9e95b5d42f3fcdf2856c8417092af4f7_JaffaCakes118

General

Target
9e95b5d42f3fcdf2856c8417092af4f7_JaffaCakes118
Size 27.2MB
Sample240611-sdnaes1gpj
SHA256 679b9c419e4c72f51149e8b94f5e387977ac79081c2b27ad1c1964333307a26b
MD5 9e95b5d42f3fcdf2856c8417092af4f7
SHA1 6bd061b30ac1e11fad04384d1955ea0319f3f6a1
SHA512 bc8c76288d0260c7238ab52902862b4017cf29bb040fde952cb67f6ec56f3ee1d4773cb55a1ffed1c7915d0ed7e0b0bccec1c02bf5eb3bf575989e13f1d8d120
SSDEEP 786432:DksrIxLFGEPGirW66cFtkizN9VlCAfqR9+KbCMsctXds:DBrYh/7z6ktkizNvMf9+K+oU
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

9e95b5d42f3fcdf2856c8417092af4f7_JaffaCakes118

.apk 27.2MB
alipay_plugin.apk

.apk 354KB
pro.jar

.apk 338KB

9e95b5d42f3fcdf2856c8417092af4f7_JaffaCakes118

SHA256 679b9c419e4c72f51149e8b94f5e387977ac79081c2b27ad1c1964333307a26b
MD5 9e95b5d42f3fcdf2856c8417092af4f7
SHA1 6bd061b30ac1e11fad04384d1955ea0319f3f6a1
SHA512 bc8c76288d0260c7238ab52902862b4017cf29bb040fde952cb67f6ec56f3ee1d4773cb55a1ffed1c7915d0ed7e0b0bccec1c02bf5eb3bf575989e13f1d8d120
SSDEEP 786432:DksrIxLFGEPGirW66cFtkizN9VlCAfqR9+KbCMsctXds:DBrYh/7z6ktkizNvMf9+K+oU
MD5 SHA1 SHA512 SSDEEP

android arch:mips arch:arm

cn.kk.xyj.p44755_360_1

alipay_plugin.apk

SHA256 e86f24838e0aa5527adf3d129652bf70b67990989bf7e8c8d61c3356231ce1ac
MD5 7b3353b143078dbafd37485f8136728e
SHA1 f2d312754bb2c4854849381997561d09a90b4fb9
SHA512 0f326957abeebaed130da1f6ec7a53de5dd9671d6ae7d975f2b6172af4c323df81efd0f6d4b8a1e4197d5dd35d4419c658f1c936a404bbf9d7e73ee71a5e06f8
SSDEEP 6144:Iv8DL7okgHi/BBs3dWcfihtB7+Y3Ju4g2Tf5C8EcPK+WvyQcy2fny43:Iv67gC/BBsNWfh3VcG5CLE8Rcy2fny43
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.alipay.android.app

Android Permissions

9e95b5d42f3fcdf2856c8417092af4f7_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.VIBRATE

9e95b5d42f3fcdf2856c8417092af4f7_JaffaCakes118

cn.kk.xyj.XiYouJiLoaderActivity

cn.kk.xyj.GameActivity

com.qihoopay.insdk.activity.ContainerActivity

com.qihoopp.qcoinpay.QcoinActivity

com.qihoopay.insdk.activity.RemoteContainerActivity

cn.paypalm.jar.game360.InitialAct

cn.paypalm.jar.game360.UserMessageAct

cn.paypalm.jar.game360.BankcardPayAct

cn.paypalm.jar.game360.SuccessAct

cn.paypalm.jar.game360.BankcardAgreement

alipay_plugin.apk

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

.stability.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

.UserIdShareProvider

pro.jar

Sharing

General

Malware Config

Signatures

File Explorer

9e95b5d42f3fcdf2856c8417092af4f7_JaffaCakes118

cn.kk.xyj.XiYouJiLoaderActivity

cn.kk.xyj.GameActivity

com.qihoopay.insdk.activity.ContainerActivity

com.qihoopp.qcoinpay.QcoinActivity

com.qihoopay.insdk.activity.RemoteContainerActivity

cn.paypalm.jar.game360.InitialAct

cn.paypalm.jar.game360.UserMessageAct

cn.paypalm.jar.game360.BankcardPayAct

cn.paypalm.jar.game360.SuccessAct

cn.paypalm.jar.game360.BankcardAgreement

alipay_plugin.apk

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

.stability.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

.UserIdShareProvider

pro.jar

Android Permissions

9e95b5d42f3fcdf2856c8417092af4f7_JaffaCakes118