aed05f8b0d18835ff3a52d3f2102aa73_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
aed05f8b0d18835ff3a52d3f2102aa73_JaffaCakes118
Size 31.5MB
Sample240615-rkscaatbpc
SHA256 212f718cf73f06e19d3485f3155e9336dbf6f7b3170f2f2dc0e5238b4d15c0c9
MD5 aed05f8b0d18835ff3a52d3f2102aa73
SHA1 7d1a4f6ad0577b92b7210ddd97d5c104e7e61a47
SHA512 c81a083deff7fd12079e0255b52f537568d80de6635d511272e1a948af5e24a5158c41b514acde2a3124973c94ea94fb7c5aa59cbc2d6c4c9e3b8a7afa587673
SSDEEP 786432:xDx5ibsHkyCRyL7Wd5eSFlM6y3Aje/YgJGUjUI7:xDxHEyCRyL7ecgKBUa
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

aed05f8b0d18835ff3a52d3f2102aa73_JaffaCakes118

.apk 31.5MB
gdtadv2.jar

.apk 102KB

aed05f8b0d18835ff3a52d3f2102aa73_JaffaCakes118

SHA256 212f718cf73f06e19d3485f3155e9336dbf6f7b3170f2f2dc0e5238b4d15c0c9
MD5 aed05f8b0d18835ff3a52d3f2102aa73
SHA1 7d1a4f6ad0577b92b7210ddd97d5c104e7e61a47
SHA512 c81a083deff7fd12079e0255b52f537568d80de6635d511272e1a948af5e24a5158c41b514acde2a3124973c94ea94fb7c5aa59cbc2d6c4c9e3b8a7afa587673
SSDEEP 786432:xDx5ibsHkyCRyL7Wd5eSFlM6y3Aje/YgJGUjUI7:xDxHEyCRyL7ecgKBUa
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.rcplatform.doubleexposure

com.rcplatform.doubleexposure.FullscreenActivity

android.intent.action.MAIN

com.rcplatform.doubleexposure.SplashActivity

com.rcplatform.doubleexposure.test.TestActivity

com.rcplatform.doubleexposure.MainPicActivity

com.rcplatform.doubleexposure.edit.TemplateCollageActivity

com.rcplatform.doubleexposure.edit.PipCollageActivity

com.rcplatform.doubleexposure.edit.ExposureEditActivity

com.rcplatform.sticker.activity.CommonPluginPreviewActivity

com.rcplatform.sticker.activity.UserPreviewActivity

com.rcplatform.sticker.activity.ExposureShareActivity

com.rcplatform.sticker.activity.GridPreviewActivity

com.rcplatform.sticker.activity.PhotoEditActivity

com.rcplatform.doubleexposure.SelectTemplateActivity

com.rcplatform.doubleexposure.imagespick.LocalImagesPickActivity

com.rcplatform.doubleexposure.edit.EditActivity

com.rcplatform.doubleexposure.edit.FreeEditActivity

com.rcplatform.doubleexposure.sticker.TextStickerActivity

com.rcplatform.doubleexposure.sticker.ChartletsActivity

com.rcplatform.sticker.activity.StickersActivity

com.rcplatform.sticker.activity.StoreActivity

com.rcplatform.sticker.activity.ManagerActivity

com.rcplatform.sticker.activity.CatePreviewActivity

com.rcplatform.sticker.activity.ActionBarRefreshingActivity

com.rcplatform.doubleexposure.sticker.text.TextEditActivity

com.rcplatform.doubleexposure.sticker.text.FontActivity

com.rcplatform.doubleexposure.sticker.FontActivity

com.rcplatform.apps.html.MoreApplicationsHtmlActivity

com.dropbox.client2.android.AuthActivity

android.intent.action.VIEW

com.rcplatform.apps.applist.RCAppListActivity

com.rcplatform.apps.AndroidApplicationsActivity

com.jirbo.adcolony.AdColonyOverlay

com.jirbo.adcolony.AdColonyFullscreen

com.jirbo.adcolony.AdColonyBrowser

com.applovin.adview.AppLovinInterstitialActivity

com.applovin.adview.AppLovinConfirmationActivity

com.vungle.publisher.FullScreenAdActivity

com.heyzap.sdk.ads.HeyzapInterstitialActivity

com.heyzap.sdk.ads.HeyzapVideoActivity

com.heyzap.sdk.ads.HeyzapProxyActivity

com.heyzap.sdk.ads.VASTActivity

com.heyzap.sdk.ads.MediationTestActivity

com.smaato.soma.interstitial.InterstitialActivity

com.smaato.soma.video.VASTAdActivity

com.smaato.soma.ExpandedBannerActivity

com.google.android.gms.ads.AdActivity

com.facebook.ads.InterstitialAdActivity

com.unity3d.ads.android.view.UnityAdsFullscreenActivity

com.qq.e.ads.ADActivity

com.vungle.publisher.VideoFullScreenAdActivity

com.vungle.publisher.MraidFullScreenAdActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

com.RCPlatformSDK.instagram.InstagramLoginActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.facebook.FacebookActivity

com.facebook.CustomTabActivity

Android Permissions

aed05f8b0d18835ff3a52d3f2102aa73_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_COARSE_UPDATES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RESTART_PACKAGES

android.permission.GET_TASKS

com.google.android.providers.gsf.permission.READ_GSERVICES

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.rcplatform.doubleexposure.permission.C2D_MESSAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

Sharing

General

Malware Config

Signatures

File Explorer

aed05f8b0d18835ff3a52d3f2102aa73_JaffaCakes118

com.rcplatform.doubleexposure.FullscreenActivity

com.rcplatform.doubleexposure.SplashActivity

com.rcplatform.doubleexposure.test.TestActivity

com.rcplatform.doubleexposure.MainPicActivity

com.rcplatform.doubleexposure.edit.TemplateCollageActivity

com.rcplatform.doubleexposure.edit.PipCollageActivity

com.rcplatform.doubleexposure.edit.ExposureEditActivity

com.rcplatform.sticker.activity.CommonPluginPreviewActivity

com.rcplatform.sticker.activity.UserPreviewActivity

com.rcplatform.sticker.activity.ExposureShareActivity

com.rcplatform.sticker.activity.GridPreviewActivity

com.rcplatform.sticker.activity.PhotoEditActivity

com.rcplatform.doubleexposure.SelectTemplateActivity

com.rcplatform.doubleexposure.imagespick.LocalImagesPickActivity

com.rcplatform.doubleexposure.edit.EditActivity

com.rcplatform.doubleexposure.edit.FreeEditActivity

com.rcplatform.doubleexposure.sticker.TextStickerActivity

com.rcplatform.doubleexposure.sticker.ChartletsActivity

com.rcplatform.sticker.activity.StickersActivity

com.rcplatform.sticker.activity.StoreActivity

com.rcplatform.sticker.activity.ManagerActivity

com.rcplatform.sticker.activity.CatePreviewActivity

com.rcplatform.sticker.activity.ActionBarRefreshingActivity

com.rcplatform.doubleexposure.sticker.text.TextEditActivity

com.rcplatform.doubleexposure.sticker.text.FontActivity

com.rcplatform.doubleexposure.sticker.FontActivity

com.rcplatform.apps.html.MoreApplicationsHtmlActivity

com.dropbox.client2.android.AuthActivity

com.rcplatform.apps.applist.RCAppListActivity

com.rcplatform.apps.AndroidApplicationsActivity

com.jirbo.adcolony.AdColonyOverlay

com.jirbo.adcolony.AdColonyFullscreen

com.jirbo.adcolony.AdColonyBrowser

com.applovin.adview.AppLovinInterstitialActivity

com.applovin.adview.AppLovinConfirmationActivity

com.vungle.publisher.FullScreenAdActivity

com.heyzap.sdk.ads.HeyzapInterstitialActivity

com.heyzap.sdk.ads.HeyzapVideoActivity

com.heyzap.sdk.ads.HeyzapProxyActivity

com.heyzap.sdk.ads.VASTActivity

com.heyzap.sdk.ads.MediationTestActivity

com.smaato.soma.interstitial.InterstitialActivity

com.smaato.soma.video.VASTAdActivity

com.smaato.soma.ExpandedBannerActivity

com.google.android.gms.ads.AdActivity

com.facebook.ads.InterstitialAdActivity

com.unity3d.ads.android.view.UnityAdsFullscreenActivity

com.qq.e.ads.ADActivity

com.vungle.publisher.VideoFullScreenAdActivity

com.vungle.publisher.MraidFullScreenAdActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

com.RCPlatformSDK.instagram.InstagramLoginActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.facebook.FacebookActivity

com.facebook.CustomTabActivity

com.rcplatform.doubleexposure.net.DownLoadFileService

com.rcplatform.doubleexposure.pushservice.LocalPushService

com.google.android.gcm.GCMIntentService

com.google.android.gcm.InAppGcmService

com.google.android.gcm.RCPushService

com.google.android.gms.analytics.AnalyticsService

com.google.android.gms.analytics.CampaignTrackingService

com.google.android.gcm.InAppGcmService

com.qq.e.comm.DownloadService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.gms.measurement.AppMeasurementService

com.google.firebase.iid.FirebaseInstanceIdService

com.rcplatform.doubleexposure.pushservice.ScreenOnBroadCast

com.google.android.gcm.GCMBroadcastReceiver

com.heyzap.sdk.ads.PackageAddedReceiver

com.google.android.gms.analytics.AnalyticsReceiver