b3e253e3fa4f1ad42c410ccc2e0f8335_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b3e253e3fa4f1ad42c410ccc2e0f8335_JaffaCakes118
Size 20.3MB
Sample240616-rcdtxszdrk
SHA256 ed33bdcb0049b0efcce2da3ea42e30e257f2e831dd33d9f3a3d90f6a3abb9d32
MD5 b3e253e3fa4f1ad42c410ccc2e0f8335
SHA1 7d6d30afe46b1912478aaf9f72006eab3a884e59
SHA512 7299f0e33842723709ea66f85579e1e267aee4c8f7f7a31f34db650afb5ddb2d994ada3fc269219a157cd04b7d90c2230dbb933eee3b719f40e1f0ba6db0557d
SSDEEP 393216:bz+WTm2g0XthEMzX981k4othHFUK1O4oGAmCOpPXgffKry+wOVY1CWpvWyO:/+YXXHRzXO1kT5oupXgqm+3K1vPO
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

File Explorer

b3e253e3fa4f1ad42c410ccc2e0f8335_JaffaCakes118

.apk 20.3MB
plugin-deploy.jar

.apk 180KB
tv.pps.bi.biplugin.apk

.apk 364KB

b3e253e3fa4f1ad42c410ccc2e0f8335_JaffaCakes118

SHA256 ed33bdcb0049b0efcce2da3ea42e30e257f2e831dd33d9f3a3d90f6a3abb9d32
MD5 b3e253e3fa4f1ad42c410ccc2e0f8335
SHA1 7d6d30afe46b1912478aaf9f72006eab3a884e59
SHA512 7299f0e33842723709ea66f85579e1e267aee4c8f7f7a31f34db650afb5ddb2d994ada3fc269219a157cd04b7d90c2230dbb933eee3b719f40e1f0ba6db0557d
SSDEEP 393216:bz+WTm2g0XthEMzX981k4othHFUK1O4oGAmCOpPXgffKry+wOVY1CWpvWyO:/+YXXHRzXO1kT5oupXgqm+3K1vPO
MD5 SHA1 SHA512 SSDEEP

android arch:arm

tv.pps.mobile

android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.WRITE_MEDIA_STORAGE android.permission.KILL_BACKGROUND_PROCESSES android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.READ_PHONE_STATE com.android.browser.permission.READ_HISTORY_BOOKMARKS android.permission.GET_TASKS android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.RECORD_AUDIO android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WAKE_LOCK android.permission.RECEIVE_BOOT_COMPLETED android.permission.WRITE_SETTINGS android.permission.VIBRATE android.permission.DISABLE_KEYGUARD android.permission.ACCESS_DOWNLOAD_MANAGER android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.permission.INTERACT_ACROSS_USERS_FULL tv.pps.mobile.permission.MIPUSH_RECEIVE android.permission.READ_CONTACTS android.permission.CAMERA android.permission.MANAGE_ACCOUNTS android.permission.GET_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.PROCESS_OUTGOING_CALLS android.permission.SYSTEM_ALERT_WINDOW android.permission.BROADCAST_STICKY android.permission.READ_LOGS android.permission.WRITE_CONTACTS android.permission.SET_ACTIVITY_WATCHER android.permission.CALL_PHONE android.permission.SEND_SMS android.permission.RECEIVE_SMS android.permission.BLUETOOTH android.permission.CHANGE_CONFIGURATION

org.qiyi.android.scan.ScanHelpActivity

org.qiyi.android.video.activitys.DuboActivity

org.qiyi.android.video.activitys.GpsActivity

org.qiyi.android.video.activitys.QimoActivity

org.qiyi.android.video.activitys.QimoHelpActivity

org.qiyi.android.video.activitys.TopActivity

org.qiyi.android.video.activitys.TopicActivity

org.qiyi.android.video.activitys.ProgramActivity

org.qiyi.android.video.activitys.AdActivity

org.qiyi.android.qisheng.activitys.QishengMainActivity

org.qiyi.android.video.activitys.PhoneMessageActivity

org.qiyi.android.video.activitys.pps.ChannelListActivity

org.qiyi.android.video.activitys.PhoneMsgAboutMeActivity

.WelcomeActivity

android.intent.action.MAIN android.intent.action.VIEW

org.qiyi.android.video.MainActivity

org.qiyi.android.video.MAIN android.intent.action.VIEW

org.qiyi.android.video.activitys.PhoneSearchActivity

org.qiyi.android.video.ui.account.PhoneAccountActivity

android.intent.action.qiyivideo.phone.account android.intent.action.qiyivideo.phone.fortk.account.tv.pps.mobile

org.qiyi.android.commonphonepad.activity.ActivityRecommendFavor

org.iqiyi.video.activity.PlayerActivity

android.intent.action.qiyivideo.player android.intent.action.qiyivideo.player android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

org.iqiyi.video.outside.OutSideActivity

org.qiyi.android.video.activitys.AccountUIActivity

.wxapi.WXEntryActivity

org.qiyi.android.commonphonepad.WXEntryActivityStart

org.iqiyi.video.yxapi.YXEntryActivity

org.qiyi.android.video.activitys.WebADActivity

com.qimo.video.dlna.activity.QimoControllerActivity

org.qiyi.android.video.ui.share.VideoShareOnVideoListActivity

org.qiyi.android.video.ui.share.VideoShareOnDeviceActivity

org.qiyi.android.video.ui.share.VideoShareOnWaitToReceiveActivity

org.qiyi.android.gpad.video.SpecialTopicActivityForPad

org.qiyi.android.video.activitys.WebPlayerActivity

.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

tv.pps.appstore.game.GameCenterActivity

tv.pps.appstore.game.activity.AppDetailActivity

tv.pps.appstore.game.activity.DetailImagePreviewActivity

tv.pps.appstore.gamedownload.activity.PPSGameManagerActivity

tv.pps.appstore.game.PPSGameCategoryListActivity

tv.pps.appstore.game.PPSGameManagerActivity

tv.pps.appstore.game.PPSGameGirfActivity

org.qiyi.android.video.appstore.GameInstallPopWindow

org.qiyi.android.video.activitys.ShareAPKActivity

org.qiyi.android.video.activitys.ShareAPKMainActivity

org.qiyi.android.video.activitys.PhonePlayRecordActivity

org.qiyi.android.video.activitys.PhoneCollectActivity

org.qiyi.android.video.activitys.pps.PhoneGoldActivity

org.qiyi.android.video.activitys.pps.GoldWebViewActivity

org.qiyi.android.video.activitys.PhoneSettingActivity

org.qiyi.android.video.activitys.PhoneFeedbackActivity

org.qiyi.android.video.activitys.PhoneDailyNewsActivity

org.qiyi.android.video.ugc.activitys.UgcFeedFragmentActivity

org.qiyi.android.video.ugc.activitys.UgcOtherTabActivity

org.qiyi.android.video.ugc.activitys.UgcFriendshipFragmentActivity

org.qiyi.android.video.ugc.activitys.UgcVideoFragmentActivity

org.qiyi.android.video.activitys.PhoneRemindActivity

org.qiyi.android.video.activitys.GuessLikeNewActivity

org.qiyi.android.video.activitys.VideoSquareActivity

org.qiyi.android.video.activitys.BillboardActivity

org.qiyi.android.video.activitys.FrameJumpActivity

android.intent.action.VIEW

org.qiyi.android.video.activitys.ToCheckMoreActivity

org.qiyi.android.video.activitys.CommentsListActivity

org.qiyi.android.video.ui.account.PhoneModifyNickNameActivity

org.qiyi.android.video.activitys.CommonWebViewActivity

org.qiyi.android.scan.ScanActivity

org.qiyi.android.scan.PhoneConfirmLoginBackActivity

org.qiyi.android.scan.PhoneScanBackActivity

com.iqiyi.sso.sdk.ui.ShowAccountListActivity

com.iqiyi.sso.sdk.ui.SleepyAccountAuthenticatorActivity

android.accounts.AccountAuthenticator

com.iqiyi.sso.sdk.ui.UidActivity

android.intent.action.iqiyi.sso

org.qiyi.android.video.activitys.DownloadEpisodesActivity

org.qiyi.android.video.activitys.LocalVideosActivity

org.qiyi.android.video.ugc.activitys.UgcMyTabActivity

android.a.test.VideoPlayTestActivity

org.qiyi.android.video.ppq.activitys.CloudActivity

notification_action

org.qiyi.android.video.ppq.activitys.AlbumActivity

org.qiyi.android.video.ppq.activitys.TimelineActivity

org.qiyi.android.video.ppq.activitys.PPQHomeActivity

org.qiyi.android.video.ppq.activitys.ShareActivity

org.qiyi.android.video.ppq.activitys.PreviewActivity

org.qiyi.android.video.ppq.activitys.DetailActivity

org.qiyi.android.video.ppq.activitys.SecondShareActivity

org.qiyi.android.video.ppq.activitys.PPQFriendsActivity

org.qiyi.android.video.activitys.plugin.PhoneMySettingPluginActivity

org.qiyi.android.video.activitys.plugin.PhoneMySettingPluginDetailActivity

org.qiyi.pluginlibrary.proxy.activity.ActivityProxy

org.qiyi.pluginlibrary.proxy.activity.FragmentActivityProxy

org.qiyi.pluginlibrary.proxy.activity.DialogActivityProxy

org.qiyi.pluginlibrary.proxy.activity.translucent.ActivityProxyTranslucent

org.qiyi.pluginlibrary.proxy.activity.translucent.FragmentActivityProxyTranslucent

org.qiyi.android.video.music.MusicTopListActivity

org.qiyi.android.video.music.MusicTopMainActivity

org.qiyi.android.tickets.TicketsMainActivity

org.qiyi.android.tickets.activitys.TestActivity

org.qiyi.android.tickets.activitys.MovieDetailActivity

org.qiyi.android.tickets.activitys.CinemaDetailActivity

org.qiyi.android.tickets.activitys.OrderDetailActivity

org.qiyi.android.tickets.activitys.CommonFragmentActivity

org.qiyi.android.tickets.activitys.CityActivity

org.qiyi.android.tickets.activitys.TicketOrdersCenterActivity

org.qiyi.android.tickets.activitys.TicketOrderPayActivity

org.qiyi.android.tickets.activitys.ModifyPhoneActivity

org.qiyi.android.tickets.activitys.QuestionsActivity

org.qiyi.android.tickets.activitys.TKInvokeActivity

org.qiyi.android.tickets.recivers.TKInvokeReciver.tv.pps.mobile android.intent.action.VIEW

org.qiyi.android.video.activitys.SpecialPlayListActivity

android.a.test.DebugInfoActivity

org.qiyi.android.video.ui.phone.pay.PayBaseActivity

org.qiyi.android.video.ui.phone.pay.PhonePayActivity

org.qiyi.android.commonphonepad.pushmessage.PushMessageService

tv.pps.mobile.DownloadService tv.pps.mobile.action.updateApp.retry com.qiyi.push.action.LOGIN com.qiyi.push.action.MESSAGE com.qiyi.push.action.RESPONSE com.qiyi.push.action.switcher tv.pps.mobile.action.download.newApp

org.openudid.OpenUDID_service

org.openudid.GETUDID

org.qiyi.android.commonphonepad.qyad.DownloadAppService

org.qiyi.android.commonphonepad.service.MultiDeviceCoWorkService

com.sdk.communication.SocketSer

com.xiaomi.push.service.XMPushService

com.xiaomi.mipush.sdk.PushMessageHandler

com.xiaomi.mipush.sdk.MessageHandleService

com.baidu.android.pushservice.PushService

com.baidu.android.pushservice.action.PUSH_SERVICE

tv.pps.appstore.gamedownload.DownloadService

com.baidu.location.f

com.baidu.android.moplus.MoPlusService

com.iqiyi.video.download.QiyiDownloadCenterService

com.iqiyi.video.download.IQiyiDownloadCenter.tv.pps.mobile

com.iqiyi.sdk.android.pushservice.PushService

com.iqiyi.sso.sdk.service.SleepyAccountsService

android.accounts.AccountAuthenticator

org.qiyi.android.corejar.deliver.service.PPSDeliverService

com.iqiyi.video.upload.ppq.service.UploadService

com.iqiyi.video.upload.ppq.service.IUploadService

org.qiyi.pluginlibrary.install.PluginInstallerService

tv.pps.mobile.plugin.installed.service.INSTALL

org.qiyi.android.plugin.download.service.PluginDownloadService

tv.pps.mobile.plugin.download.service.IPluginDownloadService.DOWNLOADPLUGIN tv.pps.mobile.plugin.download.service.IPluginDownloadService.GETPLUGINLIST tv.pps.mobile.plugin.download.service.IPluginDownloadService.INITPLUGIN tv.pps.mobile.plugin.download.service.IPluginDownloadService.RESTART tv.pps.mobile.plugin.download.service.IPluginDownloadService.PUGINLISTUPDATE

org.qiyi.pluginlibrary.proxy.service.ServiceProxy

org.qiyi.pluginlibrary.proxy.service.SelfLaunchServiceProxy

org.qiyi.pluginlibrary.proxy.service.ServiceProxy.tv.pps.mobile

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

org.qiyi.android.corejar.deliver.heartbeat.HeartBeatReceiver

android.net.conn.CONNECTIVITY_CHANGE android.intent.action.BOOT_COMPLETED com.qiyi.startapp com.qiyi.heartbeat.alarm.action

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

org.qiyi.android.commonphonepad.pushmessage.xiaomi.XiaoMiPushMessageReceive

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.ERROR

org.qiyi.android.commonphonepad.pushmessage.baidu.PushMsgBroadCastReceiver

android.intent.action.BOOT_COMPLETED org.qiyi.android.video.pushmessage.PUSH_MSG

org.qiyi.android.commonphonepad.receiver.StartPlayActivityReceiver

android.intent.action.qiyivideo.mp4player

org.qiyi.android.commonphonepad.receiver.StartWelcomeActivityReceiver

android.intent.action.qiyivideo.welcomeactivity

org.qiyi.android.commonphonepad.receiver.StartPlayerFromWeixinReceiver

android.intent.action.qiyivideo.startplayerfromhtmlweixin

org.qiyi.android.commonphonepad.receiver.StartPlayerFromThirdEntranceReceiver

android.intent.action.qiyivideo.startplayerfromThirdEntrance

org.qiyi.android.commonphonepad.receiver.QiMoBordcast

android.net.conn.CONNECTIVITY_CHANGE

org.qiyi.android.commonphonepad.receiver.NetworkChangeBroadcast

android.net.conn.CONNECTIVITY_CHANGE

com.iqiyi.video.download.qsv.PCTransferCompleteReceiver

com.iqiyi.client.usb.transfer

org.qiyi.android.commonphonepad.pushmessage.baidu.PushMessageReceiver

com.baidu.android.pushservice.action.MESSAGE com.baidu.android.pushservice.action.RECEIVE com.baidu.android.pushservice.action.notification.CLICK android.net.conn.CONNECTIVITY_CHANGE

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE com.baidu.android.pushservice.action.notification.SHOW com.baidu.android.pushservice.action.media.CLICK

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD com.baidu.android.pushservice.action.BIND_SYNC android.intent.action.PACKAGE_REMOVED

com.baidu.android.moplus.MoPlusReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE com.baidu.android.moplus.action.START com.baidu.android.pushservice.action.BIND_SYNC android.intent.action.PACKAGE_REMOVED

org.qiyi.android.commonphonepad.pushmessage.qiyi.QYPushMessageReceiver

com.iqiyi.sdk.android.pushservice.action.MESSAGE com.iqiyi.sdk.android.pushservice.action.RECEIVE

com.iqiyi.sdk.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE

org.qiyi.android.commonphonepad.pushmessage.qiyi.QYPushMsgBroadCastReceiver

org.qiyi.android.video.pushmessage.ACTION_PUSH_CHANGE org.qiyi.android.video.pushmessage.ACTION_AD_DOWNLOAD

org.qiyi.android.video.ppq.activitys.ui.upload.UploadVideoNotificationReceiver

notification_action

org.qiyi.pluginlibrary.proxy.BroadcastReceiverProxy

org.qiyi.android.plugin.download.service.PluginReceiver

tv.pps.mobile.plugin.download.service.PluginReceiver.ACTION_PLUGIN_RESTART

tv.pps.bi.biplugin.apk

SHA256 9debff7ebce9d36ad58fc9b572a44aa485e16f6f18ad58d52693024bd0bfe4b3
MD5 a770841de3c7802cad3e71623f51c8c1
SHA1 18be5ab6cea6b7468a60d00a6d57b298520e11c2
SHA512 bebc33c108c28f2db1248b54e4883ae87ab8b993fa9fed5dc4ada2df1ec54607532c4a332e5d07e487ee12a79db830781a9bca136d9d550f8155164ea4e26146
SSDEEP 6144:i93w7Rwd0rVtIxVyAK8B/7FgAabLTNKnoa78S7W/lCV2E40YXUsKLYZYkaf9zOZq:i27WOVtISUjgAQLT4nnP7IliAzaf9aZq
MD5 SHA1 SHA512 SSDEEP

android

tv.pps.bi.biplugin

Android Permissions

b3e253e3fa4f1ad42c410ccc2e0f8335_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_MEDIA_STORAGE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_PHONE_STATE

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.INTERACT_ACROSS_USERS_FULL

tv.pps.mobile.permission.MIPUSH_RECEIVE

android.permission.READ_CONTACTS

android.permission.CAMERA

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.BROADCAST_STICKY

android.permission.READ_LOGS

android.permission.WRITE_CONTACTS

android.permission.SET_ACTIVITY_WATCHER

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.BLUETOOTH

android.permission.CHANGE_CONFIGURATION