b5b3f4e2cc6fe7dd29bb35a6024dc628_JaffaCakes118

General

Target
b5b3f4e2cc6fe7dd29bb35a6024dc628_JaffaCakes118
Size 19.0MB
Sample240616-29t8aaxbrn
SHA256 00497a222773c0a54d212f5ca9cbfafd2f620914497c375ee0331791eda14593
MD5 b5b3f4e2cc6fe7dd29bb35a6024dc628
SHA1 4e5706c9434011623ad59a9a5f2fbfc4705b422a
SHA512 2008469136acd5b6f615ce140e894446046c5eb3e4e5c71234c91406bd46a8a5eb84962bca8112b463a94ac4ff0e4a35256411007e074cc8025b73410e232455
SSDEEP 393216:aWrpIoV2KW0Mp0+ETgmABWUuImKGXFdmBQyz/L8/Yhm1I4c:VpI4/4yrABWVImKmHKQyzzBhoJc
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

b5b3f4e2cc6fe7dd29bb35a6024dc628_JaffaCakes118

.apk 19.0MB
GH.data

.apk 1.6MB

b5b3f4e2cc6fe7dd29bb35a6024dc628_JaffaCakes118

SHA256 00497a222773c0a54d212f5ca9cbfafd2f620914497c375ee0331791eda14593
MD5 b5b3f4e2cc6fe7dd29bb35a6024dc628
SHA1 4e5706c9434011623ad59a9a5f2fbfc4705b422a
SHA512 2008469136acd5b6f615ce140e894446046c5eb3e4e5c71234c91406bd46a8a5eb84962bca8112b463a94ac4ff0e4a35256411007e074cc8025b73410e232455
SSDEEP 393216:aWrpIoV2KW0Mp0+ETgmABWUuImKGXFdmBQyz/L8/Yhm1I4c:VpI4/4yrABWVImKmHKQyzzBhoJc
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.tribe.nsws.activity

GH.data

SHA256 6da698faf823ce4cd97d214609d54291da5e3a18561c9a648cba8bbe47595f02
MD5 e6647c7982823f7e0c49bf9de9e8ca1c
SHA1 56669c77eb3bbb867a470d623496a555d935aa1b
SHA512 bcfc2924ee57b898475fd5c3fb8c9cb001ad2ebca717e60f384720c05441fef4ec00ad777d144c9d15dad8c2e34e3b8b78e067bd1b72a8dc59c2f20d5002b05b
SSDEEP 24576:ygaJGEBLRACbCG4jh4k3QiDkrsPTVwogNeAranxYfks:ygaJGENRACubjh4k3Q0WmHgNlr0xwks
MD5 SHA1 SHA512 SSDEEP

android

cn.emagsoftware.gamehall

Android Permissions

b5b3f4e2cc6fe7dd29bb35a6024dc628_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.SYSTEM_ALERT_WINDOW

b5b3f4e2cc6fe7dd29bb35a6024dc628_JaffaCakes118

cn.cmgame.billing.api.GameOpenActivity

com.tribe.nsws.activity.TSZDActivity

GH.data

.GameHallShowcase

.ui.WelcomeActivity

.ui.MainActivity

.ui.NewProcessActivity

.ui.UpdateActivity

.ui.LoginUserActivity

.ui.RegisterUserActivity

.ui.Html5Activity

.ui.DialogActivity

.service.GameHallService

.service.ServiceReceiver

Sharing

General

Malware Config

Signatures

File Explorer

b5b3f4e2cc6fe7dd29bb35a6024dc628_JaffaCakes118

cn.cmgame.billing.api.GameOpenActivity

com.tribe.nsws.activity.TSZDActivity

GH.data

.GameHallShowcase

.ui.WelcomeActivity

.ui.MainActivity

.ui.NewProcessActivity

.ui.UpdateActivity

.ui.LoginUserActivity

.ui.RegisterUserActivity

.ui.Html5Activity

.ui.DialogActivity

.service.GameHallService

.service.ServiceReceiver

Android Permissions

b5b3f4e2cc6fe7dd29bb35a6024dc628_JaffaCakes118