a1c49407e29e2b3a3857ec06fd910912_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a1c49407e29e2b3a3857ec06fd910912_JaffaCakes118
Size 31.1MB
Sample240612-w71dmavfrc
SHA256 c3a970c28d32ce7d7ba0c3c8c464f947b3b74655dbaa76f0c1ee9e1458534d50
MD5 a1c49407e29e2b3a3857ec06fd910912
SHA1 5d6f85aaf1e5d863f1138b2973d62893a48eee2f
SHA512 06cbff4e557e108b6a34e7928c7c85b4dd666f1266a461b1f5d7ab3cf19344766364063f580fc7dff16d228952155b3f27d1abe07d7b2dde41e7f1dd11e89bee
SSDEEP 786432:exvTFzUsMvxC8aEPcRJQwg1Ct6nUyZQmQWDDeT2r:yvdU1QEPQawgQ0UyZQnWDC0
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO

File Explorer

a1c49407e29e2b3a3857ec06fd910912_JaffaCakes118

.apk 31.1MB

a1c49407e29e2b3a3857ec06fd910912_JaffaCakes118

SHA256 c3a970c28d32ce7d7ba0c3c8c464f947b3b74655dbaa76f0c1ee9e1458534d50
MD5 a1c49407e29e2b3a3857ec06fd910912
SHA1 5d6f85aaf1e5d863f1138b2973d62893a48eee2f
SHA512 06cbff4e557e108b6a34e7928c7c85b4dd666f1266a461b1f5d7ab3cf19344766364063f580fc7dff16d228952155b3f27d1abe07d7b2dde41e7f1dd11e89bee
SSDEEP 786432:exvTFzUsMvxC8aEPcRJQwg1Ct6nUyZQmQWDDeT2r:yvdU1QEPQawgQ0UyZQnWDC0
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.miaogou.loan

android.permission.READ_CALL_LOG android.permission.READ_SMS com.miaogou.loan.permission.JPUSH_MESSAGE android.permission.RECEIVE_USER_PRESENT android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.VIBRATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WRITE_SETTINGS android.permission.READ_CONTACTS android.permission.READ_CALENDAR android.permission.WRITE_CALENDAR android.permission.WRITE_CONTACTS android.permission.REQUEST_INSTALL_PACKAGES android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_COARSE_UPDATES android.permission.CHANGE_NETWORK_STATE android.permission.GET_TASKS android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.READ_LOGS android.permission.CALL_PHONE android.permission.SET_DEBUG_APP android.permission.GET_ACCOUNTS android.permission.USE_CREDENTIALS android.permission.MANAGE_ACCOUNTS android.permission.CAMERA android.permission.RECORD_AUDIO android.permission.FLAG_GRANT_READ_URI_PERMISSION com.meizu.flyme.push.permission.RECEIVE com.meizu.c2dm.permission.RECEIVE com.miaogou.loan.push.permission.MESSAGE com.miaogou.loan.permission.C2D_MESSAGE android.permission.BROADCAST_PACKAGE_ADDED android.permission.BROADCAST_PACKAGE_CHANGED android.permission.BROADCAST_PACKAGE_INSTALL android.permission.BROADCAST_PACKAGE_REPLACED android.permission.RESTART_PACKAGES com.miaogou.loan.permission.MIPUSH_RECEIVE android.permission.RECEIVE_BOOT_COMPLETED getui.permission.GetuiService.com.miaogou.loan

com.miaogou.loan.ui.main.activity.SplashActivity

android.intent.action.MAIN

com.miaogou.loan.ui.main.scheme.ui.DispatcherActivity

android.intent.action.VIEW

com.miaogou.loan.ui.main.scheme.ui.GeTuiDispatcherActivity

com.miaogou.loan.ui.main.activity.MainActivity

com.miaogou.loan.ui.usercenter.activity.CheckLoginActivity

com.miaogou.loan.ui.usercenter.activity.ServerErrorActivity

com.miaogou.loan.ui.usercenter.activity.LoginActivity

com.miaogou.loan.ui.usercenter.activity.CoinActivity

com.miaogou.loan.ui.usercenter.activity.SmsActivity

com.miaogou.loan.ui.usercenter.activity.BindCardActivity

com.miaogou.loan.ui.usercenter.activity.SelectBankActivity

com.miaogou.loan.ui.usercenter.activity.RegistActivity

com.miaogou.loan.ui.main.activity.HomeShareActivity

com.miaogou.loan.ui.usercenter.activity.ResetPwdActivity

com.miaogou.loan.ui.usercenter.activity.ResetPwdSmsActivity

com.miaogou.loan.ui.usercenter.activity.FirstLoanActivity

com.miaogou.loan.ui.usercenter.activity.ResetPwdUpdateActivity

com.miaogou.loan.ui.usercenter.activity.LoanUseListActivity

com.miaogou.loan.ui.usercenter.activity.WalletActivity

com.miaogou.loan.ui.main.activity.GuideActivity

com.miaogou.loan.ui.usercenter.activity.PhoneOperatorActivity

com.miaogou.loan.ui.usercenter.activity.MoreInformationActivity

com.miaogou.loan.ui.usercenter.activity.WorkInformationActivity

com.miaogou.loan.ui.usercenter.activity.SetBusinessPwdActivity

com.miaogou.loan.ui.usercenter.activity.FlashSettingsActivity

com.miaogou.loan.ui.usercenter.activity.ConfirmBusinessPwdActivity

com.miaogou.loan.ui.usercenter.activity.ResetOldBusinessPwdActivity

com.miaogou.loan.ui.usercenter.activity.CheckIdentityActivity

com.miaogou.loan.ui.usercenter.activity.FeedBackActivity

com.miaogou.loan.ui.usercenter.activity.SmsOperatorActivity

com.miaogou.loan.ui.usercenter.activity.LoanRecordsActivity

com.miaogou.loan.ui.usercenter.activity.LoanRecordInfoActivity

com.miaogou.loan.ui.usercenter.activity.UrgentLinkmanActivity

com.miaogou.loan.ui.usercenter.activity.CardRepayActivity

com.miaogou.loan.ui.repayment.activity.RepaymentExtensionActivity

com.miaogou.loan.ui.usercenter.activity.LocationActivity

com.miaogou.loan.ui.main.activity.NavigationActivity

com.miaogou.loan.ui.main.activity.GuideH5Activity

com.miaogou.loan.ui.usercenter.activity.UserLoadH5Activity

com.miaogou.loan.ui.main.activity.MessageListActivity

com.miaogou.loan.ui.usercenter.activity.KeFuActivity

com.miaogou.loan.ui.usercenter.activity.BindCardStep1Activity

com.miaogou.loan.ui.usercenter.activity.BindCardStep2Activity

com.miaogou.loan.ui.repayment.activity.PayRedPacketActivity

com.miaogou.loan.ui.repayment.activity.ImagePickerActivity

com.lzy.imagepicker.ui.ImagePreviewDelActivity

com.miaogou.loan.ui.usercenter.activity.AuthenticationActivity

com.miaogou.loan.wxapi.WXEntryActivity

com.miaogou.loan.wxapi.WXPayEntryActivity

com.umeng.qq.tencent.AuthActivity

android.intent.action.VIEW

com.umeng.qq.tencent.AssistActivity

com.miaogou.loan.wxapi.WBShareActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.megvii.livenesslib.LivenessActivity

com.megvii.idcardlib.IDCardScanActivity

com.megvii.demo.BankCardScanActivity

com.miaogou.loan.ui.usercenter.activity.BankManagerActivity

com.miaogou.loan.ui.usercenter.activity.BankDetailActivity

com.miaogou.loan.ui.usercenter.activity.BankSortActivity

com.miaogou.loan.ui.usercenter.activity.ConfirmBankActivity

com.miaogou.loan.ui.repayment.activity.RepayModeH5Activity

com.miaogou.loan.ui.usercenter.activity.UpQuotaActivity

com.miaogou.loan.ui.usercenter.activity.CompleteAuthActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

com.miaogou.loan.ui.usercenter.activity.ChooseVocationActivity

com.miaogou.loan.ui.usercenter.activity.JDAuthenActivity

com.miaogou.loan.ui.usercenter.activity.OrderActivity

com.miaogou.loan.ui.usercenter.activity.RedPacketActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.miaogou.loan.ui.main.activity.RejectH5Activity

com.miaogou.loan.ui.usercenter.activity.JxlAuthenticationActivity

com.miaogou.loan.ui.usercenter.activity.ZhiMaFenActivity

com.miaogou.loan.ui.usercenter.activity.NewChooseVocationActivity

com.miaogou.loan.ui.usercenter.activity.ResetOperatorPasswordActivity

cn.udesk.activity.UdeskHelperActivity

cn.udesk.activity.UdeskHelperArticleActivity

cn.udesk.activity.UdeskRobotActivity

cn.udesk.activity.UdeskFormActivity

cn.udesk.activity.UdeskChatActivity

cn.udesk.activity.UdeskZoomImageActivty

cn.udesk.activity.UdeskOptionsAgentGroupActivity

cn.udesk.activity.UdeskWebViewUrlAcivity

cn.udesk.photoselect.PhotoSelectorActivity

cn.udesk.photoselect.PreviewActivity

cn.udesk.photoselect.PictureVideoPlayActivity

cn.udesk.camera.UdeskCameraActivity

com.lzy.imagepicker.ui.ImageBaseActivity

com.lzy.imagepicker.ui.ImageGridActivity

com.lzy.imagepicker.ui.ImageCropActivity

com.lzy.imagepicker.ui.ImagePreviewActivity

com.huawei.android.hms.agent.common.HMSAgentActivity

com.huawei.hms.activity.BridgeActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.miaogou.loan.service.MainIntentService

com.miaogou.loan.service.MainPushService

com.igexin.sdk.OppoPushService

com.coloros.mcs.action.RECEIVE_MCS_MESSAGE

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER cn.jpush.android.intent.REPORT cn.jpush.android.intent.PushService cn.jpush.android.intent.PUSH_TIME

cn.jpush.android.service.DaemonService

cn.jpush.android.intent.DaemonService

cn.jpush.android.service.DownloadService

com.miaogou.loan.hotfix.service.HotFixResultService

com.amap.api.location.APSService

com.miaogou.loan.ui.usercenter.widget.ContactsService

com.miaogou.loan.utils.UploadInfoService

com.juxinli.normandy.service.MediaPlayerService

com.juxinli.normandy.service.MonitorAppService

com.juxinli.ai.service.ImageScannerService

com.miaogou.loan.ui.usercenter.widget.InsertContactsService

com.tencent.tinker.lib.service.TinkerPatchService

com.tencent.tinker.lib.service.TinkerPatchService$InnerService

com.tencent.tinker.lib.service.DefaultTinkerResultService

com.liulishuo.filedownloader.services.FileDownloadService$SharedMainProcessService

com.liulishuo.filedownloader.services.FileDownloadService$SeparateProcessService

com.meizu.cloud.pushsdk.NotificationService

com.xiaomi.mipush.sdk.PushMessageHandler

com.xiaomi.mipush.sdk.MessageHandleService

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

com.miaogou.loan.hotfix.listener.MyPatchListener$ScreenBroadcastReceiver

cn.jpush.android.service.AlarmReceiver

com.miaogou.loan.jpush.JPushReceiver

cn.jpush.android.intent.REGISTRATION cn.jpush.android.intent.MESSAGE_RECEIVED cn.jpush.android.intent.NOTIFICATION_RECEIVED cn.jpush.android.intent.NOTIFICATION_OPENED cn.jpush.android.intent.CONNECTION

com.igexin.sdk.HmsPushReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE com.huawei.android.push.intent.CLICK com.huawei.intent.action.PUSH_STATE

com.huawei.hms.support.api.push.PushEventReceiver

com.huawei.intent.action.PUSH

com.meizu.cloud.pushsdk.SystemReceiver

com.meizu.cloud.pushservice.action.PUSH_SERVICE_START

com.igexin.sdk.FlymePushReceiver

com.meizu.flyme.push.intent.MESSAGE com.meizu.flyme.push.intent.REGISTER.FEEDBACK com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK com.meizu.c2dm.intent.REGISTRATION com.meizu.c2dm.intent.RECEIVE

com.igexin.sdk.MiuiPushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.MESSAGE_ARRIVED com.xiaomi.mipush.ERROR

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT com.igexin.sdk.action.refreshls android.intent.action.MEDIA_MOUNTED android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

Android Permissions

a1c49407e29e2b3a3857ec06fd910912_JaffaCakes118

Permissions

android.permission.READ_CALL_LOG

android.permission.READ_SMS

com.miaogou.loan.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_SETTINGS

android.permission.READ_CONTACTS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.WRITE_CONTACTS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_UPDATES

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.READ_LOGS

android.permission.CALL_PHONE

android.permission.SET_DEBUG_APP

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.FLAG_GRANT_READ_URI_PERMISSION

com.meizu.flyme.push.permission.RECEIVE

com.meizu.c2dm.permission.RECEIVE

com.miaogou.loan.push.permission.MESSAGE

com.miaogou.loan.permission.C2D_MESSAGE

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

com.miaogou.loan.permission.MIPUSH_RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED

getui.permission.GetuiService.com.miaogou.loan