a6eaf84475925f4153205f25ebf2c7b1_JaffaCakes118

General

Target
a6eaf84475925f4153205f25ebf2c7b1_JaffaCakes118
Size 5.0MB
Sample240613-2h2s2stand
SHA256 7bd2eb8813be48062ee42adf29bbb26931e8a90c3ed83a3934f0494f2f75722a
MD5 a6eaf84475925f4153205f25ebf2c7b1
SHA1 30e553c05d0dfe983f7fb1d35b3692df3e76096a
SHA512 66127481adbe5373567930db79e1df097cbcf5220bacc9923482a3e8a72a896ccc88a1cec3719504ab97a399e54f9e558eab61a5964141db58a85390a90f1257
SSDEEP 98304:oJKd9J567myhtE+xg7QQ+8JvwbQDYcfWN0fhH3huSHeuQg0mx01wmAnzLqMuOnTn:LLyhGPqiDYcfW6NhuZPgVxfmSqMJnL3
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

a6eaf84475925f4153205f25ebf2c7b1_JaffaCakes118

.apk 5.0MB
eventservice.jar

.apk 218KB

a6eaf84475925f4153205f25ebf2c7b1_JaffaCakes118

SHA256 7bd2eb8813be48062ee42adf29bbb26931e8a90c3ed83a3934f0494f2f75722a
MD5 a6eaf84475925f4153205f25ebf2c7b1
SHA1 30e553c05d0dfe983f7fb1d35b3692df3e76096a
SHA512 66127481adbe5373567930db79e1df097cbcf5220bacc9923482a3e8a72a896ccc88a1cec3719504ab97a399e54f9e558eab61a5964141db58a85390a90f1257
SSDEEP 98304:oJKd9J567myhtE+xg7QQ+8JvwbQDYcfWN0fhH3huSHeuQg0mx01wmAnzLqMuOnTn:LLyhGPqiDYcfW6NhuZPgVxfmSqMJnL3
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.namcmbmpmemnjgji.dadaofuzhuworld

Android Permissions

a6eaf84475925f4153205f25ebf2c7b1_JaffaCakes118

Permissions

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

a6eaf84475925f4153205f25ebf2c7b1_JaffaCakes118

com.cyjh.elfin.activity.MainActivity

com.umeng.update.UpdateDialogActivity

com.cyjh.ad.activity.WebActivity

com.cyjh.ad.activity.RootCourseActivity

com.cyjh.elfin.activity.SettingActivity

com.cyjh.elfin.activity.ScriptLogActivity

com.cyjh.elfin.activity.ScriptLogDetailActivity

com.cyjh.mobileanjian.input.inputkb

com.cyjh.elfin.services.PhoneStateService

com.umeng.common.net.DownloadingService

com.cyjh.mobileanjian.ipc.LocalServerService

com.cyjh.library.download.services.DownloadService

com.cyjh.ad.receiver.DownLoadCompleteReceiver

eventservice.jar

Sharing

General

Malware Config

Signatures

File Explorer

a6eaf84475925f4153205f25ebf2c7b1_JaffaCakes118

com.cyjh.elfin.activity.MainActivity

com.umeng.update.UpdateDialogActivity

com.cyjh.ad.activity.WebActivity

com.cyjh.ad.activity.RootCourseActivity

com.cyjh.elfin.activity.SettingActivity

com.cyjh.elfin.activity.ScriptLogActivity

com.cyjh.elfin.activity.ScriptLogDetailActivity

com.cyjh.mobileanjian.input.inputkb

com.cyjh.elfin.services.PhoneStateService

com.umeng.common.net.DownloadingService

com.cyjh.mobileanjian.ipc.LocalServerService

com.cyjh.library.download.services.DownloadService

com.cyjh.ad.receiver.DownLoadCompleteReceiver

eventservice.jar

Android Permissions

a6eaf84475925f4153205f25ebf2c7b1_JaffaCakes118