a07cbab8611892eb2c868b0784ba9f77_JaffaCakes118

General

Target

a07cbab8611892eb2c868b0784ba9f77_JaffaCakes118
Size

31.3MB
MD5

a07cbab8611892eb2c868b0784ba9f77
SHA1

1c1e0a3fa4866b2b0e8ef29d8cec12b511ad77a4
SHA256

568ae2670aa65f367a29f9efbff1cd90e5887e0ba872f5ba3cf869ee8b75c55f
SHA512

341f55e45bb015a116e8bbc041b2792280188167486fd1e5b0e39352279cf9292ffd23bc0e651cd1bd5d3296da1a2ef7f157725da99ac815fa6804ee50a4e399
SSDEEP

786432:KPuYL5SggEMDfvJlfhg+czPldDAYItmx0l8wqPUuEjdWJlfUuSOGWJc:KPBTgZxlfhglXDAe0l8sK38ia

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

a07cbab8611892eb2c868b0784ba9f77_JaffaCakes118
.apk android arch:arm

com.yckj.www.xrjy

com.yckj.www.zhihuijiaoyu.module.StartActivity

Activities

com.yckj.www.zhihuijiaoyu.module.StartActivity

android.intent.action.MAIN

com.umeng.qq.tencent.AuthActivity

android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

org.geometerplus.android.fbreader.error.BookReadingErrorActivity

android.fbreader.action.ERROR

org.geometerplus.android.fbreader.crash.MissingNativeLibraryActivity

android.fbreader.action.CRASH
android.fbreader.action.CRASH

org.geometerplus.android.fbreader.FBReader

android.fbreader.action.VIEW
android.fbreader.action.VIEW
android.intent.action.VIEW
android.fbreader.action.PLUGIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SEARCH
android.fbreader.action.CLOSE
android.fbreader.action.PLUGIN_CRASH

org.geometerplus.android.fbreader.bookmark.BookmarksActivity

android.intent.action.SEARCH
android.fbreader.action.BOOKMARKS

org.geometerplus.android.fbreader.bookmark.EditBookmarkActivity

android.fbreader.action.EDIT_BOOKMARK

org.geometerplus.android.fbreader.bookmark.EditStyleActivity

android.fbreader.action.EDIT_STYLES

org.geometerplus.android.fbreader.preferences.PreferenceActivity

android.intent.action.VIEW
android.fbreader.action.PREFERENCES

Permissions

android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_TASKS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.USE_CREDENTIALS
com.android.launcher.permission.READ_SETTINGS
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTING
android.permission.WRITE_SETTINGS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.VIBRATE
com.google.android.c2dm.permission.RECEIVE
com.yckj.www.xrjy.permission.C2D_MESSAGE
com.yckj.www.xrjy.permission.MIPUSH_RECEIVE
android.permission.RECORD_AUDIO

Receivers

com.hyphenate.chatuidemo.receiver.StartServiceReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.hyphenate.chat.EMGCMBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE

com.hyphenate.chatuidemo.receiver.GCMPushBroadCast

com.hyphenate.sdk.push

com.hyphenate.chat.EMMipushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.hyphenate.chat.EMHWPushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE
com.huawei.android.push.intent.CLICK
com.huawei.intent.action.PUSH_STATE

com.huawei.hms.support.api.push.PushEventReceiver

com.huawei.intent.action.PUSH

com.hyphenate.chat.EMMonitorReceiver

android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT

Services

org.geometerplus.android.fbreader.api.ApiService

android.fbreader.action.API

org.geometerplus.android.fbreader.libraryService.LibraryService

android.fbreader.action.LIBRARY_SERVICE

org.geometerplus.android.fbreader.config.ConfigService

android.fbreader.action.CONFIG_SERVICE

Android Permissions

a07cbab8611892eb2c868b0784ba9f77_JaffaCakes118

Permissions

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.USE_CREDENTIALS

com.android.launcher.permission.READ_SETTINGS

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTING

android.permission.WRITE_SETTINGS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.VIBRATE

com.google.android.c2dm.permission.RECEIVE

com.yckj.www.xrjy.permission.C2D_MESSAGE

com.yckj.www.xrjy.permission.MIPUSH_RECEIVE

android.permission.RECORD_AUDIO

Sharing

General

Malware Config

Signatures

Files

com.yckj.www.xrjy

com.yckj.www.zhihuijiaoyu.module.StartActivity

Activities

com.yckj.www.zhihuijiaoyu.module.StartActivity

com.umeng.qq.tencent.AuthActivity

com.sina.weibo.sdk.share.WbShareTransActivity

org.geometerplus.android.fbreader.error.BookReadingErrorActivity

org.geometerplus.android.fbreader.crash.MissingNativeLibraryActivity

org.geometerplus.android.fbreader.FBReader

org.geometerplus.android.fbreader.bookmark.BookmarksActivity

org.geometerplus.android.fbreader.bookmark.EditBookmarkActivity

org.geometerplus.android.fbreader.bookmark.EditStyleActivity

org.geometerplus.android.fbreader.preferences.PreferenceActivity

Permissions

Receivers

com.hyphenate.chatuidemo.receiver.StartServiceReceiver

com.hyphenate.chat.EMGCMBroadcastReceiver

com.hyphenate.chatuidemo.receiver.GCMPushBroadCast

com.hyphenate.chat.EMMipushReceiver

com.hyphenate.chat.EMHWPushReceiver

com.huawei.hms.support.api.push.PushEventReceiver

com.hyphenate.chat.EMMonitorReceiver

Services

org.geometerplus.android.fbreader.api.ApiService

org.geometerplus.android.fbreader.libraryService.LibraryService

org.geometerplus.android.fbreader.config.ConfigService

Android Permissions

a07cbab8611892eb2c868b0784ba9f77_JaffaCakes118