b04cbba6c4dcdca75c84838dc0131fd8_JaffaCakes118

General

Target
b04cbba6c4dcdca75c84838dc0131fd8_JaffaCakes118
Size 11.1MB
Sample240615-1vh12azepl
SHA256 27a1fd6878e821ad2e7aef31f5316a07dcb1e1af6d0bae1128f67d653fb71e4e
MD5 b04cbba6c4dcdca75c84838dc0131fd8
SHA1 7a36da9873e4944d077606ebc985ce1a8f1eb56c
SHA512 da5fab2524f47ee1d5da1a5392fc92e84d050135e525d549b223b654877682b658229ed395d61e1111d83650c2e65872c0738319edf4d12120eaad0c376ec3aa
SSDEEP 196608:nfUdHFJPspm3bqCkh6w9FSrYsTZpcZgKQPhoy/p+p/X2JYEJt0xsstBM49vCkY/T:fgXPHqCISMsTIZpwhbpM/mRK9n4
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

b04cbba6c4dcdca75c84838dc0131fd8_JaffaCakes118

.apk 11.1MB
tcore.jar

.apk 142KB

b04cbba6c4dcdca75c84838dc0131fd8_JaffaCakes118

SHA256 27a1fd6878e821ad2e7aef31f5316a07dcb1e1af6d0bae1128f67d653fb71e4e
MD5 b04cbba6c4dcdca75c84838dc0131fd8
SHA1 7a36da9873e4944d077606ebc985ce1a8f1eb56c
SHA512 da5fab2524f47ee1d5da1a5392fc92e84d050135e525d549b223b654877682b658229ed395d61e1111d83650c2e65872c0738319edf4d12120eaad0c376ec3aa
SSDEEP 196608:nfUdHFJPspm3bqCkh6w9FSrYsTZpcZgKQPhoy/p+p/X2JYEJt0xsstBM49vCkY/T:fgXPHqCISMsTIZpwhbpM/mRK9n4
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.xhd.toefl

android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.GET_TASKS android.permission.RECORD_AUDIO android.permission.MODIFY_AUDIO_SETTINGS android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.CHANGE_WIFI_STATE android.permission.VIBRATE android.permission.READ_LOGS android.permission.WAKE_LOCK android.permission.FLASHLIGHT android.permission.CALL_PHONE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_FINE_LOCATION android.permission.WRITE_EXTERNAL_STORAGE android.permission.RECEIVE_USER_PRESENT getui.permission.GetuiService android.permission.ACCESS_NETWORK_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.CAMERA com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS com.android.launcher2.permission.READ_SETTINGS com.android.launcher3.permission.READ_SETTINGS com.yulong.android.launcherL.permission.READ_SETTINGS com.meizu.flyme.launcher.permission.READ_SETTINGS com.bbk.launcher2.permission.READ_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.qiku.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.READ_SETTINGS com.zte.mifavor.launcher.permission.READ_SETTINGS com.lenovo.launcher.permission.READ_SETTINGS com.google.android.launcher.permission.READ_SETTINGS com.yulong.android.launcher3.READ_SETTINGS org.adw.launcher.permission.READ_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.lge.launcher.permission.READ_SETTINGS net.qihoo.launcher.permission.READ_SETTINGS org.adwfreak.launcher.permission.READ_SETTINGS org.adw.launcher_donut.permission.READ_SETTINGS com.huawei.launcher3.permission.READ_SETTINGS com.fede.launcher.permission.READ_SETTINGS com.sec.android.app.twlauncher.settings.READ_SETTINGS com.tencent.qqlauncher.permission.READ_SETTINGS com.huawei.launcher2.permission.READ_SETTINGS com.ebproductions.android.launcher.permission.READ_SETTINGS com.nd.android.launcher.permission.READ_SETTINGS com.yulong.android.launcher.permission.READ_SETTINGS com.android.mylauncher.permission.READ_SETTINGS com.ztemt.launcher.permission.READ_SETTINGS cn.nubia.launcher.permission.READ_SETTINGS com.gionee.amisystem.permission.READ_SHORTCUT getui.permission.GetuiService.com.xhd.toefl

Android Permissions

b04cbba6c4dcdca75c84838dc0131fd8_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.FLASHLIGHT

android.permission.CALL_PHONE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_USER_PRESENT

getui.permission.GetuiService

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CAMERA

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.yulong.android.launcherL.permission.READ_SETTINGS

com.meizu.flyme.launcher.permission.READ_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.qiku.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.zte.mifavor.launcher.permission.READ_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.READ_SETTINGS

com.yulong.android.launcher3.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

b04cbba6c4dcdca75c84838dc0131fd8_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.appstream.StreamAppMainActivity

io.dcloud.appstream.StreamAppsAbout

io.dcloud.WebAppActivity

io.dcloud.multiprocess.activity.WebAppActivity1

io.dcloud.appstream.OpenStreamAppTransferActivity

io.dcloud.ProcessMediator

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.xhd.toefl.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

io.dcloud.WebviewActivity

com.ak.torch.shell.landingpage.TorchActivity

io.dcloud.adapter.io.MiniServerService

io.dcloud.streamdownload.DownloadService

io.dcloud.appstream.service.DaemonService

io.dcloud.appstream.service.ProtectService

io.dcloud.multiprocess.service.MultiProcessService

com.igexin.sdk.PushService

io.dcloud.feature.apsGt.GTNormalIntentService

io.dcloud.feature.apsGt.GTNormalPushService

io.dcloud.common.adapter.io.PushReceiver

io.dcloud.common.adapter.io.DownloadReceiver

io.dcloud.appstream.receiver.DaemonReceiver

com.igexin.sdk.PushReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

com.ak.torch.shell.provider.TorchProvider

tcore.jar

Sharing

General

Malware Config

Signatures

File Explorer

b04cbba6c4dcdca75c84838dc0131fd8_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.appstream.StreamAppMainActivity

io.dcloud.appstream.StreamAppsAbout

io.dcloud.WebAppActivity

io.dcloud.multiprocess.activity.WebAppActivity1

io.dcloud.appstream.OpenStreamAppTransferActivity

io.dcloud.ProcessMediator

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.xhd.toefl.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

io.dcloud.WebviewActivity

com.ak.torch.shell.landingpage.TorchActivity

io.dcloud.adapter.io.MiniServerService

io.dcloud.streamdownload.DownloadService

io.dcloud.appstream.service.DaemonService

io.dcloud.appstream.service.ProtectService

io.dcloud.multiprocess.service.MultiProcessService

com.igexin.sdk.PushService

io.dcloud.feature.apsGt.GTNormalIntentService

io.dcloud.feature.apsGt.GTNormalPushService

io.dcloud.common.adapter.io.PushReceiver

io.dcloud.common.adapter.io.DownloadReceiver

io.dcloud.appstream.receiver.DaemonReceiver

com.igexin.sdk.PushReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

com.ak.torch.shell.provider.TorchProvider

tcore.jar

Android Permissions

b04cbba6c4dcdca75c84838dc0131fd8_JaffaCakes118