e6cccd1b36a5fd451ab895d27931_JaffaCakes118

Permissions

com.bzct.dachuan.permission.RECEIVE_MSG

com.bzct.dachuan.permission.INCOMING_CALL

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECORD_AUDIO

android.permission.GET_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.BROADCAST_STICKY

getui.permission.GetuiService.com.bzct

Sharing

General

Malware Config

Signatures

Files

com.bzct

com.bzct.dachuan.view.activity.LauncherActivity

Activities

com.bzct.dachuan.view.activity.LauncherActivity

com.bzct.dachuan.view.activity.car.RealTimeCallActivity

com.tencent.tauth.AuthActivity

com.sina.weibo.sdk.share.WbShareTransActivity

Permissions

Receivers

com.bzct.dachuan.view.receiver.DownloadReceiver

com.yuntongxun.ecsdk.booter.CCPReceivers$ConnectionReceiver

com.yuntongxun.ecsdk.booter.CCPReceivers$BootReceiver

com.bzct.dachuan.view.ronglian.YuntxNotifyReceiver

com.igexin.sdk.PushReceiver

Services

com.igexin.sdk.PushService

Android Permissions

9c72e6cccd1b36a5fd451ab895d27931_JaffaCakes118