b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118

General

Target
b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118
Size 31.4MB
Sample240616-wtcemsvfnp
SHA256 58e314d493f47dbc0cb3e0119af6e50c20d74875b10619004c5b05be437f51f8
MD5 b4814bb1ea12d80bda667e35e3e19a64
SHA1 937234a2ec76c66d482244b21e11cd7f793e898d
SHA512 695ad83528f94baa30f5d4e8cf6264433fc00e0a14fd1eb8f26e0383b868b5966cb1c44630c04b29e7c4d15a9c62773adb602145d20935464c028fca19dec4ed
SSDEEP 786432:Q9IPvYarG5au3BoqbmCRtNQkkNE1fSG1HdPkqg6QS9XhuUt2F:QadLuRFbmCRwQSA5S6h9XhuUtm
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118

.apk 31.4MB
mimo_asset.apk

.apk 390KB

b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118

SHA256 58e314d493f47dbc0cb3e0119af6e50c20d74875b10619004c5b05be437f51f8
MD5 b4814bb1ea12d80bda667e35e3e19a64
SHA1 937234a2ec76c66d482244b21e11cd7f793e898d
SHA512 695ad83528f94baa30f5d4e8cf6264433fc00e0a14fd1eb8f26e0383b868b5966cb1c44630c04b29e7c4d15a9c62773adb602145d20935464c028fca19dec4ed
SSDEEP 786432:Q9IPvYarG5au3BoqbmCRtNQkkNE1fSG1HdPkqg6QS9XhuUt2F:QadLuRFbmCRwQSA5S6h9XhuUtm
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.coolgamestime.dropblocks3d.gtx

Android Permissions

b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_WIFI_STATE

com.android.vending.CHECK_LICENSE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_COARSE_UPDATES

android.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.LOCAL_MAC_ADDRESS

android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_FINE_LOCATION

b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118

com.unity3d.player.UnityPlayerActivity

com.facebook.unity.FBUnityLoginActivity

com.facebook.unity.FBUnityDialogsActivity

com.facebook.unity.FBUnityAppLinkActivity

com.facebook.unity.FBUnityDeepLinkingActivity

com.facebook.unity.FBUnityGameRequestActivity

com.facebook.unity.FBUnityCreateGameGroupActivity

com.facebook.unity.FBUnityJoinGameGroupActivity

com.facebook.unity.AppInviteDialogActivity

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.was.api.WasActivity

com.was.ff.NdnzdActivity

com.was.ff.WycghzActivity

com.was.ff.SuseActivity

com.was.ff.WsjyActivity

com.zxing.ScancodeActivity

com.miui.zeus.mimo.sdk.activityProxy.ProxyActivity

com.miui.zeus.mimo.sdk.activityProxy.FullScreenProxyActivity

com.gameanalytics.sdk.errorreporter.GameAnalyticsExceptionReportService

com.virtu.UnionLoginService

com.facebook.FacebookContentProvider

android.support.v4.content.FileProvider

mimo_asset.apk

com.miui.zeus.chameleon.engine.ui.DebuggerActivity

Sharing

General

Malware Config

Signatures

File Explorer

b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118

com.unity3d.player.UnityPlayerActivity

com.facebook.unity.FBUnityLoginActivity

com.facebook.unity.FBUnityDialogsActivity

com.facebook.unity.FBUnityAppLinkActivity

com.facebook.unity.FBUnityDeepLinkingActivity

com.facebook.unity.FBUnityGameRequestActivity

com.facebook.unity.FBUnityCreateGameGroupActivity

com.facebook.unity.FBUnityJoinGameGroupActivity

com.facebook.unity.AppInviteDialogActivity

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.was.api.WasActivity

com.was.ff.NdnzdActivity

com.was.ff.WycghzActivity

com.was.ff.SuseActivity

com.was.ff.WsjyActivity

com.zxing.ScancodeActivity

com.miui.zeus.mimo.sdk.activityProxy.ProxyActivity

com.miui.zeus.mimo.sdk.activityProxy.FullScreenProxyActivity

com.gameanalytics.sdk.errorreporter.GameAnalyticsExceptionReportService

com.virtu.UnionLoginService

com.facebook.FacebookContentProvider

android.support.v4.content.FileProvider

mimo_asset.apk

com.miui.zeus.chameleon.engine.ui.DebuggerActivity

Android Permissions

b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118