ba1aed5d71ebe1bad3702e0b7965d22b_JaffaCakes118

General

Target
ba1aed5d71ebe1bad3702e0b7965d22b_JaffaCakes118
Size 11.7MB
Sample240617-3ccseaydkd
SHA256 3b5df56592fe4e67b3fda10dff595d010c3f3d20de22ff68c2778b93df9e5f8a
MD5 ba1aed5d71ebe1bad3702e0b7965d22b
SHA1 92dc7d2421832137017b94933e0b84b7c839fd0e
SHA512 3ad3ae6b2a95a73ca704f9cc979709f325cfe36e1d566048a0660d9e896ddd459fe262c47734fcf60da8cbbb03ed86c9474b119b6fa20d046563f68461ef513e
SSDEEP 196608:WADB3GKHZZsFiLJJbVBSjyFrIiI5+KohShqose1EJG3FmZMqruxcy/baVv+ASV:WAt7ZZgiLzJkwbVK/q41J+Ch/bVV
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

ba1aed5d71ebe1bad3702e0b7965d22b_JaffaCakes118

.apk 11.7MB

ba1aed5d71ebe1bad3702e0b7965d22b_JaffaCakes118

SHA256 3b5df56592fe4e67b3fda10dff595d010c3f3d20de22ff68c2778b93df9e5f8a
MD5 ba1aed5d71ebe1bad3702e0b7965d22b
SHA1 92dc7d2421832137017b94933e0b84b7c839fd0e
SHA512 3ad3ae6b2a95a73ca704f9cc979709f325cfe36e1d566048a0660d9e896ddd459fe262c47734fcf60da8cbbb03ed86c9474b119b6fa20d046563f68461ef513e
SSDEEP 196608:WADB3GKHZZsFiLJJbVBSjyFrIiI5+KohShqose1EJG3FmZMqruxcy/baVv+ASV:WAt7ZZgiLzJkwbVK/q41J+Ch/bVV
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.paxunke.pawificy

com.paxunke.pawificy.LoadingActivity

android.intent.action.MAIN android.intent.action.VIEW

com.paxunke.pawificy.GuideActivity

com.paxunke.pawificy.WebViewActivity

net.wequick.small.A

net.wequick.small.A1

net.wequick.small.A10

net.wequick.small.A11

net.wequick.small.A12

net.wequick.small.A13

net.wequick.small.A20

net.wequick.small.A21

net.wequick.small.A22

net.wequick.small.A23

net.wequick.small.A30

net.wequick.small.A31

net.wequick.small.A32

net.wequick.small.A33

net.wequick.small.webkit.WebActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

cn.magicwindow.common.base.MWActivity

com.paxunke.pawificy.wxapi.WXEntryActivity

com.paxunke.pawificy.wxapi.WXPayEntryActivity

com.tencent.connect.common.AssistActivity

com.paxunke.linkme.lib.bisauth.forbidden.LoginAlertDialogActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.paxunke.linkme.app.service.ui.ServiceDialogActivity

com.paxunke.linkme.app.service.AdvAndNewsActivity

com.paxunke.linkme.lib.biswebview.ActionItemActivity

com.paxunke.linkme.lib.biswebview.CustomerCareActivity

Android Permissions

ba1aed5d71ebe1bad3702e0b7965d22b_JaffaCakes118

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CALL_PHONE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

getui.permission.GetuiService.

android.permission.ACCESS_NETWORK_STATE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

com.paxunke.pawificy.permission.MIPUSH_RECEIVE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.EXPAND_STATUS_BAR

ba1aed5d71ebe1bad3702e0b7965d22b_JaffaCakes118

com.paxunke.pawificy.LoadingActivity

com.paxunke.pawificy.GuideActivity

com.paxunke.pawificy.WebViewActivity

net.wequick.small.A

net.wequick.small.A1

net.wequick.small.A10

net.wequick.small.A11

net.wequick.small.A12

net.wequick.small.A13

net.wequick.small.A20

net.wequick.small.A21

net.wequick.small.A22

net.wequick.small.A23

net.wequick.small.A30

net.wequick.small.A31

net.wequick.small.A32

net.wequick.small.A33

net.wequick.small.webkit.WebActivity

com.tencent.tauth.AuthActivity

cn.magicwindow.common.base.MWActivity

com.paxunke.pawificy.wxapi.WXEntryActivity

com.paxunke.pawificy.wxapi.WXPayEntryActivity

com.tencent.connect.common.AssistActivity

com.paxunke.linkme.lib.bisauth.forbidden.LoginAlertDialogActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.paxunke.linkme.app.service.ui.ServiceDialogActivity

com.paxunke.linkme.app.service.AdvAndNewsActivity

com.paxunke.linkme.lib.biswebview.ActionItemActivity

com.paxunke.linkme.lib.biswebview.CustomerCareActivity

com.paxunke.linkme.lib.background.UniversalService

com.igexin.sdk.PushService

com.paxunke.linkme.lib.biswifi.module.billing.BillingService

com.igexin.sdk.PushReceiver

com.paxunke.pawificy.receiver.GeTuiReceiver

com.paxunke.linkme.lib.biswifi.module.billing.BillingReceiver

android.support.v4.content.FileProvider

Sharing

General

Malware Config

Signatures

File Explorer

ba1aed5d71ebe1bad3702e0b7965d22b_JaffaCakes118

com.paxunke.pawificy.LoadingActivity

com.paxunke.pawificy.GuideActivity

com.paxunke.pawificy.WebViewActivity

net.wequick.small.A

net.wequick.small.A1

net.wequick.small.A10

net.wequick.small.A11

net.wequick.small.A12

net.wequick.small.A13

net.wequick.small.A20

net.wequick.small.A21

net.wequick.small.A22

net.wequick.small.A23

net.wequick.small.A30

net.wequick.small.A31

net.wequick.small.A32

net.wequick.small.A33

net.wequick.small.webkit.WebActivity

com.tencent.tauth.AuthActivity

cn.magicwindow.common.base.MWActivity

com.paxunke.pawificy.wxapi.WXEntryActivity

com.paxunke.pawificy.wxapi.WXPayEntryActivity

com.tencent.connect.common.AssistActivity

com.paxunke.linkme.lib.bisauth.forbidden.LoginAlertDialogActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.paxunke.linkme.app.service.ui.ServiceDialogActivity

com.paxunke.linkme.app.service.AdvAndNewsActivity

com.paxunke.linkme.lib.biswebview.ActionItemActivity

com.paxunke.linkme.lib.biswebview.CustomerCareActivity

com.paxunke.linkme.lib.background.UniversalService

com.igexin.sdk.PushService

com.paxunke.linkme.lib.biswifi.module.billing.BillingService

com.igexin.sdk.PushReceiver

com.paxunke.pawificy.receiver.GeTuiReceiver

com.paxunke.linkme.lib.biswifi.module.billing.BillingReceiver

android.support.v4.content.FileProvider

Android Permissions

ba1aed5d71ebe1bad3702e0b7965d22b_JaffaCakes118