a9bc4ff2d5d69a445c34207b16ee4911_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a9bc4ff2d5d69a445c34207b16ee4911_JaffaCakes118
Size 26.4MB
Sample240614-px3yfa1dnd
SHA256 cdde7a6cc0dd4393a4e1a7ef2825689103acfa1339b067697043215530fee66f
MD5 a9bc4ff2d5d69a445c34207b16ee4911
SHA1 a525d4c881e4b148a0d7e5158a9cedb46b4625c6
SHA512 4a05aa93c4acb70bc78e89d5ae1ed1aab10ad2af740ab6500b468b00c17bced3664bf415a41d065ab525c1846292ad4525d74ea82fe4302d3ced9503791c6293
SSDEEP 786432:qOm/XX+r/OOljOvuMaZUMjArKMtylihWu1Ul:36XaOOljmufljArf0i1Ul
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

a9bc4ff2d5d69a445c34207b16ee4911_JaffaCakes118

.apk 26.4MB
cn.uc.gamesdk.loader.apk

.apk 7.4MB
libcn.uc.gamesdk.account.so

.apk 761KB
libcn.uc.gamesdk.asr.so

.apk 2.4MB
libcn.uc.gamesdk.core.so

.apk 2.4MB
libcn.uc.gamesdk.floater.so

.apk 843KB
libcn.uc.gamesdk.init.so

.apk 539KB
libcn.uc.gamesdk.update.so

.apk 20KB
gdtadv2.jar

.apk 468KB
ucsdk.apk

.apk 37KB
ugpsdk-plugin-loader.apk

.apk 623KB

a9bc4ff2d5d69a445c34207b16ee4911_JaffaCakes118

SHA256 cdde7a6cc0dd4393a4e1a7ef2825689103acfa1339b067697043215530fee66f
MD5 a9bc4ff2d5d69a445c34207b16ee4911
SHA1 a525d4c881e4b148a0d7e5158a9cedb46b4625c6
SHA512 4a05aa93c4acb70bc78e89d5ae1ed1aab10ad2af740ab6500b468b00c17bced3664bf415a41d065ab525c1846292ad4525d74ea82fe4302d3ced9503791c6293
SSDEEP 786432:qOm/XX+r/OOljOvuMaZUMjArKMtylihWu1Ul:36XaOOljmufljArf0i1Ul
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.sg.atm4.wdj

com.dayimi.atm4.Aopiowqjasdoj

com.dayimi.atm4.SplashActivity

cn.uc.paysdk.SDKActivity

cn.uc.gamesdk.activity.ProxyActivity

cn.uc.gamesdk.sdkweb

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.alipay.sdk.app.H5AuthActivity

com.ipaynow.wechatpay.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

cn.uc.gamesdk.activity.PullupActivity

android.intent.action.VIEW

cn.gundam.sdk.shell.activity.ProxyActivity

cn.uc.gamesdk.sdkweb

com.qq.e.ads.ADActivity

com.qq.e.ads.PortraitADActivity

com.qq.e.ads.LandscapeADActivity

com.finder.ij.h.view.AdVideoActivity

com.finder.ij.h.view.AdVideoLandscapeActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.ss.android.socialbase.appdownloader.view.DownloadSizeLimitActivity

com.ss.android.socialbase.appdownloader.view.DownloadTaskDeleteActivity

com.ss.android.downloadlib.activity.InteractionMiddleActivity

com.ij.gdt.view.AdVideoActivity

com.azet.aziglw.ve377e20952954382

android.intent.action.MAIN

Android Permissions

a9bc4ff2d5d69a445c34207b16ee4911_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS

android.permission.WRITE_CALENDAR

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MANAGE_ACCOUNTS

android.permission.ACCESS_FINE_LOCATION

com.android.alarm.permission.SET_ALARM

android.permission.PACKAGE_USAGE_STATS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

File Explorer

a9bc4ff2d5d69a445c34207b16ee4911_JaffaCakes118

com.dayimi.atm4.Aopiowqjasdoj

com.dayimi.atm4.SplashActivity

cn.uc.paysdk.SDKActivity

cn.uc.gamesdk.activity.ProxyActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.alipay.sdk.app.H5AuthActivity

com.ipaynow.wechatpay.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

cn.uc.gamesdk.activity.PullupActivity

cn.gundam.sdk.shell.activity.ProxyActivity

com.qq.e.ads.ADActivity

com.qq.e.ads.PortraitADActivity

com.qq.e.ads.LandscapeADActivity

com.finder.ij.h.view.AdVideoActivity

com.finder.ij.h.view.AdVideoLandscapeActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.ss.android.socialbase.appdownloader.view.DownloadSizeLimitActivity

com.ss.android.socialbase.appdownloader.view.DownloadTaskDeleteActivity

com.ss.android.downloadlib.activity.InteractionMiddleActivity

com.ij.gdt.view.AdVideoActivity

com.azet.aziglw.ve377e20952954382

cn.uc.paysdk.service.SDKService

com.uc.crashsdk.CrashLogFilesUploader

cn.gundam.sdk.shell.service.ProxyService

com.qq.e.comm.DownloadService

com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService

com.ss.android.socialbase.downloader.notification.DownloadNotificationService

com.ss.android.socialbase.downloader.downloader.DownloadService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.impls.DownloadHandleService

com.ss.android.socialbase.appdownloader.AppDownloadHandleService

com.ss.android.downloadlib.core.download.DownloadReceiver

com.bytedance.sdk.openadsdk.multipro.TTMultiProvider

android.support.v4.content.FileProvider

com.bytedance.sdk.openadsdk.TTFileProvider

cn.uc.gamesdk.loader.apk

libcn.uc.gamesdk.account.so

cn.uc.gamesdk.account.activity.AccountActivity

libcn.uc.gamesdk.asr.so

libcn.uc.gamesdk.core.so

cn.uc.gamesdk.core.updategame.activity.UpdateGameActivity

cn.uc.gamesdk.core.entrance.activity.SdkWebViewActivity

cn.uc.gamesdk.core.entrance.activity.SdkNativeViewActivity

cn.uc.gamesdk.core.entrance.activity.SdkDialogActivity

cn.uc.gamesdk.core.entrance.activity.SdkFloatViewActivity

cn.uc.gamesdk.core.operation.display.method.DisplayInDialogActivity

cn.uc.gamesdk.core.download.DownloadProgressActivity

libcn.uc.gamesdk.floater.so

cn.uc.gamesdk.floater.business.video.SdkVideoViewActivity

cn.uc.gamesdk.floater.keyboard.KeyboardViewActivity

libcn.uc.gamesdk.init.so

cn.uc.gamesdk.init.splash.SplashActivity

libcn.uc.gamesdk.update.so

gdtadv2.jar

ucsdk.apk

ugpsdk-plugin-loader.apk

Android Permissions

a9bc4ff2d5d69a445c34207b16ee4911_JaffaCakes118