b669d10db658e10bd1cec584ea463f11_JaffaCakes118

General

Target
b669d10db658e10bd1cec584ea463f11_JaffaCakes118
Size 29.2MB
Sample240617-c6ewrazhra
SHA256 ddf900d7f4b19d9cc1ebc064be4c00085e711a6f786e36964ac724b7b2a28971
MD5 b669d10db658e10bd1cec584ea463f11
SHA1 8c2dfcf60d32c8c842f0fb5ad88d104468506b2d
SHA512 7a89890379f64bb31ef9e0b247bd489474e7e13d2eb1dd821efc2ba509604a4de0369fe3dff8b2c36fa330830ed6bbb17f4e47c89b54673b2281faf3192932c5
SSDEEP 393216:T1mBvttEbEfdX+4vhlMdsfPmtH/KC8048NR+mjaU1r/3Ez5XDddl:xmBvtCbEVX+4rCKC805PBfCz7l
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

b669d10db658e10bd1cec584ea463f11_JaffaCakes118

.apk 29.2MB

b669d10db658e10bd1cec584ea463f11_JaffaCakes118

SHA256 ddf900d7f4b19d9cc1ebc064be4c00085e711a6f786e36964ac724b7b2a28971
MD5 b669d10db658e10bd1cec584ea463f11
SHA1 8c2dfcf60d32c8c842f0fb5ad88d104468506b2d
SHA512 7a89890379f64bb31ef9e0b247bd489474e7e13d2eb1dd821efc2ba509604a4de0369fe3dff8b2c36fa330830ed6bbb17f4e47c89b54673b2281faf3192932c5
SSDEEP 393216:T1mBvttEbEfdX+4vhlMdsfPmtH/KC8048NR+mjaU1r/3Ez5XDddl:xmBvtCbEVX+4rCKC805PBfCz7l
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips arch:x86

com.hzfreechineseversion.speakpractice

Android Permissions

b669d10db658e10bd1cec584ea463f11_JaffaCakes118

Permissions

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_COARSE_LOCATION

b669d10db658e10bd1cec584ea463f11_JaffaCakes118

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

net.youmi.android.AdBrowser

net.youmi.android.SmartBannerActivity

com.hzfreechineseversion.home_page_related.WelcomeActivity

com.hzfreechineseversion.home_page_related.MainActivity

com.hzfreechineseversion.home_page_related.RemoveAdActivity

com.hzfreechineseversion.raise_question_related.PrepareQuestionActivity

com.hzfreechineseversion.raise_question_related.ShowQuestionActivity

com.hzfreechineseversion.question_pool_related.QuestionCategoryActivity

com.hzfreechineseversion.question_pool_related.QuestionListActivity

com.hzfreechineseversion.question_pool_related.QuestionDetailActivity

com.hzfreechineseversion.question_pool_related.PlayRecordFloatingActivity

com.hzfreechineseversion.question_pool_related.QuestionSubContentDisplayActivity

com.hzfreechineseversion.question_pool_related.QuestionSubContentEditActivity

com.hzfreechineseversion.history_related.HistoryListActivity

com.hzfreechineseversion.starred_related.StarredQuestionActivity

com.hzfreechineseversion.other_info_related.OtherInfoActivity

com.umeng.common.net.DownloadingService

net.youmi.android.AdService

net.youmi.android.SmartBannerService

net.youmi.android.AdReceiver

net.youmi.android.offers.OffersReceiver

com.hzfreechineseversion.contentprovider_related.QuestionListProvider

com.hzfreechineseversion.contentprovider_related.HistoryListProvider

com.hzfreechineseversion.contentprovider_related.StarredQuestionProvider

Sharing

General

Malware Config

Signatures

File Explorer

b669d10db658e10bd1cec584ea463f11_JaffaCakes118

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

net.youmi.android.AdBrowser

net.youmi.android.SmartBannerActivity

com.hzfreechineseversion.home_page_related.WelcomeActivity

com.hzfreechineseversion.home_page_related.MainActivity

com.hzfreechineseversion.home_page_related.RemoveAdActivity

com.hzfreechineseversion.raise_question_related.PrepareQuestionActivity

com.hzfreechineseversion.raise_question_related.ShowQuestionActivity

com.hzfreechineseversion.question_pool_related.QuestionCategoryActivity

com.hzfreechineseversion.question_pool_related.QuestionListActivity

com.hzfreechineseversion.question_pool_related.QuestionDetailActivity

com.hzfreechineseversion.question_pool_related.PlayRecordFloatingActivity

com.hzfreechineseversion.question_pool_related.QuestionSubContentDisplayActivity

com.hzfreechineseversion.question_pool_related.QuestionSubContentEditActivity

com.hzfreechineseversion.history_related.HistoryListActivity

com.hzfreechineseversion.starred_related.StarredQuestionActivity

com.hzfreechineseversion.other_info_related.OtherInfoActivity

com.umeng.common.net.DownloadingService

net.youmi.android.AdService

net.youmi.android.SmartBannerService

net.youmi.android.AdReceiver

net.youmi.android.offers.OffersReceiver

com.hzfreechineseversion.contentprovider_related.QuestionListProvider

com.hzfreechineseversion.contentprovider_related.HistoryListProvider

com.hzfreechineseversion.contentprovider_related.StarredQuestionProvider

Android Permissions

b669d10db658e10bd1cec584ea463f11_JaffaCakes118