General

  • Target

    b378cb6ffe004612d0aed5400e8f1662_JaffaCakes118

  • Size

    15.0MB

  • MD5

    b378cb6ffe004612d0aed5400e8f1662

  • SHA1

    14b6e30d8c9795a213bfb38ececd49c6d2e1af95

  • SHA256

    3040d6e6d57c6740d1cdb1b742a6cfe2b63df1e33c439c13c8adb4a70c137be4

  • SHA512

    6ae6b519be6a8ba5f1820077650c4a0a9e557d0828df297db486bab3da7ea4c23d13311e87870bb4dc060a34d7e7bf9b8daa223afa56f527eeb04491b864e01d

  • SSDEEP

    393216:7pg0L1iyQDBCSKQr4v7cQK6BD8KQ0TzgGT:7pggQDUSKs4vjK8D8N0ngGT

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • b378cb6ffe004612d0aed5400e8f1662_JaffaCakes118
    .apk android arch:arm

    com.magic.clmanager

    com.qihoo360.mobilesafe.opti.ui.main.AppEnterActivity


  • appmgr.jar
    .apk android
  • authguide.jar
    .apk android

    com.qihoo360.mobilesafe.authguide

    com.qihoo360.mobilesafe.authguide.MainActivity


  • business.jar
    .apk android arch:arm

    com.qihoo360.mobilesafe.business

    com.qihoo360.mobilesafe.business.ui.TestMainActivity


  • chargescreen.jar
    .apk android

    com.qihoo360.mobilesafe.chargescreen

    com.qihoo360.mobilesafe.chargescreen.ui.GuideActivity


  • deviceinfo.jar
    .apk android arch:x86 arch:arm arch:arm64

    com.qihoo360.mobilesafe.deviceinfo

    com.qihoo360.mobilesafe.deviceinfo.MainActivity


  • floatwindow.jar
    .apk android

    com.qihoo360.mobilesafe.floatwindow

    com.qihoo360.mobilesafe.floatwindow.MainActivity


  • global.jar
    .apk android

    com.global.vxproto_ec


  • lockscreen.jar
    .apk android arch:arm

    com.qihoo360.mobilesafe.lockscreen

    com.qihoo360.mobilesafe.applock.ui.TestScreenActivity


  • p-n-lssvc.jar
    .apk android

    com.qihoo360.mobilesafe.lssvc

    com.qihoo360.plugin.lockscreen.activity.LockScreenHomeActivity


  • lsscv.jar
    .apk android

    com.qihoo360.mobilesafe.lssvc

    com.qihoo360.plugin.lockscreen.activity.LockScreenHomeActivity


  • news.jar
    .apk android arch:arm

    com.qihoo360.mobilesafe.news

    com.qihoo360.news.page.DemoActivity


  • gdtadv2.jar
    .apk android arch:arm64 arch:arm
  • tcore.jar
    .apk android
  • oclt_v3.jar
    .apk android
  • protocol.jar
    .apk android

    com.qihoo360.mobilesafe.protocol

    com.qihoo360.mobilesafe.MainActivity


  • rooter.jar
    .apk android

    com.qihoo.rooter

    .Entry


  • core.dex
    .apk android
  • rt_c.jar
    .apk android
  • shortcut_4.apk
    .apk android

    com.qihoo.cleandroid_cn.onekeycleanshortcut

    com.qihoo.cleandroid_cn.onekeycleanshortcut.MainActivity


Android Permissions

b378cb6ffe004612d0aed5400e8f1662_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.REAL_GET_TASKS

android.permission.PACKAGE_USAGE_STATS

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.REORDER_TASKS

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.CAMERA

android.permission.READ_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_MTK_MMHW

android.permission.VIBRATE

android.permission.GET_ACCOUNTS

android.permission.FLASHLIGHT

android.permission.CHANGE_NETWORK_STATE

android.permission.EXPAND_STATUS_BAR

android.permission.ACCESS_COARSE_LOCATION

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.USE_FINGERPRINT

android.permission.INTERACT_ACROSS_USERS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.BLUETOOTH

com.qihoo.antivirus.update.permission.clmanager

com.magic.clmanager.permission.NEWS_SDK_BROADCAST

android.permission.SET_WALLPAPER

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.DISABLE_KEYGUARD

com.google.android.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS