a9bd9f876e687aca360abe53785b4b08_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a9bd9f876e687aca360abe53785b4b08_JaffaCakes118
Size 27.5MB
Sample240614-pyp3za1dpg
SHA256 a0f81f65a309304e90159e7b8f30d6a32cf418803ef09a9c0bd1aa7cb5872fc1
MD5 a9bd9f876e687aca360abe53785b4b08
SHA1 1af078621f95324050ec89e21385a817fe3c1f06
SHA512 1a255c02539f89609fb12e36a0c95336f901d749500de248141c090f2e1735fe923fcb8b8a38a783e0e3eaafa2158d1a81451cc5f042b5d1dd5e846beb8700fd
SSDEEP 786432:NGIJGmftEsXZkVobi9gaVnmZw2yhCwDrBGqj:NXhfttJk39HVnmZUo2
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

File Explorer

a9bd9f876e687aca360abe53785b4b08_JaffaCakes118

.apk 27.5MB

a9bd9f876e687aca360abe53785b4b08_JaffaCakes118

SHA256 a0f81f65a309304e90159e7b8f30d6a32cf418803ef09a9c0bd1aa7cb5872fc1
MD5 a9bd9f876e687aca360abe53785b4b08
SHA1 1af078621f95324050ec89e21385a817fe3c1f06
SHA512 1a255c02539f89609fb12e36a0c95336f901d749500de248141c090f2e1735fe923fcb8b8a38a783e0e3eaafa2158d1a81451cc5f042b5d1dd5e846beb8700fd
SSDEEP 786432:NGIJGmftEsXZkVobi9gaVnmZw2yhCwDrBGqj:NXhfttJk39HVnmZUo2
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.financial360.nicaifu

android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.SYSTEM_ALERT_WINDOW android.permission.SYSTEM_OVERLAY_WINDOW android.permission.WAKE_LOCK android.permission.RECEIVE_BOOT_COMPLETED android.permission.CALL_PHONE android.permission.GET_TASKS android.permission.WRITE_SETTINGS android.permission.CHANGE_CONFIGURATION android.permission.READ_EXTERNAL_STORAGE android.permission.PACKAGE_USAGE_STATS android.permission.READ_CALENDAR android.permission.WRITE_CALENDAR com.google.android.apps.photos.permission.GOOGLE_PHOTOS android.permission.RECORD_AUDIO android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.VIBRATE android.permission.CAMERA android.permission.WRITE_SYNC_SETTINGS android.permission.READ_SYNC_SETTINGS android.permission.MODIFY_AUDIO_SETTINGS android.permission.USE_CREDENTIALS android.permission.GET_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.READ_PROFILE android.permission.READ_CONTACTS android.permission.NFC android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.BROADCAST_STICKY com.financial360.nicaifu.permission.RECEIVE_MSG android.permission.WRITE_PHONE_STATE android.permission.REQUEST_INSTALL_PACKAGES android.permission.BIND_JOB_SERVICE android.permission.FLASHLIGHT android.permission.ACCESS_NOTIFICATION_POLICY android.permission.BIND_NOTIFICATION_LISTENER_SERVICE android.permission.BROADCAST_PACKAGE_ADDED android.permission.BROADCAST_PACKAGE_CHANGED android.permission.BROADCAST_PACKAGE_INSTALL android.permission.BROADCAST_PACKAGE_REPLACED android.permission.RESTART_PACKAGES com.financial360.nicaifu.permission.MIPUSH_RECEIVE com.financial360.nicaifu.MIPUSH_RECEIVE android.permission.READ_LOGS com.financial360.nicaifu.push.permission.MESSAGE com.meizu.c2dm.permission.RECEIVE com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

com.financial360.nicaifu.ui.welcome.WelcomeActivity

android.intent.action.MAIN com.financial360.nicaifu.ui.welcome.WelcomeActivity

com.financial360.nicaifu.ui.welcome.GuideAct

com.financial360.nicaifu.ui.base.MainActivity

com.financial360.nicaifu.ui.pdf.PdfViewerActivity

android.intent.action.VIEW

com.financial360.nicaifu.ui.login.LoginActivity

com.financial360.nicaifu.ui.login.PasswordActivity

com.financial360.nicaifu.ui.login.RegisterActivity

com.financial360.nicaifu.ui.authentication.AuthenticationActivity

com.financial360.nicaifu.ui.authentication.IdCardActivity

com.financial360.nicaifu.ui.hq.BuyHqActivity

com.financial360.nicaifu.ui.hq.BuyHqSuccessActivity

com.financial360.nicaifu.ui.buy.BuyActivity

com.financial360.nicaifu.ui.buy.BuySuccessActivity

com.financial360.nicaifu.ui.mine.hq.MineHqActivity

com.financial360.nicaifu.ui.mine.dq.MineDqActivity

com.financial360.nicaifu.ui.bank.BankCardAddActivity

com.financial360.nicaifu.ui.bank.BankCardMainActivity

com.financial360.nicaifu.ui.bank.BankCardChooseActivity

com.financial360.nicaifu.ui.login.ResetPasswordActivity

com.financial360.nicaifu.ui.login.ModifyPasswordActivity

com.financial360.nicaifu.ui.trade_password.SetTradePasswordActivity

com.financial360.nicaifu.ui.trade_password.ResetTradePasswordActivity

com.financial360.nicaifu.ui.withdrawal.WithdrawalActivity

com.financial360.nicaifu.ui.withdrawal.NewWithdrawalActivity

com.financial360.nicaifu.ui.withdrawal.WithdrawSuccessActivity

com.financial360.nicaifu.ui.mine.traderecord.TradeRecordActivity

com.financial360.nicaifu.ui.mine.dc.DCTradeListActivity

com.financial360.nicaifu.ui.mine.dc.DCProfitDetailActivity

com.financial360.nicaifu.ui.mine.fcode.MineRedeemCodeActivity

com.financial360.nicaifu.ui.mine.fund.FundShareHolderActivity

com.financial360.nicaifu.ui.setting.AboutActivity

com.financial360.nicaifu.ui.mine.fund.FundSaleActivity

com.financial360.nicaifu.ui.mine.fund.FundSaleSuccessActivity

com.financial360.nicaifu.ui.mine.fund.FundRiskEvaluationActivity

com.financial360.nicaifu.ui.webview.WebViewActivity

com.financial360.nicaifu.ui.dq.details.BuyDqDetailsActivity

com.financial360.nicaifu.ui.mine.dq.DqMineOrderDetailActivity

com.financial360.nicaifu.ui.mine.dq.PeriodPayDetailActivity

com.financial360.nicaifu.ui.mine.transfer.TransferRecordsListActivity

com.financial360.nicaifu.ui.mine.profit_rank.ProfitRankActivity

com.financial360.nicaifu.ui.setting.SettingActivity

com.financial360.nicaifu.ui.mine.transfer.TransferApplyActivity

com.financial360.nicaifu.ui.mine.transfer.TransferRateSetActivity

com.financial360.nicaifu.ui.mine.transfer.TransferSubmitSuccessActivity

com.financial360.nicaifu.ui.setting.PwdManageActivity

com.financial360.nicaifu.framework.ui.lockpattern.LockPatternActivity

com.financial360.nicaifu.ui.setting.DebugConfigActivity

com.financial360.nicaifu.wxapi.WXEntryActivity

com.financial360.nicaifu.ui.dq.ExpiredActivity

com.financial360.nicaifu.ui.mine.assets.AssetsDetailActivity

com.financial360.nicaifu.ui.transfer.TransferDetailListActivity

com.financial360.nicaifu.ui.eid.EidLoginActivity

com.financial360.nicaifu.ui.dq.DialogActivity

com.financial360.nicaifu.ui.dq.RedeemDateActivity

com.financial360.nicaifu.ui.mine.message.NewMessageActivity

com.financial360.nicaifu.ui.mine.promotion.PromotionActivity

com.financial360.nicaifu.ui.mine.promotion.FuliCenterActivity

com.financial360.nicaifu.ui.bank.ChangeSafeCardActivity

com.financial360.nicaifu.ui.dq.list.NewDqListActivity

com.financial360.nicaifu.ui.transfer.TransferListActivity

com.financial360.nicaifu.ui.mine.transfer.TransferRecordActivity

com.financial360.nicaifu.ui.mine.dq.TradeListActivity

com.financial360.nicaifu.ui.mine.transfer.TransferInfoActivity

com.sensetime.liveness.motion.MotionLivenessActivity

com.financial360.nicaifu.ui.fund.FundWebviewActivity

com.financial360.nicaifu.ui.videorecord.VideoRecordActivity

com.ipaynow.wechatpay.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

com.financial360.nicaifu.ui.base.ExportActivity

android.intent.action.VIEW

com.financial360.nicaifu.ui.base.PushActivity

com.financial360.nicaifu.share.ShareActivity

com.financial360.nicaifu.share.ShareHandlerActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.sobot.chat.conversation.SobotChatActivity

com.sobot.chat.activity.SobotPhotoActivity

com.sobot.chat.activity.WebViewActivity

com.sobot.chat.activity.SobotSkillGroupActivity

com.sobot.chat.activity.SobotPostMsgActivity

com.sobot.chat.activity.SobotConsultationListActivity

com.sobot.chat.activity.SobotPhotoListActivity

com.sobot.chat.activity.SobotCusFieldActivity

com.sobot.chat.activity.SobotPostCategoryActivity

com.sobot.chat.activity.SobotQueryFromActivity

com.sobot.chat.activity.SobotChooseCityActivity

com.sobot.chat.activity.SobotChooseFileActivity

com.sobot.chat.activity.SobotFileDetailActivity

com.sobot.chat.activity.SobotCameraActivity

com.sobot.chat.activity.SobotVideoActivity

com.sobot.chat.activity.SobotTicketDetailActivity

com.sobot.chat.activity.SobotHelpCenterActivity

com.sobot.chat.activity.SobotProblemCategoryActivity

com.sobot.chat.activity.SobotProblemDetailActivity

com.sobot.chat.activity.SobotPostLeaveMsgActivity

com.hmspush.HmsPushActivity

android.intent.action.VIEW

com.opush.OPushActivity

com.financial360.nicaifu.internal

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.netease.nim.avchatkit.activity.AVChatActivity

com.financial360.nicaifu.service.network.DnsUpdateIntentService

com.netease.nimlib.service.NimService

com.netease.nimlib.service.NimService$Aux

com.netease.nimlib.job.NIMJobService

com.netease.nimlib.service.ResponseService

com.sobot.chat.core.channel.SobotTCPServer

com.sobot.chat.server.SobotSessionServer

com.qihoo.pushsdk.cx.PushService

com.qihoo.pushsdk.cx.PushService$InnerService

com.qihoo.pushsdk.keepalive.PushJobService

com.qihoo.pushsdk.keepalive.DaemonService

com.qihoo.pushsdk.cx.PushLocalService

com.qihoo.pushsdk.keepalive.account.AuthenticationService

android.accounts.AccountAuthenticator

com.qihoo.pushsdk.keepalive.account.SyncService

android.content.SyncAdapter

com.qihoo.pushsdk.keepalive.NotificationService

android.service.notification.NotificationListenerService

com.financial360.push.qpush.QPushHandlerService

com.xiaomi.mipush.sdk.PushMessageHandler

com.xiaomi.mipush.sdk.MessageHandleService

com.coloros.mcssdk.PushService

com.coloros.mcs.action.RECEIVE_MCS_MESSAGE

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

com.financial360.push.qpush.getui.GeTuiIntentService

com.financial360.push.qpush.getui.GeTuiPushService

Android Permissions

a9bd9f876e687aca360abe53785b4b08_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.GET_TASKS

android.permission.WRITE_SETTINGS

android.permission.CHANGE_CONFIGURATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.PACKAGE_USAGE_STATS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

com.google.android.apps.photos.permission.GOOGLE_PHOTOS

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.CAMERA

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.USE_CREDENTIALS

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.READ_PROFILE

android.permission.READ_CONTACTS

android.permission.NFC

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BROADCAST_STICKY

com.financial360.nicaifu.permission.RECEIVE_MSG

android.permission.WRITE_PHONE_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BIND_JOB_SERVICE

android.permission.FLASHLIGHT

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES