a349c115a14d3294f702ddd4e385b0b1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a349c115a14d3294f702ddd4e385b0b1_JaffaCakes118
Size 14.4MB
Sample240613-be61gsybph
SHA256 ebca60a516d029b3c9961e5a370a1cd1d4d3264876a6e11382211c92afd1ee8d
MD5 a349c115a14d3294f702ddd4e385b0b1
SHA1 e26333c5f513ad4fe6301ec2919dcf0006ed6af7
SHA512 d7db2ef99ddbdab9fbc9df6cbc6c4d5c2425f4acfc78fae006ee914ea1e5ce8a372b6188c6b434b35f46fa7cc8390cc7c5f1cd01414039142adde87ea0fd4ab8
SSDEEP 196608:jYds2EsicJZtdV47x5bOeEH3CYL3l29/lf3uDV193gH5AkX7J3neYMP455c/Qpef:psicJZqdkDSYL34lvuDT934Pqd+YlNx
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

a349c115a14d3294f702ddd4e385b0b1_JaffaCakes118

.apk 14.4MB
autonavi_Resource1_1_0.png

.apk 212KB

a349c115a14d3294f702ddd4e385b0b1_JaffaCakes118

SHA256 ebca60a516d029b3c9961e5a370a1cd1d4d3264876a6e11382211c92afd1ee8d
MD5 a349c115a14d3294f702ddd4e385b0b1
SHA1 e26333c5f513ad4fe6301ec2919dcf0006ed6af7
SHA512 d7db2ef99ddbdab9fbc9df6cbc6c4d5c2425f4acfc78fae006ee914ea1e5ce8a372b6188c6b434b35f46fa7cc8390cc7c5f1cd01414039142adde87ea0fd4ab8
SSDEEP 196608:jYds2EsicJZtdV47x5bOeEH3CYL3l29/lf3uDV193gH5AkX7J3neYMP455c/Qpef:psicJZqdkDSYL34lvuDT934Pqd+YlNx
MD5 SHA1 SHA512 SSDEEP

android arch:arm

ccj.yun28.com

android.permission.SYSTEM_ALERT_WINDOW android.permission.INTERNET android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_FINE_LOCATION android.permission.READ_PHONE_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_WIFI_STATE android.permission.WAKE_LOCK android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.CHANGE_CONFIGURATION android.permission.INTERNET android.permission.WAKE_LOCK android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.WRITE_SETTINGS android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.GET_ACCOUNTS android.permission.MANAGE_ACCOUNTS android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.GET_TASKS android.permission.INTERNET android.permission.CALL_PHONE android.permission.CHANGE_NETWORK_STATE android.permission.INTERNET android.permission.VIBRATE android.permission.CAMERA android.permission.CALL_PHONE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.FLASHLIGHT android.permission.CAMERA android.permission.WAKE_LOCK android.permission.GET_TOP_ACTIVITY_INFO

ccj.yun28.com.WelcomeActivity

android.intent.action.MAIN

com.qihoo.util.StartActivity

android.intent.action.MAIN

com.qihoo.util.appupdate.AppUpdateActivity

com.qihoo.util.CommonActivity

com.mob.tools.MobUIShell

ccj.yun28.com.wxapi.WXEntryActivity

ccj.yun28.com.wxapi.WXPayEntryActivity

ccj.yun28.com.LoginActivity

ccj.yun28.com.GuideActivity

ccj.yun28.com.MainActivity

ccj.yun28.com.MainActivity1

ccj.yun28.com.ZhuCeActivity

ccj.yun28.com.ForgetMMActivity

ccj.yun28.com.PhoneYZActivity

ccj.yun28.com.SetMMActivity

ccj.yun28.com.RZPhoneActivity

ccj.yun28.com.FindPasswordActivtiy

ccj.yun28.com.MMRegistActivity

ccj.yun28.com.sy.SearchActivity

ccj.yun28.com.view.WebviewActivity

ccj.yun28.com.sy.SaoYiSaoActivity

ccj.yun28.com.sy.FenleiActivity

ccj.yun28.com.sy.MessageActivcity

ccj.yun28.com.sy.WuLiuActivity

ccj.yun28.com.sy.TongZhiActivity

ccj.yun28.com.sy.HuodongActivity

ccj.yun28.com.sy.MessageEveryDetailActivtiy

ccj.yun28.com.sy.ProductDetailActivity

ccj.yun28.com.sy.YqzcActivity

ccj.yun28.com.sy.SearchProductResultActivity

ccj.yun28.com.sy.SearchShopResultActivity

ccj.yun28.com.sy.SearchCCQResultActivity

ccj.yun28.com.ccq.AllPinjiaActivtiy

ccj.yun28.com.ccq.CCQStoreDetailActivity

ccj.yun28.com.mine.ZhifuSuccessActivity

ccj.yun28.com.ccq.ChooseCityActivity

ccj.yun28.com.ccq.CcqProDetailActivity

ccj.yun28.com.sy.BuyZKJActivity

ccj.yun28.com.ccq.CcqShouYinTaiActivity

ccj.yun28.com.ccq.CcqTagDetailActivity

ccj.yun28.com.ccq.XfmdAcyiviy

ccj.yun28.com.ccq.XfmdShouYinTaiActivity

ccj.yun28.com.gwc.TianxieDindanActivity

ccj.yun28.com.gwc.GwcShouYinTaiActivity

ccj.yun28.com.gwc.FaPiaoInfoActivity

ccj.yun28.com.mine.MyAddressActivity

ccj.yun28.com.mine.AddAdressActivity

ccj.yun28.com.mine.AllDinDanActivtiy

ccj.yun28.com.mine.Mine_Dindan_TianxieDindanActivity

ccj.yun28.com.mine.Mine_DinDan_BuyZKJActivity

ccj.yun28.com.mine.ChaKanWuLiuActivity

ccj.yun28.com.mine.ChaKanJuanMaActivity

ccj.yun28.com.mine.QuPingJiaActivity

ccj.yun28.com.mine.XSQuPingJiaActivity

ccj.yun28.com.mine.ProDetailXSQuPingJiaActivity

ccj.yun28.com.mine.XiaofeiMaidanDetailActivity

ccj.yun28.com.mine.TuiKuanDinDanDetailActivity

ccj.yun28.com.mine.SettingActivtiy

ccj.yun28.com.mine.SettingInfoActivtiy

ccj.yun28.com.mine.NichengActivity

ccj.yun28.com.mine.AboutWeActivtiy

ccj.yun28.com.mine.ChooseShengShiQuActicity

ccj.yun28.com.mine.ZhangHuAndSafeActivtiy

ccj.yun28.com.mine.LoginMiMaActivity

ccj.yun28.com.mine.SetLoginmimaActivity

ccj.yun28.com.mine.ShezhiPayMiMaActivity

ccj.yun28.com.mine.SetPaymimaActivity

ccj.yun28.com.mine.XiuGaiPayMiMaActivity

ccj.yun28.com.mine.WangJiPayMiMaActivity

ccj.yun28.com.mine.FindPayPasswordActivtiy

ccj.yun28.com.mine.XiuGaiZhiFuMiMaActivity

ccj.yun28.com.mine.ShiMingRenZhengActivity

ccj.yun28.com.mine.WeiShiMingRenZhengActivity

ccj.yun28.com.mine.PhoneRenZhengActivity

ccj.yun28.com.mine.BindPhoneActivtiy

ccj.yun28.com.mine.VIPhuiyuanActivity

ccj.yun28.com.mine.BuyVIPShouYinTaiActivtity

ccj.yun28.com.mine.YunBiDuiHuanVIPActivity

ccj.yun28.com.mine.YunBiShouYingTaiActivity

ccj.yun28.com.mine.MyWalletActivity

ccj.yun28.com.mine.YunBiORYuEDetailActivity

ccj.yun28.com.mine.YongjinDetailActivity

ccj.yun28.com.mine.BankCardActivity

ccj.yun28.com.mine.AddBankCardActivity

ccj.yun28.com.mine.TiXianActivity

ccj.yun28.com.mine.BankCardListActivity

ccj.yun28.com.mine.TiXianRecordActivity

ccj.yun28.com.mine.TiXianTecordDetailActivtiy

ccj.yun28.com.mine.ProblemActivity

ccj.yun28.com.mine.YiJianFanKuiActivity

ccj.yun28.com.mine.OpenStoreActivtiy

ccj.yun28.com.mine.DFKDinDanActivtiy

ccj.yun28.com.mine.DSHDinDanActivtiy

ccj.yun28.com.mine.DSYDinDanActivtiy

ccj.yun28.com.mine.DPJDinDanActivtiy

ccj.yun28.com.mine.TKSHDinDanActivtiy

ccj.yun28.com.mine.CCQDinDanDetailActivity

ccj.yun28.com.mine.TuikuanTuihuoActivity

ccj.yun28.com.mine.AddBankCardWRZActivity

ccj.yun28.com.DaohangActivity

ccj.yun28.com.BindPhoneActivtiy

com.amap.location.demo.Alarm_Location_Activity

com.amap.location.demo.Assistant_Location_Activity

com.amap.location.demo.CheckPermissionsActivity

com.amap.location.demo.ErrorCode_Activity

com.amap.location.demo.GeoFence_Activity

com.amap.location.demo.LastLocation_Activity

com.amap.location.demo.Location_Activity

com.amap.location.demo.StartActivity

com.amap.location.demo.Tools_Activity

com.alipay.sdk.pay.demo.H5PayDemoActivity

com.amap.location.navi.GPSNaviActivity

Android Permissions

a349c115a14d3294f702ddd4e385b0b1_JaffaCakes118

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.CAMERA

android.permission.CALL_PHONE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.FLASHLIGHT

android.permission.CAMERA

android.permission.WAKE_LOCK

android.permission.GET_TOP_ACTIVITY_INFO