a39ba784d01cdf8249725378980ecc8b_JaffaCakes118

General

Target
a39ba784d01cdf8249725378980ecc8b_JaffaCakes118
Size 10.3MB
Sample240613-dgkldasbmf
SHA256 6ee38aa423f97e16a3c0e5d25520c6f96967fe30029278759eeb8e1534363da6
MD5 a39ba784d01cdf8249725378980ecc8b
SHA1 8331f41d1d33c4d8851fd3726a4d266596966458
SHA512 0e066254f77c88b8fe04617cf55aa3395eacbbd52ded13a5ce7f95a267e7345c582b4f2c750e251d58a8f3b6b0a6f07e2ce051af1460dde5146dc6a38684d5cf
SSDEEP 196608:SlYic0hiyvQ9mHrXh9cdQCTiVoeXphP/YVpiMFoLGLpNASZQNL/tq+3e:oMgQkX3cdhTiOIphPqpFFoLo3QNL1U
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

a39ba784d01cdf8249725378980ecc8b_JaffaCakes118

.apk 10.3MB

a39ba784d01cdf8249725378980ecc8b_JaffaCakes118

SHA256 6ee38aa423f97e16a3c0e5d25520c6f96967fe30029278759eeb8e1534363da6
MD5 a39ba784d01cdf8249725378980ecc8b
SHA1 8331f41d1d33c4d8851fd3726a4d266596966458
SHA512 0e066254f77c88b8fe04617cf55aa3395eacbbd52ded13a5ce7f95a267e7345c582b4f2c750e251d58a8f3b6b0a6f07e2ce051af1460dde5146dc6a38684d5cf
SSDEEP 196608:SlYic0hiyvQ9mHrXh9cdQCTiVoeXphP/YVpiMFoLGLpNASZQNL/tq+3e:oMgQkX3cdhTiOIphPqpFFoLo3QNL1U
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.stargame.tencent

Android Permissions

a39ba784d01cdf8249725378980ecc8b_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

a39ba784d01cdf8249725378980ecc8b_JaffaCakes118

com.fh.zj.android.AndroidLauncher

com.dgjekhet.dsfhnj.wluxug.a.a.c.b

com.sa1nu0s1.pmtsdk.CoreService

com.dgjekhet.dsfhnj.wluxug.a.a.c.d

com.dgjekhet.dsfhnj.wluxug.a.a.c.a

com.dgjekhet.dsfhnj.wluxug.a.a.c.e

com.sainuosi.pmtsdk.CoreBroadcastReceiver

com.dgjekhet.dsfhnj.wluxug.a.a.c.c

Sharing

General

Malware Config

Signatures

File Explorer

a39ba784d01cdf8249725378980ecc8b_JaffaCakes118

com.fh.zj.android.AndroidLauncher

com.dgjekhet.dsfhnj.wluxug.a.a.c.b

com.sa1nu0s1.pmtsdk.CoreService

com.dgjekhet.dsfhnj.wluxug.a.a.c.d

com.dgjekhet.dsfhnj.wluxug.a.a.c.a

com.dgjekhet.dsfhnj.wluxug.a.a.c.e

com.sainuosi.pmtsdk.CoreBroadcastReceiver

com.dgjekhet.dsfhnj.wluxug.a.a.c.c

Android Permissions

a39ba784d01cdf8249725378980ecc8b_JaffaCakes118