b0b18a4a39daf5179e854559510957e3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b0b18a4a39daf5179e854559510957e3_JaffaCakes118
Size 10.6MB
Sample240615-3k7bzstcmp
SHA256 3d9c63e00e74eb687ae56b76146974bd78158c4862446382a8c2cad9a11e7a72
MD5 b0b18a4a39daf5179e854559510957e3
SHA1 db99533b2d4f41d16da97a59c88ec5fb84331214
SHA512 a7ef890e1dc0f27ca17e71fa3fee26e48f7777f4e1087f5f44529b4d03c025db009310892ded876d74b62a827025d4eb93fff07d88962ed9764a3be3f4cdec6c
SSDEEP 196608:6jubNz3aTqMa+ZwYjImhKTjtu1NjSXTKsPB8QC2bFRRG2io3tlz:IWNz3aTaUjZqq4XTKSB8QTk2i4b
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

b0b18a4a39daf5179e854559510957e3_JaffaCakes118

.apk 10.6MB
APPayAssistEx.apk

.apk 4.0MB

b0b18a4a39daf5179e854559510957e3_JaffaCakes118

SHA256 3d9c63e00e74eb687ae56b76146974bd78158c4862446382a8c2cad9a11e7a72
MD5 b0b18a4a39daf5179e854559510957e3
SHA1 db99533b2d4f41d16da97a59c88ec5fb84331214
SHA512 a7ef890e1dc0f27ca17e71fa3fee26e48f7777f4e1087f5f44529b4d03c025db009310892ded876d74b62a827025d4eb93fff07d88962ed9764a3be3f4cdec6c
SSDEEP 196608:6jubNz3aTqMa+ZwYjImhKTjtu1NjSXTKsPB8QC2bFRRG2io3tlz:IWNz3aTaUjZqq4XTKSB8QTk2i4b
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm

com.yunpos.haojingapp

com.yunpos.haojingapp.homepage.SplashActivity

android.intent.action.MAIN android.intent.action.VIEW

com.yunpos.haojingapp.homepage.HomeActivity

com.yunpos.haojingapp.shopping.ShoppingClassificationActivity

com.yunpos.haojingapp.shopping.ShoppingSearchActivity

com.yunpos.haojingapp.shopping.ShoppingGoodsDetailActivity

com.yunpos.haojingapp.mine.MineLoginActivity

com.yunpos.haojingapp.mine.MineRegisterFirstActivity

com.yunpos.haojingapp.mine.MineRegisterSecondActivity

com.yunpos.haojingapp.mine.MineForgetPwdFirstActivity

com.yunpos.haojingapp.mine.MineForgetPwdSecondActivity

com.yunpos.haojingapp.mine.MineBindPhoneActivity

com.yunpos.haojingapp.community.CommunitySearchActivity

com.yunpos.haojingapp.mine.MineSetPwdActivity

com.yunpos.haojingapp.mine.post.MinePostActivity

com.yunpos.haojingapp.mine.favorite.MineFavoriteActivity

com.yunpos.haojingapp.community.CommunityDetailActivity

com.yunpos.haojingapp.mine.coupon.MineCouponActivity

com.yunpos.haojingapp.mine.order.MineOrderActivity

com.yunpos.haojingapp.community.CommunityZhuantiActivity

com.yunpos.haojingapp.community.CommunityDetailReplyActivity

com.yunpos.haojingapp.community.CommunityDianzanlistActivity

com.yunpos.haojingapp.community.CommunityReportActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterActivity

com.yunpos.haojingapp.photoalbumshow.PhotoAlbumShowActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterModifyNameActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterModifySexActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterModifyBirthdayActivity

com.yunpos.haojingapp.community.CommunityPostActivity

com.yunpos.haojingapp.shopping.ShoppingGoodsListActivity

com.yunpos.haojingapp.shopping.ShoppingAppraiseActivity

com.yunpos.haojingapp.shopping.ShoppingCouponActivity

com.yunpos.haojingapp.shopping.ShoppingTwoLevelPageActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterModifyStationActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterModifyPhoneFirstActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterModifyPhoneSecondActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterMyAddressActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterModifyAddressAddActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterIDcardActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterIDcardCheckFirstActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterIDcardCheckSecondActivity

com.yunpos.haojingapp.mine.order.MineOrderAfterSellActivity

com.yunpos.haojingapp.mine.order.MineOrderAfterSellDetailActivity

com.yunpos.haojingapp.mine.order.MineOrderDetailActivity

com.yunpos.haojingapp.mine.order.MineOrderUseAfterSellActivity

com.yunpos.haojingapp.shopping.ShoppingGroupSaleActivity

com.yunpos.haojingapp.shopping.ShoppingGroupTwoLevelPageActivity

com.yunpos.haojingapp.mine.MineHelpCenterActivity

com.yunpos.haojingapp.mine.MineHelpCenterDetailActivity

com.yunpos.haojingapp.mine.MineSettingActivity

com.yunpos.haojingapp.mine.MineAccountSafeActivity

com.yunpos.haojingapp.shopping.ShoppingSellerHomepageActivity

com.yunpos.haojingapp.mine.MineModifyPwdFirstActivity

com.yunpos.haojingapp.mine.MineModifyPwdSecondActivity

com.yunpos.haojingapp.mine.MineHelpFeedbackActivity

com.yunpos.haojingapp.mine.MineOpinionActivity

com.yunpos.haojingapp.mine.MineAboutImageActivity

com.yunpos.haojingapp.mine.MineUserPactActivity

com.yunpos.haojingapp.shopping.ShoppingSellerGoodsSearchActivity

com.yunpos.haojingapp.mine.order.MineOrderSelectBankActivity

com.yunpos.haojingapp.mine.order.MineOrderWritePingjiaActivity

com.yunpos.haojingapp.mine.order.MineOrderPingjiaSuccessActivity

com.yunpos.haojingapp.mine.order.MineOrderPingjiaDetailActivity

com.yunpos.haojingapp.mine.order.MineOrderConfirmActivity

com.yunpos.haojingapp.chat.ChatSystemMessageActivity

com.yunpos.haojingapp.chat.ChatOfficialMessageActivity

com.yunpos.haojingapp.chat.ChatOfficialMessageDetailActivity

com.yunpos.haojingapp.mine.order.MineOrderChoiseCouponActivity

com.yunpos.haojingapp.chat.ChatSetupMessageActivity

com.yunpos.haojingapp.homepage.ViewPagerGuideActivity

com.yunpos.haojingapp.mine.order.MineOrderUploadPayProofActivity

com.yunpos.haojingapp.mine.order.MineOrderLookPayProofActivity

com.yunpos.haojingapp.mine.order.MineOrderSubmitSuccessActivity

com.yunpos.haojingapp.mine.order.MineOrderBuySuccessActivity

com.yunpos.haojingapp.mine.order.MineOrderConfirmMsgActivity

com.yunpos.haojingapp.mine.recommendprize.MineRecommendPrizeActivity

com.yunpos.haojingapp.mine.recommendprize.MineRecommendPrizeInviteListActivity

com.yunpos.haojingapp.mine.MineRegisterSuccessActivity

com.yunpos.haojingapp.homepage.PhotoViewerActivity

com.yunpos.haojingapp.homepage.VersionUpdateActivity

com.yunpos.haojingapp.homepage.ShoppingcartActivity

com.yunpos.haojingapp.homepage.WebViewActivity

com.yunpos.haojingapp.mine.MineDescriptionActivity

com.yunpos.haojingapp.advertising.AdvertisingReserveAdSelectOtherTimeActivity

com.yunpos.haojingapp.advertising.AdvertisingReserveAdActivity

com.yunpos.haojingapp.advertising.AdvertisingReserveAdSelectLadderActivity

com.yunpos.haojingapp.advertising.AdvertisingPaymentOrderActivity

com.yunpos.haojingapp.advertising.AdvertisingPaymentOrderSuccessActivity

com.yunpos.haojingapp.advertising.AdvertisingCityListActivity

com.yunpos.haojingapp.advertising.AdvertisingSearchActivity

com.yunpos.haojingapp.advertising.AdvertisingDetailActivity

com.yunpos.haojingapp.mine.message.MineMessageActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalCenterModifyAddressSelActivity

com.yunpos.haojingapp.mine.haobi.MineHaobiActivity

com.yunpos.haojingapp.mine.coupon.MineReceiveCouponActivity

com.yunpos.haojingapp.mine.advertising.MineAdvertisingActivity

com.yunpos.haojingapp.mine.advertising.MineAdvertisingOrderDetailActivity

com.yunpos.haojingapp.mine.order.MineOrderWaitPingjiaActivity

com.yunpos.haojingapp.shopping.ShoppingGoodsZhuantiActivity

com.yunpos.haojingapp.shopping.ShoppingAddressListActivity

com.yunpos.haojingapp.shopping.ShoppingClassificationListActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalSetZhifuPwdActivity

com.yunpos.haojingapp.mine.personalcenter.MinePersonalModifyZhifuPwdActivity

com.yunpos.haojingapp.homepage.PleaseExpectActivity

com.yunpos.haojingapp.mine.chargemoney.MineChargeMoneyActivity

com.yunpos.haojingapp.mine.chargemoney.MineChargeMoneyPaymentDetailsActivity

com.yunpos.haojingapp.mine.chargemoney.MineChargeMoneyExplainActivity

com.yunpos.haojingapp.lehuo.LehuoSearchActivity

com.yunpos.haojingapp.lehuo.LehuoAroundStoreActivity

com.yunpos.haojingapp.lehuo.LehuoStoreDetailActivity

com.yunpos.haojingapp.lehuo.LehuoDiscountedDetailActivity

com.yunpos.haojingapp.lehuo.LehuoDiscountedBuyActivity

com.yunpos.haojingapp.mine.lehuoorder.MineLehuoOrderActivity

com.yunpos.haojingapp.mine.lehuoorder.MineLehuoOrderDetailActivity

com.yunpos.haojingapp.mine.lehuoorder.MineLehuoOrderPingjiaActivity

com.yunpos.haojingapp.wxapi.WXEntryActivity

com.umeng.qq.tencent.AuthActivity

android.intent.action.VIEW

com.umeng.qq.tencent.AssistActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.yunpos.haojingapp.wxapi.WXPayEntryActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

APPayAssistEx.apk

SHA256 9a70a8109a9850ae8a0079292628e07433c20c40978031c1622f38e3f0580866
MD5 3bfb3edc54b8d32dafd5fe9ed5615319
SHA1 552465aa16d30e433d09feaeafa05eabce2f74a3
SHA512 6bfbc611341bd1b15bde892c73887b092af5b012644f9441073a09078fb412ff519da407a55c493113d645216b85846dc1ac11f94161f469c9d4fdb5daadd967
SSDEEP 98304:IOjG3/bhysOBt9Ob7sHTlwMamz+UcYZLEjUjvgo:PjubNz3aTqMa+ZwYjIo
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.allinpay.appayassistex

com.allinpay.appayassistex.TestPackage.TestController

com.allinpay.appayassistex.controller.WelcomeController

intent.allinpay.appayassistex

com.allinpay.appayassistex.controller.CardListController

com.allinpay.appayassistex.controller.CardNoInputController

com.allinpay.appayassistex.controller.ForgetPwdController

com.allinpay.appayassistex.controller.PayResultController

com.allinpay.appayassistex.controller.AuthenticPayController

com.allinpay.appayassistex.controller.FirstQuickPayController

com.allinpay.appayassistex.controller.QuickPayController

com.allinpay.appayassistex.controller.SetPayPwdController

com.allinpay.appayassistex.controller.DeleteCardListController

com.allinpay.appayassistex.controller.DeleteCardController

com.allinpay.appayassistex.controller.WebViewController

com.allinpay.appayassistex.controller.BaseDescriptionController

com.allinpay.appayassistex20.controller.CardNoInputController20

com.allinpay.appayassistex20.controller.AuthenticPayController20

com.allinpay.appayassistex20.controller.DeleteCardController20

com.allinpay.appayassistex20.controller.PayTypeSelectController

com.allinpay.appayassistex20.controller.SignQuickPayCardController

com.allinpay.appayassistex20.controller.QuickPayController20

com.allinpay.appayassistex.controller.BindCardNoInputController

com.allinpay.appayassistex.controller.AbroadCardInfoController

com.allinpay.appayassistex.controller.BillingInfoController

com.allinpay.appayassistex.controller.CountryListController

com.allinpay.appayassistex.facepay.controller.InputCardController

com.allinpay.appayassistex.facepay.controller.DeleteCardwithPayPwdController

com.allinpay.appayassistex.facepay.controller.ResetPayPwdController

com.allinpay.appayassistex.facepay.controller.PayPwdInputController

com.allinpay.appayassistex.facepay.controller.VerifyPayPwdController

com.allinpay.appayassistex.facepay.controller.ModifyPayPwdController

com.allinpay.appayassistex.facepay.controller.AddBankCardController

com.allinpay.appayassistex.facepay.controller.BasePayInfoController

com.allinpay.appayassistex.facepay.controller.FacePayCardListController

com.allinpay.appayassistex.facepay.controller.CheckIdController

com.allinpay.appayassistex.facepay.controller.CheckFaceController

com.allinpay.appayassistex.auth.controller.AuthenticateController

com.allinpay.appayassistex.auth.controller.AuthCardNoInputController

com.allinpay.appayassistex.nofacepay.controller.NofaceVerifyPayPwdController

com.allinpay.appayassistex.nofacepay.controller.NofaceResetPayPwdController

com.allinpay.appayassistex.nofacepay.controller.NofacePayPwdInputController

com.allinpay.appayassistex.nofacepay.controller.NofaceModifyPayPwdController

com.allinpay.appayassistex.nofacepay.controller.NofaceInputCardController

com.allinpay.appayassistex.nofacepay.controller.NofacePayController

com.allinpay.appayassistex.nofacepay.controller.NofacePayCardListController

com.allinpay.appayassistex.nofacepay.controller.NofacePayQueryCardListController

com.allinpay.appayassistex.nofacepay.controller.NofaceDeleteCardwithPayPwdController

com.allinpay.appayassistex.nofacepay.controller.NofaceAddBankCardController

com.hisign.facelivedetection.LiveDetectActivity

Android Permissions

b0b18a4a39daf5179e854559510957e3_JaffaCakes118

Permissions

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.yunpos.haojingapp.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_WIFI_STATE

com.android.launcher.permission.READ_SETTINGS

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_NETWORK_STATE