a0945f3544d9a3faff2ce88935be9813_JaffaCakes118

General

Target
a0945f3544d9a3faff2ce88935be9813_JaffaCakes118
Size 7.0MB
Sample240612-n3jw3steme
SHA256 bd0a0e4baf97b4f34227ece6a97a592b671b7360a67e50ab3e9d4d91236febf7
MD5 a0945f3544d9a3faff2ce88935be9813
SHA1 2768bfea16764a103461d6eb16cb0570e05dde49
SHA512 f6dd5d01de2bb8f4d419457c2794cd1571b538cedeb3ac330c2e6014ac8979217bbaa0b6a516ad3174d4ba8994eb0ed1bcea95c02b3b3f14ca2a6ebaf84e868b
SSDEEP 196608:24oRTWgu5kMMyAbH0thxpPYU8kahrlIJsy6Re5dCbWjKO:25cgJMMyAT0t9gkyZIJsy6o5wS
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

a0945f3544d9a3faff2ce88935be9813_JaffaCakes118

.apk 7.0MB

a0945f3544d9a3faff2ce88935be9813_JaffaCakes118

SHA256 bd0a0e4baf97b4f34227ece6a97a592b671b7360a67e50ab3e9d4d91236febf7
MD5 a0945f3544d9a3faff2ce88935be9813
SHA1 2768bfea16764a103461d6eb16cb0570e05dde49
SHA512 f6dd5d01de2bb8f4d419457c2794cd1571b538cedeb3ac330c2e6014ac8979217bbaa0b6a516ad3174d4ba8994eb0ed1bcea95c02b3b3f14ca2a6ebaf84e868b
SSDEEP 196608:24oRTWgu5kMMyAbH0thxpPYU8kahrlIJsy6Re5dCbWjKO:25cgJMMyAT0t9gkyZIJsy6o5wS
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

cn.luye.rep

Android Permissions

a0945f3544d9a3faff2ce88935be9813_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.RECORD_AUDIO

android.permission.GET_ACCOUNTS

android.permission.CHANGE_NETWORK_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_CONTACTS

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.FLASHLIGHT

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_USER_PRESENT

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.CAMERA

a0945f3544d9a3faff2ce88935be9813_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

cn.luye.rep.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.igexin.sdk.PushActivity

com.igexin.getuiext.activity.GetuiExtActivity

cn.luye.rep.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

io.dcloud.adapter.io.MiniServerService

com.igexin.sdk.PushService

com.igexin.download.DownloadService

com.igexin.getuiext.service.GetuiExtService

com.baidu.location.f

io.dcloud.feature.apsGt.PushMessageReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.getuiext.service.PayloadReceiver

com.igexin.download.DownloadProvider

Sharing

General

Malware Config

Signatures

File Explorer

a0945f3544d9a3faff2ce88935be9813_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

cn.luye.rep.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.igexin.sdk.PushActivity

com.igexin.getuiext.activity.GetuiExtActivity

cn.luye.rep.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

io.dcloud.adapter.io.MiniServerService

com.igexin.sdk.PushService

com.igexin.download.DownloadService

com.igexin.getuiext.service.GetuiExtService

com.baidu.location.f

io.dcloud.feature.apsGt.PushMessageReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.getuiext.service.PayloadReceiver

com.igexin.download.DownloadProvider

Android Permissions

a0945f3544d9a3faff2ce88935be9813_JaffaCakes118