com.cdqingyun.tv.bajie.ui.activity.SplashActivity
android.intent.action.MAIN
com.tencent.tauth.AuthActivity
android.intent.action.VIEW
com.tencent.smtt.sdk.VideoActivity
com.tencent.smtt.tbs.video.PLAY
Behavioral task
behavioral1
Sample
b7d5b121acec59bba59d9878d885f5c0_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
gdtadv2.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral3
Sample
pic.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
pic.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral5
Sample
pic.apk
Resource
android-x64-arm64-20240611.1-en
Target
b7d5b121acec59bba59d9878d885f5c0_JaffaCakes118
Size
19.2MB
MD5
b7d5b121acec59bba59d9878d885f5c0
SHA1
59d8a83b9f9557f5892aabeb94f9d3eceb256c4b
SHA256
c68563fb5790705f1b8f88d257208c6360fe961cee9ec3ed92152ba94a5ff8cf
SHA512
a6510b0fd1791a4ddf73f666fc633b5fea62c2a4decfb7e86b61446931d7f38d0e85a09ebe477b1e20f7a9178dc6016def2832edbf81af52466144368013e189
SSDEEP
393216:qfn+h/uZ8uD56IWH2lhLVQ5wjm19cBni1BFL1uSDYnBB/ad+45AY4E1RVbVoVsp:cniC8u167H+kWmbcB+b38nXahAGr
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource | yara_rule |
---|---|
sample | patched_upx |
resource | yara_rule |
---|---|
sample | upx |
description | ioc |
---|---|
Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
Allows an application to request installing packages. | android.permission.REQUEST_INSTALL_PACKAGES |
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
Allows an application to write the user's calendar data. | android.permission.WRITE_CALENDAR |
Allows an application to request installing packages. | android.permission.REQUEST_INSTALL_PACKAGES |
android.intent.action.MAIN
android.intent.action.VIEW
com.tencent.smtt.tbs.video.PLAY
com.xkcn.ydd.permission.JPUSH_MESSAGE
android.permission.RECEIVE_USER_PRESENT
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.VIBRATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.ACCESS_FINE_LOCATION
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.WRITE_CALENDAR
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.READ_LOGS
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.ss.android.socialbase.downloader.remote
com.xkcn.ydd.permission.JPUSH_MESSAGE
android.permission.RECEIVE_USER_PRESENT
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.VIBRATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.ACCESS_FINE_LOCATION
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.WRITE_CALENDAR
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.READ_LOGS