aa1af55a2d4ab868774f5328f9362aa0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
aa1af55a2d4ab868774f5328f9362aa0_JaffaCakes118
Size 22.0MB
Sample240614-rhc5ksteqe
SHA256 db23941be74cf2790d0636a99ceea2c81070c7cba5c0e293f2a8e2a7c77a1d96
MD5 aa1af55a2d4ab868774f5328f9362aa0
SHA1 59a286feba55361717050e3efe748b19eeb34b6a
SHA512 0cc56c459cbe1bde7070f5f8958a588bcd39cc1c9f45913618ec30b2761ecd47552b334d356e843263fa2005e6550e2b82385968c4a47f3e4d791febd5aab68c
SSDEEP 393216:eQXpLUu1y5seSdO2DCjniRHlbF74M+r2tF9YtKaNdg0Fr91sTG:eWpr1as/O2DBZv7lF9ZLyh1sTG
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

aa1af55a2d4ab868774f5328f9362aa0_JaffaCakes118

.apk 22.0MB

aa1af55a2d4ab868774f5328f9362aa0_JaffaCakes118

SHA256 db23941be74cf2790d0636a99ceea2c81070c7cba5c0e293f2a8e2a7c77a1d96
MD5 aa1af55a2d4ab868774f5328f9362aa0
SHA1 59a286feba55361717050e3efe748b19eeb34b6a
SHA512 0cc56c459cbe1bde7070f5f8958a588bcd39cc1c9f45913618ec30b2761ecd47552b334d356e843263fa2005e6550e2b82385968c4a47f3e4d791febd5aab68c
SSDEEP 393216:eQXpLUu1y5seSdO2DCjniRHlbF74M+r2tF9YtKaNdg0Fr91sTG:eWpr1as/O2DBZv7lF9ZLyh1sTG
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.xgbuy.xg

com.xgbuy.xg.activities.MainActivity_

com.xgbuy.xg.activities.RegisterActivity_

com.xgbuy.xg.activities.LoginActivity_

com.xgbuy.xg.activities.FastAndPwdLoginActivity_

com.xgbuy.xg.activities.PresellActivity_

com.xgbuy.xg.activities.ForgetPasswordActivity_

com.xgbuy.xg.activities.ResetPasswordActivity_

com.xgbuy.xg.activities.AboutusActivity_

com.xgbuy.xg.activities.SettingActivity_

com.xgbuy.xg.activities.PersonalSettingActivity_

com.xgbuy.xg.activities.SuperVIPActivity_

com.xgbuy.xg.activities.ChangePhoneActivity_

com.xgbuy.xg.activities.ChangePwdActivity_

com.xgbuy.xg.activities.FeedbackActivity_

com.xgbuy.xg.activities.AddAdressActivity_

com.xgbuy.xg.activities.AfterServerActivity_

me.iwf.photopicker.PhotoPickerActivity

me.iwf.photopicker.PhotoPagerActivity

com.xgbuy.xg.activities.RefundApplyActivity_

com.xgbuy.xg.activities.EditRefundActivity_

com.xgbuy.xg.activities.ComplainActivity_

com.xgbuy.xg.activities.ComplainQARActivity_

com.xgbuy.xg.activities.NewUserShareActivity_

com.xgbuy.xg.activities.WebActivity_

cn.sharesdk.tencent.qq.ReceiveActivity

android.intent.action.VIEW

com.mob.tools.MobUIShell

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.xgbuy.xg.wxapi.WXEntryActivity

com.xgbuy.xg.wxapi.WXPayEntryActivity

com.xgbuy.xg.activities.UpdatePageActivity_

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.xgbuy.xg.activities.PermissionsActivity

com.xgbuy.xg.activities.MyOrderActivity_

com.xgbuy.xg.activities.BindPhoneActivity_

com.xgbuy.xg.activities.DailyActivity_

com.xgbuy.xg.activities.FlashActivity_

android.intent.action.MAIN

com.xgbuy.xg.activities.JupshReceiveActivity_

android.intent.action.VIEW android.intent.action.VIEW

com.xgbuy.xg.activities.HuaweiReceiveActivity_

android.intent.action.VIEW

com.xgbuy.xg.activities.OppoReceiveActivity_

com.xgbuy.xg.activities.OrderDetailActivity_

com.xgbuy.xg.activities.ShowPhotoAcitivity_

com.xgbuy.xg.activities.SureOrderActivity_

com.xgbuy.xg.activities.MessageActivity_

com.xgbuy.xg.activities.LoginNewActivity_

douyin.callback.action

com.xgbuy.xg.activities.SettingPasswordActivity_

com.xgbuy.xg.activities.TestMemoryActivity_

com.xgbuy.xg.activities.ShareAppActivity_

cn.xiaoneng.activity.ChatActivity

cn.xiaoneng.activity.LeaveMsgActivity

cn.xiaoneng.activity.ShowCameraActivity

cn.xiaoneng.activity.ShowAlbumActivity

cn.xiaoneng.activity.ValuationActivity

cn.xiaoneng.activity.ShowPictureActivity

cn.xiaoneng.activity.XNExplorerActivity

cn.xiaoneng.video.VideoPreviewActivity

cn.xiaoneng.video.RecordVideoActivity

cn.xiaoneng.video.XNVideoPlayer

com.xgbuy.xg.activities.TestChatActivity

com.xgbuy.xg.activities.PlatformInterventionActivity_

com.xgbuy.xg.activities.InterventionDetailActivity_

com.xgbuy.xg.activities.MoreConsultContentActivity_

com.xgbuy.xg.activities.LiuYanActivity_

com.xgbuy.xg.activities.AddCommentActivity_

com.xgbuy.xg.activities.MyCommentActivity_

com.xgbuy.xg.activities.AppendCommentActivity_

com.xgbuy.xg.activities.LuckAdrwActivity_

com.xgbuy.xg.activities.ShowHtmlJsonActivity_

com.xgbuy.xg.activities.DepositSureOrderActivity_

com.xgbuy.xg.activities.FragmentShowActivity_

com.xgbuy.xg.activities.RuleActivity_

com.xgbuy.xg.activities.RuleListActivity_

com.xgbuy.xg.activities.TaobaokeActivity_

com.xgbuy.xg.activities.AliTaokeWebViewProxyActivity_

com.xgbuy.xg.activities.UserSafeActivity_

com.xgbuy.xg.activities.CancleUserActivity_

com.xgbuy.xg.activities.CancleConditionActivity_

com.xgbuy.xg.activities.CancleUserResultAcitivty_

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.xgbuy.xg.activities.TaoBaoKeGoodsDetailActivity_

com.xgbuy.xg.activities.MyCenterCustomerServiceActivity_

com.xgbuy.xg.activities.MyCenterGoShoppingActivity_

com.xgbuy.xg.activities.MyCenterPlatformRuleActivity_

com.xgbuy.xg.activities.MechatActivity_

com.xgbuy.xg.activities.ShoppingcarActivity_

com.xgbuy.xg.activities.ProductDetailActivity_

com.xgbuy.xg.activities.CollectActivity_

com.xgbuy.xg.activities.MechatInfoActivity_

com.xgbuy.xg.activities.TrailerItemActivity_

com.xgbuy.xg.activities.MechatSearchActivity_

com.xgbuy.xg.activities.HomeTaobaoSearchActivity_

com.xgbuy.xg.activities.HomeTaobaoListActivity_

com.xgbuy.xg.activities.VerifyPhoneActivity_

com.xgbuy.xg.activities.VerifyWxinActivity_

com.xgbuy.xg.bdopen.BdEntryActivity

com.xgbuy.xg.activities.LogisticsDetailActivity_

com.xgbuy.xg.activities.NewBrandGroupActivity_

com.xgbuy.xg.activities.NewUserSeckillActivity_

com.xgbuy.xg.activities.memberShareProfit.NewStarActivity_

com.xgbuy.xg.activities.memberShareProfit.PromoteOrderActivity_

com.xgbuy.xg.activities.memberShareProfit.CashWithdrawalActivity_

com.xgbuy.xg.activities.memberShareProfit.DetailRecordActivity_

com.xgbuy.xg.activities.memberShareProfit.MyFriendsActivity_

com.xgbuy.xg.activities.memberShareProfit.EnterInviteCodeActivity_

com.xgbuy.xg.activities.memberShareProfit.InviteFriendActivity_

com.xgbuy.xg.activities.memberShareProfit.GoodRecommendationActivity_

com.xgbuy.xg.activities.memberShareProfit.NewStarPlanOpenRecordActivity_

com.xgbuy.xg.activities.memberShareProfit.TaskProgressActivity_

com.xgbuy.xg.activities.memberShareProfit.FriendHomeActivity_

com.xgbuy.xg.activities.memberShareProfit.DynamicShopDetailActivity_

com.xgbuy.xg.activities.memberShareProfit.OthersNoticeAndFanActivity_

com.xgbuy.xg.activities.NewBrandGroupSecondLevelActivity_

com.ali.auth.third.ui.LoginActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.huawei.hms.activity.BridgeActivity

com.vivo.push.sdk.LinkProxyClientActivity

com.alibaba.baichuan.trade.biz.auth.AlibcAuthActivity

com.alibaba.baichuan.android.trade.ui.AlibcWebViewActivity

COM_TAOBAO_TAE_SDK_TRADE_WEB_VIEW_ACTION

com.alibaba.baichuan.android.trade.ui.AlibcBackActivity

android.intent.action.VIEW

com.ali.auth.third.ui.webview.BaseWebViewActivity

com.ali.auth.third.ui.LoginWebViewActivity

com.ali.auth.third.accountlink.ui.BindResultActivity

com.ali.auth.third.accountlink.ui.UnbindWebViewActivity

com.ali.auth.third.ui.QrLoginConfirmActivity

com.ali.auth.third.ui.QrLoginActivity

com.alibaba.alibclinkpartner.ui.ALPWebviewActivity

com.alibaba.alibclinkpartner.ui.ALPCallbackActivity

com.alibaba.alibclinkpartner.ui.ALPEntranceActivity

com.alibaba.intent.action.GETWAY

com.zhihu.matisse.ui.MatisseActivity

com.zhihu.matisse.internal.ui.AlbumPreviewActivity

com.zhihu.matisse.internal.ui.SelectedPreviewActivity

com.xgbuy.xg.receivers.MyReceiver

cn.jpush.android.intent.REGISTRATION cn.jpush.android.intent.MESSAGE_RECEIVED cn.jpush.android.intent.NOTIFICATION_RECEIVED cn.jpush.android.intent.NOTIFICATION_OPENED cn.jpush.android.intent.CONNECTION

com.xgbuy.xg.receivers.TagandAliasReceiver

cn.jpush.android.intent.RECEIVE_MESSAGE

com.xgbuy.xg.receivers.NetWorkChangReceiver

android.net.conn.CONNECTIVITY_CHANGE android.net.wifi.WIFI_STATE_CHANGED android.net.wifi.STATE_CHANGE

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

cn.jpush.android.service.AlarmReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

cn.jpush.android.service.PluginXiaomiPlatformsReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.MESSAGE_ARRIVED com.xiaomi.mipush.ERROR

cn.jpush.android.service.PluginHuaweiPlatformsReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE com.huawei.android.push.intent.CLICK com.huawei.intent.action.PUSH_STATE

cn.jpush.android.service.PluginMeizuPlatformsReceiver

com.meizu.flyme.push.intent.MESSAGE com.meizu.flyme.push.intent.REGISTER.FEEDBACK com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK com.meizu.c2dm.intent.REGISTRATION com.meizu.c2dm.intent.RECEIVE

cn.jpush.android.service.PluginVivoMessageReceiver

com.vivo.pushclient.action.RECEIVE

Android Permissions

aa1af55a2d4ab868774f5328f9362aa0_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_LOGS

android.permission.CHANGE_NETWORK_STATE

android.permission.NFC

org.simalliance.openmobileapi.SMARTCARD

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

com.xgbuy.xg.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.xgbuy.xg.permission.MIPUSH_RECEIVE

com.meizu.c2dm.permission.RECEIVE

com.xgbuy.xg.permission.C2D_MESSAGE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

android.permission.RUN_INSTRUMENTATION

android.permission.READ_SETTINGS

android.permission.CHANGE_CONFIGURATION