9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118

General

Target

9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118
Size

14.5MB
MD5

9d5b850abc27a065a0668b28b0b46b60
SHA1

84eb8e1aa465ab8f7431d0272fa6fcee5e8feb15
SHA256

0bb0e693cb71c30f88cb90b0fa6b4c43aeb90a3c0c7734edfa5a551ce1b41f81
SHA512

f24850bb18ed0b65823a8716e6fc9d2f8c17d9af1b44394a108b6ef0ba8ddfd506baef2cce915f90bc2c91418d303a1c4d7031f3ff58e0abee6679c0d7109c20
SSDEEP

393216:GcJnNd1vYzSZ6LzMBPol+clxeYjQ/w21T6bcj:tfvtkLAql+clxxiw2a8

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118
.apk android arch:arm

com.xguqb.wid.dvcats

great.judy.game.dtezklyx.AppEntry

Activities

great.judy.game.dtezklyx.AppEntry

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.GET_TASKS
android.permission.ACCESS_COARSE_LOCATION
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

Receivers

com.baidu.appx.app_download.CompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED
android.intent.action.PACKAGE_ADDED

com.baidu.autoupdatesdk.receiver.BDBroadcastReceiver

com.baidu.autoupdatesdk.ACTION_NEW_UPDATE
com.baidu.autoupdatesdk.ACTION_DOWNLOAD_COMPLETE
com.baidu.autoupdatesdk.ACTION_NEW_AS
com.baidu.autoupdatesdk.ACTION_AS_DOWNLOAD_COMPLETE

typ.ccg.xkw.bvtuqsk

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE

Services
__pasys_remote_banner.jar
.apk android

Android Permissions

9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

Sharing

General

Malware Config

Signatures

Files

com.xguqb.wid.dvcats

great.judy.game.dtezklyx.AppEntry

Activities

great.judy.game.dtezklyx.AppEntry

Permissions

Receivers

com.baidu.appx.app_download.CompleteReceiver

com.baidu.autoupdatesdk.receiver.BDBroadcastReceiver

typ.ccg.xkw.bvtuqsk

Services

Android Permissions

9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118