a5fa0af55f435003229b1d215d5acd73_JaffaCakes118

General

Target

a5fa0af55f435003229b1d215d5acd73_JaffaCakes118
Size

2.6MB
MD5

a5fa0af55f435003229b1d215d5acd73
SHA1

13c27fc74258f1800dc66e4d007458f80b5adf21
SHA256

a74ab3f301d72ee25ac13e3d820a704ae920896975e5352d10220dfce9505e9b
SHA512

a3853ca8a5af3684e30abce1cd5699b0f2824d5283823964231d3c5bc73501981e4ce0cf722ec9fa0a0f52915793d9c7f134b934bffb62f27497b08f18f64420
SSDEEP

24576:g7RhotfGK3Xgzhp8mDSj34MXHluPfSi2UeqlojW9vGJnnRgyRFtcj8QnAwFcOLEb:uyvXgUmDZEFCkUqa9vGJnn5RFtcTpg

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to use SIP service.	android.permission.USE_SIP

Files

a5fa0af55f435003229b1d215d5acd73_JaffaCakes118
.apk android

com.android.phone

MobileNetworkSettings

Activities

EmergencyDialer

com.android.phone.EmergencyDialer.DIAL
com.android.phone.EmergencyDialer.DIAL

SimContacts

android.intent.action.VIEW

FdnList

android.intent.action.VIEW

OutgoingCallBroadcaster

android.intent.action.CALL
android.intent.action.CALL
android.intent.action.CALL
android.intent.action.CALL

InCallScreenShowActivation

com.android.phone.PERFORM_CDMA_PROVISIONING

MobileNetworkSettings

android.intent.action.VIEW
android.intent.action.MAIN
android.settings.DATA_ROAMING_SETTINGS

NetworkSetting

android.intent.action.MAIN
android.settings.NETWORK_OPERATOR_SETTINGS

GsmUmtsOptions

android.intent.action.MAIN

CdmaOptions

android.intent.action.MAIN

GsmUmtsCallOptions

android.intent.action.MAIN

CdmaCallOptions

android.intent.action.MAIN

GsmUmtsCallForwardOptions

android.intent.action.MAIN

GsmUmtsAdditionalCallOptions

android.intent.action.MAIN

CellBroadcastSms

android.intent.action.MAIN

FdnSetting

android.intent.action.MAIN

EnableIccPinScreen

android.intent.action.MAIN

ChangeIccPinScreen

android.intent.action.MAIN

DataRoamingReenable

android.intent.action.MAIN

RoamingSetting

android.intent.action.MAIN

CallFeaturesSetting

android.intent.action.VIEW
android.intent.action.MAIN
com.android.phone.CallFeaturesSetting.ADD_VOICEMAIL

EmergencyCallbackModeExitDialog

com.android.phone.action.ACTION_SHOW_ECM_EXIT_DIALOG
android.intent.action.ACTION_SHOW_NOTICE_ECM_BLOCK_OTHERS

.sip.SipSettings

android.intent.action.MAIN
android.net.sip.NOTIFY

RespondViaSmsManager$Settings

android.intent.action.MAIN

Permissions

android.permission.BIND_CALL_SERVICE
android.permission.BROADCAST_STICKY
android.permission.CALL_PHONE
android.permission.CALL_PRIVILEGED
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.READ_CONTACTS
android.permission.READ_CALL_LOG
android.permission.WRITE_CONTACTS
android.permission.WRITE_CALL_LOG
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNAL_SYSTEM_WINDOW
android.permission.VIBRATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.REORDER_TASKS
android.permission.CHANGE_CONFIGURATION
android.permission.WAKE_LOCK
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.STATUS_BAR
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.SEND_RESPOND_VIA_MESSAGE
android.permission.SET_TIME_ZONE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.MODIFY_PHONE_STATE
android.permission.DEVICE_POWER
android.permission.DISABLE_KEYGUARD
android.permission.INTERNET
android.permission.PROCESS_OUTGOING_CALLS
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_APN_SETTINGS
android.permission.BROADCAST_SMS
android.permission.BROADCAST_WAP_PUSH
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SHUTDOWN
android.permission.RECORD_AUDIO
android.permission.PERFORM_CDMA_PROVISIONING
android.permission.USE_SIP
android.permission.REBOOT
android.permission.UPDATE_LOCK
android.permission.INTERACT_ACROSS_USERS_FULL
com.android.smspush.WAPPUSH_MANAGER_BIND
android.permission.MANAGE_USERS
android.permission.UPDATE_APP_OPS_STATS
android.permission.CONNECTIVITY_INTERNAL
android.permission.SET_PREFERRED_APPLICATIONS
android.permission.STOP_APP_SWITCHES

Receivers

ProcessOutgoingCallTest

android.intent.action.NEW_OUTGOING_CALL

OtaStartupReceiver

android.intent.action.BOOT_COMPLETED

SipBroadcastReceiver

com.android.phone.SIP_INCOMING_CALL
com.android.phone.SIP_ADD_PHONE
com.android.phone.SIP_REMOVE_PHONE
android.net.sip.SIP_SERVICE_UP

CallerInfoCacheUpdateReceiver

com.android.phone.UPDATE_CALLER_INFO_CACHE

PhoneGlobals$NotificationBroadcastReceiver

com.android.phone.ACTION_HANG_UP_ONGOING_CALL
com.android.phone.ACTION_CALL_BACK_FROM_NOTIFICATION
com.android.phone.ACTION_SEND_SMS_FROM_NOTIFICATION

Services

BluetoothPhoneService

android.bluetooth.IBluetoothHeadsetPhone

Android Permissions

a5fa0af55f435003229b1d215d5acd73_JaffaCakes118

Permissions

android.permission.BIND_CALL_SERVICE

android.permission.BROADCAST_STICKY

android.permission.CALL_PHONE

android.permission.CALL_PRIVILEGED

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.WRITE_CONTACTS

android.permission.WRITE_CALL_LOG

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNAL_SYSTEM_WINDOW

android.permission.VIBRATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.REORDER_TASKS

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.STATUS_BAR

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.SEND_RESPOND_VIA_MESSAGE

android.permission.SET_TIME_ZONE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.DEVICE_POWER

android.permission.DISABLE_KEYGUARD

android.permission.INTERNET

android.permission.PROCESS_OUTGOING_CALLS

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_APN_SETTINGS

android.permission.BROADCAST_SMS

android.permission.BROADCAST_WAP_PUSH

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SHUTDOWN

android.permission.RECORD_AUDIO

android.permission.PERFORM_CDMA_PROVISIONING

android.permission.USE_SIP

android.permission.REBOOT

android.permission.UPDATE_LOCK

android.permission.INTERACT_ACROSS_USERS_FULL

com.android.smspush.WAPPUSH_MANAGER_BIND

android.permission.MANAGE_USERS

android.permission.UPDATE_APP_OPS_STATS

Sharing

General

Malware Config

Signatures

Files

com.android.phone

MobileNetworkSettings

Activities

EmergencyDialer

SimContacts

FdnList

OutgoingCallBroadcaster

InCallScreenShowActivation

MobileNetworkSettings

NetworkSetting

GsmUmtsOptions

CdmaOptions

GsmUmtsCallOptions

CdmaCallOptions

GsmUmtsCallForwardOptions

GsmUmtsAdditionalCallOptions

CellBroadcastSms

FdnSetting

EnableIccPinScreen

ChangeIccPinScreen

DataRoamingReenable

RoamingSetting

CallFeaturesSetting

EmergencyCallbackModeExitDialog

.sip.SipSettings

RespondViaSmsManager$Settings

Permissions

Receivers

ProcessOutgoingCallTest

OtaStartupReceiver

SipBroadcastReceiver

CallerInfoCacheUpdateReceiver

PhoneGlobals$NotificationBroadcastReceiver

Services

BluetoothPhoneService

Android Permissions

a5fa0af55f435003229b1d215d5acd73_JaffaCakes118