a781043bdb65d9e1c6c6afdfd0821a8e_JaffaCakes118

General

Target
a781043bdb65d9e1c6c6afdfd0821a8e_JaffaCakes118
Size 10.7MB
Sample240614-bqeqdatbnm
SHA256 6181c237e6741e7cb16faef9eae233c131181694f7f4f7511c8142b9fee5f453
MD5 a781043bdb65d9e1c6c6afdfd0821a8e
SHA1 4bb6cb5a42cf0a60f9cc09c2e7c2b44c1f354ada
SHA512 c09816120d2f87822ebb6f999916f11553b336e340a5e4b3b9461d6089e03d861f1fee8a9ea0521e5fe72d62338a61800860e806bb22b86fae0de3cd7ae007b7
SSDEEP 196608:VSH9Xk9FGosXjW4WMIuoEWPuSYBMwoXC717f/e4lf0xAPTGAki6JSXuZLOt4fyXC:VsosXjW4NIuNIeUXeWw0xAyAki6NquOa
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

a781043bdb65d9e1c6c6afdfd0821a8e_JaffaCakes118

.apk 10.7MB

a781043bdb65d9e1c6c6afdfd0821a8e_JaffaCakes118

SHA256 6181c237e6741e7cb16faef9eae233c131181694f7f4f7511c8142b9fee5f453
MD5 a781043bdb65d9e1c6c6afdfd0821a8e
SHA1 4bb6cb5a42cf0a60f9cc09c2e7c2b44c1f354ada
SHA512 c09816120d2f87822ebb6f999916f11553b336e340a5e4b3b9461d6089e03d861f1fee8a9ea0521e5fe72d62338a61800860e806bb22b86fae0de3cd7ae007b7
SSDEEP 196608:VSH9Xk9FGosXjW4WMIuoEWPuSYBMwoXC717f/e4lf0xAPTGAki6JSXuZLOt4fyXC:VsosXjW4NIuNIeUXeWw0xAyAki6NquOa
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.yxxinglin.xzid526958

Android Permissions

a781043bdb65d9e1c6c6afdfd0821a8e_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

com.youyou77cp.dxzyycp.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_SETTINGS

a781043bdb65d9e1c6c6afdfd0821a8e_JaffaCakes118

com.tc168.MainActivity

com.tc168.webview.JXGameWebView

com.facebook.react.devsupport.DevSettingsActivity

cn.jpush.android.ui.PushActivity

com.tc168.webview.JXWebView

cn.jpush.android.service.PushService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.tc168.receiver.PushReceiver

Sharing

General

Malware Config

Signatures

File Explorer

a781043bdb65d9e1c6c6afdfd0821a8e_JaffaCakes118

com.tc168.MainActivity

com.tc168.webview.JXGameWebView

com.facebook.react.devsupport.DevSettingsActivity

cn.jpush.android.ui.PushActivity

com.tc168.webview.JXWebView

cn.jpush.android.service.PushService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.tc168.receiver.PushReceiver

Android Permissions

a781043bdb65d9e1c6c6afdfd0821a8e_JaffaCakes118