a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118

General

Target
a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118
Size 14.4MB
Sample240612-23c1esvakd
SHA256 3b29e976d0dafd8a345b065ead443b565e53b7f36878c4c02dea55a0fd5d0142
MD5 a2d8b4867d0f5cee7b49824f89dba6de
SHA1 50cc7bc0adbfaad7d2ae3dd22e088fcb80479a08
SHA512 2d67e8e6b2a46d098545973f21c6553cceeca10b4624a84e359958467af7d5b258903f384c5af2a866fbd423bd3083528edc5ad265e0f6180ef83640e490d831
SSDEEP 393216:CXS1mRS7IY7JbZ9vJZhzcwucvSa6YHWKpBT5Oh5qYWRPK:hm3ib3JZhoce1KH5OhK0
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118

.apk 14.4MB
alipay_plugin_20120428msp.apk

.apk 286KB
laizi_hall.apk

.apk 765KB

a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118

SHA256 3b29e976d0dafd8a345b065ead443b565e53b7f36878c4c02dea55a0fd5d0142
MD5 a2d8b4867d0f5cee7b49824f89dba6de
SHA1 50cc7bc0adbfaad7d2ae3dd22e088fcb80479a08
SHA512 2d67e8e6b2a46d098545973f21c6553cceeca10b4624a84e359958467af7d5b258903f384c5af2a866fbd423bd3083528edc5ad265e0f6180ef83640e490d831
SSDEEP 393216:CXS1mRS7IY7JbZ9vJZhzcwucvSa6YHWKpBT5Oh5qYWRPK:hm3ib3JZhoce1KH5OhK0
MD5 SHA1 SHA512 SSDEEP

android arch:arm

net.laizi.pk.tjsdy

alipay_plugin_20120428msp.apk

SHA256 5dab6575a279591032487cd2b8e428f7a90ac8b1fc4eacee245522feba2b2039
MD5 4a89d8a1da67ffb789e71dcced41a691
SHA1 b72bc1d8920ed03c8bfcb8e431169f4508e71976
SHA512 a09342efcabc691c9efdf256c93e3f326d6785c7b2d6c1d4d12dfbdb676f544fcaa08ca373a550faebe3cdab2b5f82781e28cbf5f4779c3905851876eddc95d3
SSDEEP 6144:OV/Mo6jF1cM8qgmgMPE8fRsrYQ0d0ROgE8XF2Q9WDBRa/dEW7BhDJUK:OVWjFiCgxmpsrYQ0uR48XF2Q9W1R1Wlv
MD5 SHA1 SHA512 SSDEEP

android

com.alipay.android.app

laizi_hall.apk

SHA256 32b73cb74a41a58fa7216470095927b72e61d56a4d2b5d31543bbf0692b50302
MD5 4427781152e2e2b93cafca597b986997
SHA1 fe728da7327b284a1bc2b2bc4f8d61583c1317e8
SHA512 b26cd519deb30bb3a1da3b12e72b0c08fd8410c3544f96983d7020c08431505b650fd038a6f06d583889645f6fbbfa4212435121362415188a95112f97eabe8d
SSDEEP 12288:nayJ+leburX50WiOC8h29aWHlBsxt3Ovs5pp0WVvFAgsqhRdPVRHjpRCAiAiesK6:xJ+4bMX5zi+WPsOWFJrdNFbriAx56
MD5 SHA1 SHA512 SSDEEP

android

com.laizi.hall

Android Permissions

a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.webkit.permission.PLUGIN

android.permission.CHANGE_NETWORK_STATE

android.permission.REORDER_TASKS

android.permission.RECEIVE_SMS

cn.swiftpass.wxpay.permission.MMOAUTH_CALLBACK

cn.swiftpass.wxpay.permission.MM_MESSAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CAMERA

android.permission.FLASHLIGHT

xvtian.gai.receiver

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118

.WelcomeActivity

.PhoneMajiongActivity

.FeedbackActivity

.LoginActivity

.ModifyActivity

net.laizi.pk.exchange.ExchangeActivity

com.usershop.PayHallActivity

.AlarmActivity

com.register_try.checkcode.CheckCodeDialog

com.ipaynow.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

com.switfpass.pay.activity.QQWapPayWebView

com.vsofo.smspay.VsofoPayActivity

com.alipay.sdk.app.H5PayActivity

com.ipaynow.wechatpay.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

alipay_plugin_20120428msp.apk

.Cashier

.Alerter

.Welcome

.Updater

.AlixService

.AlixReceiver

laizi_hall.apk

com.laizi.main.Main

com.laizi.broadcast.InstallBroadCast

Sharing

General

Malware Config

Signatures

File Explorer

a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118

.WelcomeActivity

.PhoneMajiongActivity

.FeedbackActivity

.LoginActivity

.ModifyActivity

net.laizi.pk.exchange.ExchangeActivity

com.usershop.PayHallActivity

.AlarmActivity

com.register_try.checkcode.CheckCodeDialog

com.ipaynow.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

com.switfpass.pay.activity.QQWapPayWebView

com.vsofo.smspay.VsofoPayActivity

com.alipay.sdk.app.H5PayActivity

com.ipaynow.wechatpay.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

alipay_plugin_20120428msp.apk

.Cashier

.Alerter

.Welcome

.Updater

.AlixService

.AlixReceiver

laizi_hall.apk

com.laizi.main.Main

com.laizi.broadcast.InstallBroadCast

Android Permissions

a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118