a0e2385e596db456cc3140e95579eeda_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a0e2385e596db456cc3140e95579eeda_JaffaCakes118
Size 3.1MB
Sample240612-q4vfbaxcmd
SHA256 a3ed27e5b81b8c35d3b75be46f88dfbb3326d63e3f2c2523a3c2b3e9ae8c940b
MD5 a0e2385e596db456cc3140e95579eeda
SHA1 3ec8b0a16dda6a84c5f0f02ff1d16c3d6329796e
SHA512 98fbad49bb000fe4dc288438c1e81ee76a11790862a1a37968047cd92670c918dcb59a04abc46647fa23b9f2bc79de9fc0ae9796ed14e524776a09839ba03d26
SSDEEP 98304:5VR65qoeMHCPbXeMiMq/gOQn+icIWUfH4:4znOCMigOQPcOH4
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers.	android.permission.BIND_WALLPAPER

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

a0e2385e596db456cc3140e95579eeda_JaffaCakes118

.apk 3.1MB
appinfo.apk

.apk 4KB
appstart.apk

.apk 2KB
container.apk

.apk 45KB
device.apk

.apk 2KB
jiffiesinfo.apk

.apk 4KB
location.apk

.apk 2KB
wifiinfo.apk

.apk 3KB

a0e2385e596db456cc3140e95579eeda_JaffaCakes118

SHA256 a3ed27e5b81b8c35d3b75be46f88dfbb3326d63e3f2c2523a3c2b3e9ae8c940b
MD5 a0e2385e596db456cc3140e95579eeda
SHA1 3ec8b0a16dda6a84c5f0f02ff1d16c3d6329796e
SHA512 98fbad49bb000fe4dc288438c1e81ee76a11790862a1a37968047cd92670c918dcb59a04abc46647fa23b9f2bc79de9fc0ae9796ed14e524776a09839ba03d26
SSDEEP 98304:5VR65qoeMHCPbXeMiMq/gOQn+icIWUfH4:4znOCMigOQPcOH4
MD5 SHA1 SHA512 SSDEEP

android

com.xxy.sbiz.GCXMT

Android Permissions

a0e2385e596db456cc3140e95579eeda_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

android.permission.INTERNET

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WRITE_SETTINGS

a0e2385e596db456cc3140e95579eeda_JaffaCakes118

com.kgy.airli.CaoTabActivity

com.kgy.airli.MainActivity

com.kgy.airli.SetLockActivity

com.kgy.airli.SetWallActivity

com.kgy.airli.BgManagerActivity

com.kgy.airli.UnLockActivity

com.kgy.airli.LockCutActivity

com.xxy.sbiz.GCXMT.rjs.vyhu

com.xxy.sbiz.GCXMT.ngsn.aiec

com.xxy.sbiz.GCXMT.ljfky.tgscj

com.xxy.sbiz.GCXMT.ljfky.iesx

neo.proxy.ToolActivity

com.kgy.airli.LockService

com.kgy.airli.WallpaperService

com.xxy.sbiz.GCXMT.rjs.tzqo

com.xxy.sbiz.GCXMT.ngsn.omhk

com.xxy.sbiz.GCXMT.ngsn.igxt

com.xxy.sbiz.GCXMT.ljfky.vwn

com.xxy.sbiz.GCXMT.ljfky.myxm

neo.proxy.FastService

com.kgy.airli.LockScreen

com.kgy.airli.MyBootReceiver

com.xxy.sbiz.GCXMT.rjs.ocfe

com.xxy.sbiz.GCXMT.ngsn.dfpt

com.xxy.sbiz.GCXMT.ljfky.kjd

neo.proxy.DistributeReceiver

appinfo.apk

appstart.apk

container.apk

device.apk

jiffiesinfo.apk

location.apk

wifiinfo.apk