a57e1166fd2f1c2b3cb1d82784002618_JaffaCakes118

General

Target
a57e1166fd2f1c2b3cb1d82784002618_JaffaCakes118
Size 15.6MB
Sample240613-pgbt1ssdpn
SHA256 2a02c62466f232795339b5ea7ac4aa55f0e1be7e08d4aeced32e5e66754c9550
MD5 a57e1166fd2f1c2b3cb1d82784002618
SHA1 c3a67a6303913891ab2471701ab9d28fc10f3cac
SHA512 db781f1b4f5b05997239f8a7dd04591afb8c6bd362500a100b194d52151864722b90a67ce4a79250024a04f4994d40555b55673bb2c89f00c152545f0ced72fa
SSDEEP 393216:ramC+w6o6lzZ5n5p//4phzgclbk6ZTdxi7tQJKIv3qJsJI77h1sc9X:raHKoW3n5p/gVlo6ZDQtbIvaJ6C74c9X
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

File Explorer

a57e1166fd2f1c2b3cb1d82784002618_JaffaCakes118

.apk 15.6MB

a57e1166fd2f1c2b3cb1d82784002618_JaffaCakes118

SHA256 2a02c62466f232795339b5ea7ac4aa55f0e1be7e08d4aeced32e5e66754c9550
MD5 a57e1166fd2f1c2b3cb1d82784002618
SHA1 c3a67a6303913891ab2471701ab9d28fc10f3cac
SHA512 db781f1b4f5b05997239f8a7dd04591afb8c6bd362500a100b194d52151864722b90a67ce4a79250024a04f4994d40555b55673bb2c89f00c152545f0ced72fa
SSDEEP 393216:ramC+w6o6lzZ5n5p//4phzgclbk6ZTdxi7tQJKIv3qJsJI77h1sc9X:raHKoW3n5p/gVlo6ZDQtbIvaJ6C74c9X
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.popcap.pvzboss

Android Permissions

a57e1166fd2f1c2b3cb1d82784002618_JaffaCakes118

Permissions

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BATTERY_STATS

Android.permission.CHANGE_CONFIGURATION

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.DISABLE_KEYGUARD

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_ORIENTATION

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.WRITE_APN_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

a57e1166fd2f1c2b3cb1d82784002618_JaffaCakes118

.Main

cn.game189.sms.SMS

cn.egame.terminal.paysdk.EgamePayActivity

cn.play.dserv.EmpActivity

mm.purchasesdk.iapservice.BillingLayoutActivity

safiap.framework.ui.UpdateHintActivity

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

cn.play.dserv.DService

mm.purchasesdk.iapservice.PurchaseService

safiap.framework.SafFrameworkManager

safiap.framework.logreport.monitor.handler.LogreportHandler

com.popcap.util.PopCapDaemonService

cn.play.dserv.DsReceiver

safiap.framework.CheckUpdateReceiver

com.popcap.util.BootReceiver

Sharing

General

Malware Config

Signatures

File Explorer

a57e1166fd2f1c2b3cb1d82784002618_JaffaCakes118

.Main

cn.game189.sms.SMS

cn.egame.terminal.paysdk.EgamePayActivity

cn.play.dserv.EmpActivity

mm.purchasesdk.iapservice.BillingLayoutActivity

safiap.framework.ui.UpdateHintActivity

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

cn.play.dserv.DService

mm.purchasesdk.iapservice.PurchaseService

safiap.framework.SafFrameworkManager

safiap.framework.logreport.monitor.handler.LogreportHandler

com.popcap.util.PopCapDaemonService

cn.play.dserv.DsReceiver

safiap.framework.CheckUpdateReceiver

com.popcap.util.BootReceiver

Android Permissions

a57e1166fd2f1c2b3cb1d82784002618_JaffaCakes118