b1f804a3a9b16f0df895bd80da6d20e0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b1f804a3a9b16f0df895bd80da6d20e0_JaffaCakes118
Size 16.5MB
Sample240616-ge3wqa1gre
SHA256 7869431ca2ba227e8b8a49d33f5b3f5c4dc575e28570696aa71803805403006a
MD5 b1f804a3a9b16f0df895bd80da6d20e0
SHA1 e88148f66ae7cd71210fa3e845929c1110156d02
SHA512 c5dda6115354bfb4018a74ec9135582fa5c4753094ac3c13e103b8bc0732da2c054a4c1a5aa73f596674ee49046cd1987e3d79cb70ce2ebdb716b0984ea42246
SSDEEP 393216:Ws6D8C1AUTc/mheFGSv1xUxtiRICDrgIFCG:h6D8C1p4ehelNxqti7DrB4G
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

b1f804a3a9b16f0df895bd80da6d20e0_JaffaCakes118

.apk 16.5MB
plugin-deploy.jar

.apk 143KB

b1f804a3a9b16f0df895bd80da6d20e0_JaffaCakes118

SHA256 7869431ca2ba227e8b8a49d33f5b3f5c4dc575e28570696aa71803805403006a
MD5 b1f804a3a9b16f0df895bd80da6d20e0
SHA1 e88148f66ae7cd71210fa3e845929c1110156d02
SHA512 c5dda6115354bfb4018a74ec9135582fa5c4753094ac3c13e103b8bc0732da2c054a4c1a5aa73f596674ee49046cd1987e3d79cb70ce2ebdb716b0984ea42246
SSDEEP 393216:Ws6D8C1AUTc/mheFGSv1xUxtiRICDrgIFCG:h6D8C1p4ehelNxqti7DrB4G
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.iflytek.speechcloud

com.iflytek.speechcloud.activity.setting.speaker.SpeakerSetting

com.iflytek.speechcloud.activity.speaker.SpeakerSetting

com.iflytek.speechcloud.activity.setting.SpeechEffectSettings

com.iflytek.speechcloud.activity.setting.asrresdownload.RecognitionResourceDownload

com.iflytek.speechcloud.settings.asr

com.iflytek.speechcloud.activity.setting.speaker.SpeakerHelp

com.iflytek.speechcloud.activity.setting.asrresdownload.RecognitionResourceDownloadHelp

com.iflytek.speechcloud.activity.more.SpeechAbout

com.iflytek.speechcloud.activity.setting.SpeechTtsInterface

com.iflytek.speechcloud.activity.setting.SpeechRecognitionInterface

com.iflytek.speechcloud.activity.setting.SpeechAsrSetting

com.iflytek.speechcloud.activity.setting.SpeechGeneralSettings

com.iflytek.speechcloud.activity.setting.SpeechTtsSetting

com.iflytek.speechcloud.activity.more.feedback.SpeechFeedback

com.iflytek.speechcloud.feedback.main

com.iflytek.speechcloud.activity.more.feedback.SpeechFeedbackHistory

com.iflytek.speechcloud.activity.recommend.SpeechRecommend

com.iflytek.speechcloud.activity.more.SpeechHelp

com.iflytek.iatservice.SpeechActivity

android.speech.action.WEB_SEARCH android.speech.action.RECOGNIZE_SPEECH android.intent.action.SEARCH_LONG_PRESS com.iflytek.speech.action.voiceinput com.iflytek.speech.action.voiceisearch

com.iflytek.iatservice.SettingActivity

com.iflytek.speechcloud.Plusmsc

android.intent.action.START_TTS_ENGINE

com.iflytek.speechcloud.GetSampleText

android.speech.tts.engine.GET_SAMPLE_TEXT

com.iflytek.speechcloud.EngineSettings

android.speech.tts.engine.CONFIGURE_ENGINE

com.iflytek.speechcloud.CheckVoiceData

android.speech.tts.engine.CHECK_TTS_DATA

com.iflytek.business.download.DownloadInfoActivity

com.iflytek.speechcloud.SpeechWelcome

android.intent.action.VIEW android.intent.action.MAIN com.iflytek.speech.action.launcher com.iflytek.speechcloud

com.iflytek.speechcloud.voicesearch.VoiceSearchActivity

com.iflytek.speechcloud.activity.main.SpeechMain

com.iflytek.speechcloud.settings.main com.iflytek.speechcloud.main

com.iflytek.speechcloud.wxapi.WXUnSupport

com.iflytek.speechcloud.widget.WidgetResultSearch

com.iflytek.speechcloud.widget.WidgetEngineSelect

com.iflytek.speechcloud.activity.home.AppInfo

com.iflytek.speechcloud.appstore.appinfo

com.iflytek.speechcloud.activity.tutorial.SpeechShow

com.iflytek.speechcloud.activity.speaker.SpeakerSetting

com.iflytek.speechcloud.widget.WidgetJump

com.iflytek.voiceads.request.IFLYBrowser

Android Permissions

b1f804a3a9b16f0df895bd80da6d20e0_JaffaCakes118

Permissions

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.GET_TASKS

android.permission.READ_LOGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

Sharing

General

Malware Config

Signatures

File Explorer

b1f804a3a9b16f0df895bd80da6d20e0_JaffaCakes118

com.iflytek.speechcloud.activity.setting.speaker.SpeakerSetting

com.iflytek.speechcloud.activity.setting.SpeechEffectSettings

com.iflytek.speechcloud.activity.setting.asrresdownload.RecognitionResourceDownload

com.iflytek.speechcloud.activity.setting.speaker.SpeakerHelp

com.iflytek.speechcloud.activity.setting.asrresdownload.RecognitionResourceDownloadHelp

com.iflytek.speechcloud.activity.more.SpeechAbout

com.iflytek.speechcloud.activity.setting.SpeechTtsInterface

com.iflytek.speechcloud.activity.setting.SpeechRecognitionInterface

com.iflytek.speechcloud.activity.setting.SpeechAsrSetting

com.iflytek.speechcloud.activity.setting.SpeechGeneralSettings

com.iflytek.speechcloud.activity.setting.SpeechTtsSetting

com.iflytek.speechcloud.activity.more.feedback.SpeechFeedback

com.iflytek.speechcloud.activity.more.feedback.SpeechFeedbackHistory

com.iflytek.speechcloud.activity.recommend.SpeechRecommend

com.iflytek.speechcloud.activity.more.SpeechHelp

com.iflytek.iatservice.SpeechActivity

com.iflytek.iatservice.SettingActivity

com.iflytek.speechcloud.Plusmsc

com.iflytek.speechcloud.GetSampleText

com.iflytek.speechcloud.EngineSettings

com.iflytek.speechcloud.CheckVoiceData

com.iflytek.business.download.DownloadInfoActivity

com.iflytek.speechcloud.SpeechWelcome

com.iflytek.speechcloud.voicesearch.VoiceSearchActivity

com.iflytek.speechcloud.activity.main.SpeechMain

com.iflytek.speechcloud.wxapi.WXUnSupport

com.iflytek.speechcloud.widget.WidgetResultSearch

com.iflytek.speechcloud.widget.WidgetEngineSelect

com.iflytek.speechcloud.activity.home.AppInfo

com.iflytek.speechcloud.activity.tutorial.SpeechShow

com.iflytek.speechcloud.activity.speaker.SpeakerSetting

com.iflytek.speechcloud.widget.WidgetJump

com.iflytek.voiceads.request.IFLYBrowser

com.iflytek.business.PlusBusinessService

com.iflytek.iatservice.SpeechService

com.iflytek.speechcloud.binder.BinderService

com.iflytek.business.BusinessService

com.iflytek.business.download.impl.DownloadService

com.iflytek.business.download.DownloadHandlerService

com.iflytek.speechcloud.TtsService

com.baidu.android.pushservice.PushService

com.iflytek.common.LaunchService

com.iflytek.business.BootReceiver

com.iflytek.iatservice.SpeechService$SpeechServiceReceiver

com.iflytek.speechcloud.widget.VoiceSearchBar

com.iflytek.speechcloud.activity.more.feedback.PushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

com.iflytek.speechcloud.providers.SettingsProvider

com.iflytek.speechcloud.providers.LocalResourceProvider

plugin-deploy.jar

Android Permissions

b1f804a3a9b16f0df895bd80da6d20e0_JaffaCakes118