a59f18dc7a428455aa6d6a8faf8bb7c5_JaffaCakes118

General

Target
a59f18dc7a428455aa6d6a8faf8bb7c5_JaffaCakes118
Size 20.9MB
Sample240613-p27gestcqm
SHA256 1fbeff080dceafef784f7123b3ff5015504d4ca0212bc76c13594ae219fc95c5
MD5 a59f18dc7a428455aa6d6a8faf8bb7c5
SHA1 b081ccd162c2876281026f86d968b3e84e595d82
SHA512 a571575ea0e1549c92b6b02991a4d11d2e7aff32dfcad6bc073deadd24e114cc67b2818a7688325117f325ec7bf7bbd821801bedde397c371477b6a362964b76
SSDEEP 393216:6tnxaYFtA07qQLkFCQEfnPViabPGblBSngM0PRTQYP/qDMdsJRBjyQ1GSqQCbnR:AnxhtA0Bk+fnIabe59PJ1PiMAYFQonR
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

File Explorer

a59f18dc7a428455aa6d6a8faf8bb7c5_JaffaCakes118

.apk 20.9MB
res.bin

.apk 205KB

a59f18dc7a428455aa6d6a8faf8bb7c5_JaffaCakes118

SHA256 1fbeff080dceafef784f7123b3ff5015504d4ca0212bc76c13594ae219fc95c5
MD5 a59f18dc7a428455aa6d6a8faf8bb7c5
SHA1 b081ccd162c2876281026f86d968b3e84e595d82
SHA512 a571575ea0e1549c92b6b02991a4d11d2e7aff32dfcad6bc073deadd24e114cc67b2818a7688325117f325ec7bf7bbd821801bedde397c371477b6a362964b76
SSDEEP 393216:6tnxaYFtA07qQLkFCQEfnPViabPGblBSngM0PRTQYP/qDMdsJRBjyQ1GSqQCbnR:AnxhtA0Bk+fnIabe59PJ1PiMAYFQonR
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.qingliu.qxl.ht

Android Permissions

a59f18dc7a428455aa6d6a8faf8bb7c5_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.CHANGE_CONFIGURATION

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MODE_WORLD_READABLE

android.permission.RECEIVE_SMS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

a59f18dc7a428455aa6d6a8faf8bb7c5_JaffaCakes118

com.qingliu.qxl.SplashActivity

com.qingliu.qxl.bb_android

com.wancms.sdk.ui.LoginActivity

com.wancms.sdk.floatwindow.FloatWebActivity

com.wancms.sdk.ui.ChargeActivity

com.tencent.tauth.AuthActivity

com.alipay.sdk.auth.AuthActivity

com.tencent.connect.common.AssistActivity

com.alipay.sdk.app.H5PayActivity

com.wancms.sdk.ui.WeChatPayActivity

com.wancms.sdk.ui.WebPayActivity

com.wancms.sdk.ui.SFTWebPayActivity

com.wancms.sdk.ui.XQTWebPayActivity

com.wancms.sdk.ui.YYWebPayActivity

com.wancms.sdk.ui.JZWebPayActivity

com.wancms.sdk.ui.WFTWebPayActivity

com.wancms.sdk.ui.HuifubaoWebPayActivity

com.wancms.sdk.ui.HaiBeiWebPayActivity

com.wancms.sdk.wxapi.WXEntryActivity

com.wancms.sdk.wxapi.WXPayEntryActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.shengpay.express.smc.ExpressSmcClientActivity

com.wancms.sdk.ui.PhoneBindingActivity

com.snowfish.a.a.s.ABGSvc

com.wancms.sdk.WancmsSDKAppService

com.sina.weibo.sdk.net.DownloadService

com.wancms.sdk.AppRegister

res.bin

Sharing

General

Malware Config

Signatures

File Explorer

a59f18dc7a428455aa6d6a8faf8bb7c5_JaffaCakes118

com.qingliu.qxl.SplashActivity

com.qingliu.qxl.bb_android

com.wancms.sdk.ui.LoginActivity

com.wancms.sdk.floatwindow.FloatWebActivity

com.wancms.sdk.ui.ChargeActivity

com.tencent.tauth.AuthActivity

com.alipay.sdk.auth.AuthActivity

com.tencent.connect.common.AssistActivity

com.alipay.sdk.app.H5PayActivity

com.wancms.sdk.ui.WeChatPayActivity

com.wancms.sdk.ui.WebPayActivity

com.wancms.sdk.ui.SFTWebPayActivity

com.wancms.sdk.ui.XQTWebPayActivity

com.wancms.sdk.ui.YYWebPayActivity

com.wancms.sdk.ui.JZWebPayActivity

com.wancms.sdk.ui.WFTWebPayActivity

com.wancms.sdk.ui.HuifubaoWebPayActivity

com.wancms.sdk.ui.HaiBeiWebPayActivity

com.wancms.sdk.wxapi.WXEntryActivity

com.wancms.sdk.wxapi.WXPayEntryActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.shengpay.express.smc.ExpressSmcClientActivity

com.wancms.sdk.ui.PhoneBindingActivity

com.snowfish.a.a.s.ABGSvc

com.wancms.sdk.WancmsSDKAppService

com.sina.weibo.sdk.net.DownloadService

com.wancms.sdk.AppRegister

res.bin

Android Permissions

a59f18dc7a428455aa6d6a8faf8bb7c5_JaffaCakes118