a919ff8ca9f92ba629ea03c9e65af2fe_JaffaCakes118

General

Target

a919ff8ca9f92ba629ea03c9e65af2fe_JaffaCakes118
Size

4.3MB
MD5

a919ff8ca9f92ba629ea03c9e65af2fe
SHA1

66d9f44263da270806d3b6e5aeb15a5b3525358a
SHA256

239e402f006a6c90eba982e141d08d000cc0b9cb95c192ff7d99fc8a0d6ca32a
SHA512

bf38129a73978d2a285f03040f396344caa488b96709f82122044081d00854a226c7628ace47c1e159a45b9e0bccc8acc2c74b66777ccc940ea05c0278377077
SSDEEP

98304:+P6yxeakwvY6FAeFROpdZT3pXb2Fn26oizP+W:Py7fFopdZ7ZbKB5

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

a919ff8ca9f92ba629ea03c9e65af2fe_JaffaCakes118
.apk android arch:arm

com.wyt.free

com.wyt.activity.MainTabActivity

Activities

com.wyt.activity.MainTabActivity

android.intent.action.CALL_BUTTON
android.intent.action.MAIN

com.wyt.activity.CallingActivity

android.intent.action.CALL_PRIVILEGED
android.intent.ACTION_NEW_OUTGOING_CALL
android.intent.action.VIEW
android.intent.action.DIAL
android.intent.action.CALL
android.intent.action.CALL_PRIVILEGED

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.SEND_SMS
android.permission.CALL_PHONE
android.permission.CALL_PRIVILEGED
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.MODIFY_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.GET_TASKS
android.permission.REORDER_TASKS
android.permission.MODIFY_PHONE_STATE

Receivers

com.bobo.service.PhoneReceiver

android.intent.action.PHONE_STATE

com.wyt.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

Services
20130609131204AlipayMSP_V3.5.4.0609.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService

Android Permissions

a919ff8ca9f92ba629ea03c9e65af2fe_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.SEND_SMS

android.permission.CALL_PHONE

android.permission.CALL_PRIVILEGED

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.MODIFY_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.REORDER_TASKS

android.permission.MODIFY_PHONE_STATE

Sharing

General

Malware Config

Signatures

Files

com.wyt.free

com.wyt.activity.MainTabActivity

Activities

com.wyt.activity.MainTabActivity

com.wyt.activity.CallingActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.bobo.service.PhoneReceiver

com.wyt.receiver.BootReceiver

Services

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

Android Permissions

a919ff8ca9f92ba629ea03c9e65af2fe_JaffaCakes118