a409ec7ca6d13310480ca5ef56e27e3c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a409ec7ca6d13310480ca5ef56e27e3c_JaffaCakes118
Size 19.7MB
Sample240613-gecdrswdpe
SHA256 076c6dbf7627dffcfa07e7e278437ea17313c3e967a8cc31f8d2f12b3daa49de
MD5 a409ec7ca6d13310480ca5ef56e27e3c
SHA1 136d29cf239018123eb16061313c1c0c80ece991
SHA512 3f724099440b1b7ef353f4ca9019a261736fdc276d2674d5d97d1815776a4889f427a425d5091fb4089d69d3efb12b3b5714df0d01daa863acccfddbb9032f2a
SSDEEP 393216:SE/x83JOYCXURi9pwg8tV+/BnjaqUPti9IXpTnw3rPb:WOY0URi9pwgE4V4Fi6w3rPb
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

a409ec7ca6d13310480ca5ef56e27e3c_JaffaCakes118

.apk 19.7MB

a409ec7ca6d13310480ca5ef56e27e3c_JaffaCakes118

SHA256 076c6dbf7627dffcfa07e7e278437ea17313c3e967a8cc31f8d2f12b3daa49de
MD5 a409ec7ca6d13310480ca5ef56e27e3c
SHA1 136d29cf239018123eb16061313c1c0c80ece991
SHA512 3f724099440b1b7ef353f4ca9019a261736fdc276d2674d5d97d1815776a4889f427a425d5091fb4089d69d3efb12b3b5714df0d01daa863acccfddbb9032f2a
SSDEEP 393216:SE/x83JOYCXURi9pwg8tV+/BnjaqUPti9IXpTnw3rPb:WOY0URi9pwgE4V4Fi6w3rPb
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.pandadoctor.pedi

com.pandadoctor.pedi.MainActivity

com.pandadoctor.pedi.activity.GuideActivity

com.pandadoctor.pedi.activity.WelcomeActivity

android.intent.action.MAIN

com.pandadoctor.pedi.ApiSelectActivity

com.pandadoctor.pedi.activity.question.QuestionDetailActivity

com.pandadoctor.pedi.activity.question.QuestionDetailRefusedActivity

com.pandadoctor.pedi.activity.question.QuestionDetailNotAnsActivity

com.pandadoctor.pedi.activity.question.QuestionDetailFeedbackActivity

com.pandadoctor.pedi.activity.question.BigImageViewActivity

com.pandadoctor.pedi.activity.question.PictureShowActivity

com.pandadoctor.pedi.activity.question.DoctorDetailActivity

com.pandadoctor.pedi.activity.question.ToPayActivity

com.pandadoctor.pedi.activity.family_doc.DocFamilyHealthFormActivity

com.pandadoctor.pedi.activity.family_doc.PackageDetailActivity

com.pandadoctor.pedi.activity.webview.HealthCardDetailWebActivity

com.pandadoctor.pedi.activity.me.WebNewActivity

com.pandadoctor.pedi.activity.me.MyGroupBuyActivity

com.pandadoctor.pedi.activity.question.AskActivity

com.pandadoctor.pedi.activity.question.AskHealthAdvisoryActivity

com.pandadoctor.pedi.activity.question.RecommendDoctorListActivity

com.pandadoctor.pedi.activity.family_doc.AskActivityFamilyDoc

com.pandadoctor.pedi.activity.me.MyCouponActivity

com.pandadoctor.pedi.activity.me.MyBigImageActivity

com.pandadoctor.pedi.activity.question.ChooseCouponActivity

com.pandadoctor.pedi.activity.question.ChooseCouponHAActivity

com.pandadoctor.pedi.activity.me.MyAboutActivity

com.pandadoctor.pedi.activity.knowledge.JNWebActivity

com.pandadoctor.pedi.activity.login.ChangePwdActivity

com.pandadoctor.pedi.activity.login.LoginQuickActivity

com.pandadoctor.pedi.activity.login.LoginByPwdActivity

com.pandadoctor.pedi.activity.login.RegistActivity

com.pandadoctor.pedi.activity.login.ForgetPasswordActivity

com.pandadoctor.pedi.activity.me.MySettingsActivity

com.pandadoctor.pedi.activity.me.MyVipActivity

com.pandadoctor.pedi.activity.knowledge.SicknessDetailActivity

com.pandadoctor.pedi.activity.knowledge.WeiClassDetailActivity

com.pandadoctor.pedi.activity.knowledge.NutritionListActivity

com.pandadoctor.pedi.activity.knowledge.RecommendDetailActivity

com.pandadoctor.pedi.activity.knowledge.RecommendDetailActivity2

com.pandadoctor.pedi.activity.knowledge.ReadListActivity

com.pandadoctor.pedi.activity.knowledge.ReadTypeListActivity

com.pandadoctor.pedi.activity.knowledge.WeiClassListActivity

com.pandadoctor.pedi.activity.me.MyPersonalMsgActivity

com.pandadoctor.pedi.activity.me.ChangeUsernameActivity

com.pandadoctor.pedi.activity.me.MyWdActivity

com.pandadoctor.pedi.activity.me.MyCollectActivity

com.pandadoctor.pedi.activity.me.MyHealthAdvisoryActivity

com.pandadoctor.pedi.activity.same_ask.SameAskWebActivity

com.pandadoctor.pedi.activity.ask_answer.SearchWDActivity

com.pandadoctor.pedi.activity.SearchBKActivity

com.pandadoctor.pedi.activity.login.ProtocalActivity

com.pandadoctor.pedi.activity.question.PayConfirmActivity

com.pandadoctor.pedi.activity.question.HealthAdvisoryConfirmActivity

com.pandadoctor.pedi.activity.family_doc.PayConfirmDocFamilyOnceActivity

com.pandadoctor.pedi.activity.family_doc.PayConfirmRechargeActivity

com.pandadoctor.pedi.activity.family_doc.DocFamilyBuyPackageActivity

com.pandadoctor.pedi.activity.family_doc.PayConfirmDocFamilyPackageActivity

com.pandadoctor.pedi.activity.family_doc.DocServiceListActivity

com.pandadoctor.pedi.activity.me.WebActivity

com.pandadoctor.pedi.activity.me.MyFamilyDocServiceActivity

com.pandadoctor.pedi.activity.webview.RechargeActivity

com.pandadoctor.pedi.activity.webview.SVCardInfoActivity

com.pandadoctor.pedi.activity.family_doc.AddFriendActivity

com.pandadoctor.pedi.activity.family_doc.FamilyDoctorDetailActivity

com.pandadoctor.pedi.activity.family_doc.ApplyGroupActivity

com.pandadoctor.pedi.activity.family_doc.ChatActivity

com.pandadoctor.pedi.activity.family_doc.ChatActivityHealthInquiry

com.pandadoctor.pedi.activity.family_doc.ChatShowActivity

com.pandadoctor.pedi.activity.family_doc.ChatHistoryActivity

com.pandadoctor.pedi.activity.family_doc.EditActivity

com.pandadoctor.pedi.activity.family_doc.GroupMemberProfileActivity

com.pandadoctor.pedi.activity.family_doc.ImagePreviewActivity

com.pandadoctor.pedi.activity.family_doc.ImageViewActivity

com.pandadoctor.pedi.activity.family_doc.ProfileActivity

com.pandadoctor.pedi.activity.family_doc.VideoActivity

com.pandadoctor.pedi.wxapi.WXEntryActivity

android.intent.action.VIEW

com.pandadoctor.pedi.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.tencent.bugly.beta.ui.BetaActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.pandadoctor.pedi.activity.question.RecommendDocListActivity

com.pandadoctor.pedi.activity.me.MyHealthAdvisoryActivityNew

com.pandadoctor.pedi.activity.question.QuestionAnswerListActivity

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_00

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_01

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_02

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_03

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_04

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_05

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_06

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_07

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_08

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_09

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_00_T

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_01_T

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_02_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_00

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_01

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_02

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_03

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_04

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_05

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_06

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_07

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_08

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_09

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_00_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_01_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_02_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_00

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_01

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_02

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_03

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_04

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_05

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_06

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_07

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_08

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_09

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_00_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_01_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_02_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_00

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_01

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_02

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_03

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_04

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_05

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_06

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_07

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_08

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_09

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_00_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_01_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_02_T

Android Permissions

a409ec7ca6d13310480ca5ef56e27e3c_JaffaCakes118

Permissions

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.GET_TASKS

com.pandadoctor.pedi.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.READ_LOGS

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

com.pandadoctor.pedi.permission.MIPUSH_RECEIVE