a3c4a7e99f32434bf4e10b096dc73401_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a3c4a7e99f32434bf4e10b096dc73401_JaffaCakes118
Size 12.8MB
Sample240613-elzfrstdne
SHA256 c686f5f38b52aff239d744bd382712b4d82b6847a6de342cd2dd1155b227998c
MD5 a3c4a7e99f32434bf4e10b096dc73401
SHA1 39c25db5df8e8b3eee3e27a7d4b068660f3c1e0e
SHA512 3013f25c1309a28b64d00b36973d53495a1984646be2ec86c34f9a0fa4ca84f370d8fac4ec301fc1c9536cc4178cb7f238ccef0ca691fda21a0d5af4d568d333
SSDEEP 393216:1A4BgiqYH6oqb76gA0PNmS3jFTZltHYZFBWXZ8di:1AfCHXm6l0ll3ZrtHeNi
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

a3c4a7e99f32434bf4e10b096dc73401_JaffaCakes118

.apk 12.8MB

a3c4a7e99f32434bf4e10b096dc73401_JaffaCakes118

SHA256 c686f5f38b52aff239d744bd382712b4d82b6847a6de342cd2dd1155b227998c
MD5 a3c4a7e99f32434bf4e10b096dc73401
SHA1 39c25db5df8e8b3eee3e27a7d4b068660f3c1e0e
SHA512 3013f25c1309a28b64d00b36973d53495a1984646be2ec86c34f9a0fa4ca84f370d8fac4ec301fc1c9536cc4178cb7f238ccef0ca691fda21a0d5af4d568d333
SSDEEP 393216:1A4BgiqYH6oqb76gA0PNmS3jFTZltHYZFBWXZ8di:1AfCHXm6l0ll3ZrtHeNi
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.gikoo5

com.gikoo5.ui.activity.GKFlowPager

android.intent.action.MAIN

com.gikoo5.ui.activity.GKGuidePager

com.gikoo5.ui.activity.GKMainPager

com.gikoo5.ui.activity.GKMainSearchPager

com.gikoo5.ui.activity.GKSelectCityPager

com.gikoo5.ui.activity.GKSelectRangePager

com.gikoo5.ui.activity.GKSelectSortPager

com.gikoo5.ui.activity.GKSelectFilterPager

com.gikoo5.ui.activity.GKInterviewListPager

com.gikoo5.ui.activity.GKMyApplyPager

com.gikoo5.ui.activity.GKStoreDetailPager

com.gikoo5.ui.activity.GKStoreDetailPager2

com.gikoo5.ui.activity.GKStoreMapPager

com.gikoo5.ui.activity.GKUserSettingPager

com.gikoo5.ui.activity.GKLoginPager

com.gikoo5.ui.activity.GKSettingPager

com.gikoo5.ui.activity.GKApplyUserInfoPager

com.gikoo5.ui.activity.GKStoreDescPager

com.gikoo5.ui.activity.ShareActivity

.wxapi.WXEntryActivity

com.gikoo5.ui.activity.GKIMChatPager

com.gikoo5.ui.activity.GKLotteryPager

com.gikoo5.ui.activity.GKImageViewerPager

com.gikoo5.ui.activity.GKMapBrandPager

com.gikoo5.ui.activity.GKRevokeReasonPager

com.gikoo5.ui.activity.GKInterviewConfirmPager

com.gikoo5.ui.activity.GKInterviewNotifyPager

com.gikoo5.ui.activity.GKInterviewOvertimePager

com.gikoo5.ui.activity.GKRouteMapPager

com.gikoo5.ui.activity.GKInterviewAddressInputPager

com.easemob.uikit.ui.MainActivity

com.easemob.uikit.ui.SplashActivity

com.easemob.uikit.ui.LoginActivity

com.easemob.uikit.ui.RegisterActivity

com.easemob.uikit.ui.ChatActivity

com.easemob.uikit.ui.AddContactActivity

com.easemob.uikit.ui.GroupDetailsActivity

com.easemob.uikit.ui.GroupsActivity

com.easemob.uikit.ui.ChatRoomActivity

com.easemob.uikit.ui.ChatRoomDetailsActivity

com.easemob.uikit.ui.NewGroupActivity

com.easemob.uikit.ui.ExitGroupDialog

com.easemob.uikit.ui.GroupPickContactsActivity

com.easemob.uikit.ui.NewFriendsMsgActivity

com.easemob.uikit.ui.ForwardMessageActivity

com.easemob.uikit.ui.ContextMenuActivity

com.easemob.uikit.ui.BlacklistActivity

com.easemob.uikit.ui.PublicGroupsActivity

com.easemob.uikit.ui.PublicChatRoomsActivity

com.easemob.uikit.ui.VoiceCallActivity

com.easemob.uikit.ui.VideoCallActivity

com.easemob.uikit.ui.GroupSimpleDetailActivity

com.easemob.uikit.ui.GroupBlacklistActivity

com.easemob.uikit.ui.PublicGroupsSeachActivity

com.easemob.uikit.ui.EditActivity

com.easemob.uikit.ui.ImageGridActivity

com.easemob.uikit.ui.RecorderVideoActivity

com.easemob.uikit.ui.DiagnoseActivity

com.easemob.uikit.ui.OfflinePushNickActivity

com.easemob.uikit.ui.RobotsActivity

com.easemob.uikit.ui.UserProfileActivity

com.easemob.easeui.ui.EaseBaiduMapActivity

com.easemob.easeui.ui.EaseShowBigImageActivity

com.easemob.easeui.ui.EaseShowNormalFileActivity

com.easemob.easeui.ui.EaseShowVideoActivity

com.lenovo.lps.sus.control.SUSPromptActivity

com.lenovo.lps.sus.control.SUSCustdefNotificationActivity

com.lenovo.lps.sus.control.SUSNotificationActivity

cn.jpush.android.ui.PushActivity

Android Permissions

a3c4a7e99f32434bf4e10b096dc73401_JaffaCakes118

Permissions

com.gikoo5.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.INSTALL_PACKAGES

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.google.android.c2dm.permission.RECEIVE

com.easemob.uikit.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

File Explorer

a3c4a7e99f32434bf4e10b096dc73401_JaffaCakes118

com.gikoo5.ui.activity.GKFlowPager

com.gikoo5.ui.activity.GKGuidePager

com.gikoo5.ui.activity.GKMainPager

com.gikoo5.ui.activity.GKMainSearchPager

com.gikoo5.ui.activity.GKSelectCityPager

com.gikoo5.ui.activity.GKSelectRangePager

com.gikoo5.ui.activity.GKSelectSortPager

com.gikoo5.ui.activity.GKSelectFilterPager

com.gikoo5.ui.activity.GKInterviewListPager

com.gikoo5.ui.activity.GKMyApplyPager

com.gikoo5.ui.activity.GKStoreDetailPager

com.gikoo5.ui.activity.GKStoreDetailPager2

com.gikoo5.ui.activity.GKStoreMapPager

com.gikoo5.ui.activity.GKUserSettingPager

com.gikoo5.ui.activity.GKLoginPager

com.gikoo5.ui.activity.GKSettingPager

com.gikoo5.ui.activity.GKApplyUserInfoPager

com.gikoo5.ui.activity.GKStoreDescPager

com.gikoo5.ui.activity.ShareActivity

.wxapi.WXEntryActivity

com.gikoo5.ui.activity.GKIMChatPager

com.gikoo5.ui.activity.GKLotteryPager

com.gikoo5.ui.activity.GKImageViewerPager

com.gikoo5.ui.activity.GKMapBrandPager

com.gikoo5.ui.activity.GKRevokeReasonPager

com.gikoo5.ui.activity.GKInterviewConfirmPager

com.gikoo5.ui.activity.GKInterviewNotifyPager

com.gikoo5.ui.activity.GKInterviewOvertimePager

com.gikoo5.ui.activity.GKRouteMapPager

com.gikoo5.ui.activity.GKInterviewAddressInputPager

com.easemob.uikit.ui.MainActivity

com.easemob.uikit.ui.SplashActivity

com.easemob.uikit.ui.LoginActivity

com.easemob.uikit.ui.RegisterActivity

com.easemob.uikit.ui.ChatActivity

com.easemob.uikit.ui.AddContactActivity

com.easemob.uikit.ui.GroupDetailsActivity

com.easemob.uikit.ui.GroupsActivity

com.easemob.uikit.ui.ChatRoomActivity

com.easemob.uikit.ui.ChatRoomDetailsActivity

com.easemob.uikit.ui.NewGroupActivity

com.easemob.uikit.ui.ExitGroupDialog

com.easemob.uikit.ui.GroupPickContactsActivity

com.easemob.uikit.ui.NewFriendsMsgActivity

com.easemob.uikit.ui.ForwardMessageActivity

com.easemob.uikit.ui.ContextMenuActivity

com.easemob.uikit.ui.BlacklistActivity

com.easemob.uikit.ui.PublicGroupsActivity

com.easemob.uikit.ui.PublicChatRoomsActivity

com.easemob.uikit.ui.VoiceCallActivity

com.easemob.uikit.ui.VideoCallActivity

com.easemob.uikit.ui.GroupSimpleDetailActivity

com.easemob.uikit.ui.GroupBlacklistActivity

com.easemob.uikit.ui.PublicGroupsSeachActivity

com.easemob.uikit.ui.EditActivity

com.easemob.uikit.ui.ImageGridActivity

com.easemob.uikit.ui.RecorderVideoActivity

com.easemob.uikit.ui.DiagnoseActivity

com.easemob.uikit.ui.OfflinePushNickActivity

com.easemob.uikit.ui.RobotsActivity

com.easemob.uikit.ui.UserProfileActivity

com.easemob.easeui.ui.EaseBaiduMapActivity

com.easemob.easeui.ui.EaseShowBigImageActivity

com.easemob.easeui.ui.EaseShowNormalFileActivity

com.easemob.easeui.ui.EaseShowVideoActivity

com.lenovo.lps.sus.control.SUSPromptActivity

com.lenovo.lps.sus.control.SUSCustdefNotificationActivity

com.lenovo.lps.sus.control.SUSNotificationActivity

cn.jpush.android.ui.PushActivity

com.easemob.chat.EMGCMListenerService

com.easemob.chat.EMChatService

com.baidu.location.f

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService