9d702c417f9d312c8105aed5fae7aaa2_JaffaCakes118

General

Target
9d702c417f9d312c8105aed5fae7aaa2_JaffaCakes118
Size 4.1MB
Sample240611-jdsepsygke
SHA256 c003b2140ffe4ac54367a42f9a4a2ab96fda3cdf98cab9df82691489cc2b363f
MD5 9d702c417f9d312c8105aed5fae7aaa2
SHA1 e183c200a8339762d5fb64bc82be09271ca0eb26
SHA512 e4a777445d1e09011c7f97312a7747808718c41f16235dc80358fbb5c1cbc8cbea7fa64dba4bc7f5f99d5dfae46c5d7415d68488a835fd1451f88041f3720ca9
SSDEEP 98304:4gBugNZIormAMQes/fsgyVQwK70aWcJ+BmQ1:3FtCAd/ftsQP7zWa+p
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

9d702c417f9d312c8105aed5fae7aaa2_JaffaCakes118

.apk 4.1MB

9d702c417f9d312c8105aed5fae7aaa2_JaffaCakes118

SHA256 c003b2140ffe4ac54367a42f9a4a2ab96fda3cdf98cab9df82691489cc2b363f
MD5 9d702c417f9d312c8105aed5fae7aaa2
SHA1 e183c200a8339762d5fb64bc82be09271ca0eb26
SHA512 e4a777445d1e09011c7f97312a7747808718c41f16235dc80358fbb5c1cbc8cbea7fa64dba4bc7f5f99d5dfae46c5d7415d68488a835fd1451f88041f3720ca9
SSDEEP 98304:4gBugNZIormAMQes/fsgyVQwK70aWcJ+BmQ1:3FtCAd/ftsQP7zWa+p
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.bchtyj.gdht.freegemas

Android Permissions

9d702c417f9d312c8105aed5fae7aaa2_JaffaCakes118

Permissions

android.permission.DISABLE_KEYGUARD

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.SEND_SMS

com.android.launcher.permission.READ_SETTINGS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.RESTART_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CAMERA

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_COARSE_UPDATES

9d702c417f9d312c8105aed5fae7aaa2_JaffaCakes118

com.qihoo.b

com.eloo.mogukaihui.ElooIM

com.qihoo.Face

com.qihoo.a

Sharing

General

Malware Config

Signatures

File Explorer

9d702c417f9d312c8105aed5fae7aaa2_JaffaCakes118

com.qihoo.b

com.eloo.mogukaihui.ElooIM

com.qihoo.Face

com.qihoo.a

Android Permissions

9d702c417f9d312c8105aed5fae7aaa2_JaffaCakes118