a5f5e9694380e0a3a6c42e307b8763b2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a5f5e9694380e0a3a6c42e307b8763b2_JaffaCakes118
Size 12.1MB
Sample240613-rh871sscma
SHA256 eb05421126fa7f1fcc5652880534a27e8db8151e07184389a8737c646b86ffee
MD5 a5f5e9694380e0a3a6c42e307b8763b2
SHA1 424fbdd4798a118fcc5b4d1b39d1ad02c38c743c
SHA512 9e2e17b1424b9986ff17ee88396b2bbb081219ccab461dc00b53ffa00060a3a72d7150ffb02e4686813f6bf4b288eecaafcc402ff2b4c0cd862a00193f078bc0
SSDEEP 393216:N44Xo0F+Y5mVE4O7kMgVkMg6GvfZalcUFa:Ny0F+8mW4OGEE8
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

a5f5e9694380e0a3a6c42e307b8763b2_JaffaCakes118

.apk 12.1MB
addex20160807.jar

.apk 107KB

a5f5e9694380e0a3a6c42e307b8763b2_JaffaCakes118

SHA256 eb05421126fa7f1fcc5652880534a27e8db8151e07184389a8737c646b86ffee
MD5 a5f5e9694380e0a3a6c42e307b8763b2
SHA1 424fbdd4798a118fcc5b4d1b39d1ad02c38c743c
SHA512 9e2e17b1424b9986ff17ee88396b2bbb081219ccab461dc00b53ffa00060a3a72d7150ffb02e4686813f6bf4b288eecaafcc402ff2b4c0cd862a00193f078bc0
SSDEEP 393216:N44Xo0F+Y5mVE4O7kMgVkMg6GvfZalcUFa:Ny0F+8mW4OGEE8
MD5 SHA1 SHA512 SSDEEP

android arch:arm

cn.jsx.youxidiantai

cn.jsx.activity.LogoActivity

android.intent.action.MAIN

com.qihoo.util.StartActivity

android.intent.action.MAIN

com.qihoo.util.appupdate.AppUpdateActivity

com.qihoo.util.CommonActivity

cn.jsx.activity.main.MainActivityNew

cn.jsx.activity.EpgActivity

cn.jsx.activity.AdActivity

cn.jsx.activity.LiveReservePagerActivity

cn.jsx.videopalyer.JieVideo

cn.jsx.videopalyer.JieVideo2

cn.jsx.WebViewTest

cn.jsx.activity.TvMaoPlayingActivity

cn.jsx.activity.EpgOtherAcitvity

cn.jsx.activity.TvMaoEpgActivity

cn.jsx.activity.EpgOtherTvMaoAcitvity

cn.jsx.activity.FavActivity

cn.jsx.activity.AdGetActivity

cn.jsx.activity.ShareHotActivity

cn.jsx.activity.cntv.CntvEpgActivity

cn.jsx.activity.cntv.CntvEpgOtherActivity

cn.jsx.activity.play.VodPlayActivity

cn.jsx.activity.play.ZdyVodPlayActivity

cn.jsx.activity.play.DownloadPlayActivity

cn.jsx.activity.play.ZidyActivity

cn.jsx.activity.more.DownLoadMrgActivity

cn.jsx.activity.more.DownLoadedShuActivity

cn.jsx.activity.more.DownHelpActivity

cn.jsx.activity.mainnew.DianyingActivity

cn.jsx.activity.mainnew.TopicActivity

cn.jsx.activity.mainnew.TopActivity

cn.jsx.activity.mainnew.SearchActivity

cn.jsx.activity.my.AboutActivity

cn.jsx.activity.my.CollectionActivity

cn.jsx.activity.my.VideoHistoryActivity

cn.jsx.activity.gkk.GkkActivity

cn.jsx.activity.gkk.GkkDetailActivity

cn.jsx.activity.play.VstVodPlayActivity

cn.jsx.activity.play.MFVodPlayActivity

cn.jsx.activity.mainnew.DyDetailActivity

cn.jsx.activity.mainnew.ActDyActivity

cn.jsx.activity.mainnew.VPImage

cn.jsx.activity.website.WebSiteActivity

cn.jsx.activity.nineone.Tv91PlayingActivity

cn.jsx.activity.nineone.Tv91EpgActivity

cn.jsx.activity.nineone.Tv91PlayActivity

cn.jsx.activity.play.WebSitePlayActivity

cn.jsx.activity.play.DpPlayActivity

cn.jsx.activity.play.DyNewPlayActivity

cn.jsx.activity.website.WebCollectActivity

cn.jsx.activity.website.WebHisActivity

cn.jsx.activity.website.CllWebActivity

cn.jsx.activity.website.CllCollectActivity

cn.jsx.activity.website.CllPlayActivity

cn.jsx.activity.website.Mp4Activity

cn.jsx.activity.website.GGActivity

cn.jsx.activity.website.DPActivity

cn.jsx.activity.website.YouKuACActivity

cn.jsx.activity.dp.more.FuLiAc

cn.jsx.activity.dp.more.VcinemaAC

cn.jsx.activity.dp.more.VcinemaDetailAC

cn.jsx.activity.website.BaiDuYunAcitivity

cn.jsx.activity.website.XunleiActivity

cn.jsx.activity.website.XunleiDetailActivity

cn.jsx.activity.website.YX320Activity

cn.jsx.activity.website.YX320DetailActivit

cn.jsx.activity.dp.more.IxActivity

cn.jsx.activity.dp.more.IxDetailActivity

cn.jsx.activity.dp.more.ZymAc

cn.jsx.activity.dp.more.ZymDetailAc

cn.jsx.activity.dp.more.BaiQiAc

cn.jsx.activity.dp.more.BaiQiDetailAc

cn.jsx.activity.dp.more.QicaiAC

cn.jsx.activity.dp.more.QicaiDetailAC

cn.jsx.activity.website.Tv1155DetailActivity

cn.jsx.activity.website.LolDetailActivity

cn.jsx.activity.website.AzDetailActivity

cn.jsx.activity.website.BaiDuSearch

cn.jsx.videopalyer.FileHisActivity

cn.jsx.activity.vip.AqyVipAC

cn.jsx.activity.vip.LeVipAC

cn.jsx.activity.vip.TxVipAc

cn.jsx.activity.vip.TxVipDetailAC

cn.jsx.activity.vip.YkVipAc

cn.jsx.activity.vip.MgVipAc

cn.jsx.activity.vip.SohuVipAc

cn.jsx.activity.vip.DownVstAc

cn.jsx.activity.fl.YueYuAc

cn.jsx.activity.fl.YueYuDetailAC

cn.jsx.activity.fl.YueYuAC1

cn.jsx.activity.fl.YueYu1DetailAC

cn.jsx.activity.fl.HanJuAC

cn.jsx.activity.fl.HanJuDetailAC

cn.jsx.activity.fl.HanJuCcAC

cn.jsx.activity.fl.HanJuCcDetailAC

cn.jsx.activity.fl.MeiJuAC

cn.jsx.activity.fl.MeiJuDetailAC

cn.jsx.activity.fl.LlDmAC

cn.jsx.activity.fl.LlDmDetailAC

cn.jsx.activity.fl.FlSearchAC

cn.jsx.activity.fl.MyTvbAC

cn.jsx.activity.fl.MyTvbDetailAC

cn.jsx.activity.dp.more.MeijuNetAC

cn.jsx.activity.dp.more.MeijuNetDetailAC

cn.jsx.activity.douyu.DouYuAC

cn.jsx.activity.play.ThirdPlayAc

cn.jsx.activity.dp.more.DsjAc

cn.jsx.activity.dp.more.DsjDetailAc

cn.jsx.activity.dp.more.ZsfytAC

cn.jsx.activity.dp.more.ZsfytDetailAC

com.yang.file_explorer.ui.SearchActivity

cn.jsx.activity.more.DownLoadMrgActivityX

cn.jsx.activity.other.MoreFunctionAC

cn.jsx.activity.mifeng.MifengAC

cn.bmob.v3.update.UpdateDialogActivity

com.umeng.update.UpdateDialogActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.alibaba.sdk.android.feedback.windvane.CustomHybirdActivity

com.alibaba.sdk.android.feedback.impl.ErrorPageActivity

Android Permissions

a5f5e9694380e0a3a6c42e307b8763b2_JaffaCakes118

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.READ_SETTINGS

android.permission.CAMERA

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.SET_WALLPAPER

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_SETTINGS

android.permission.READ_LOGS