b825d41d0963944b7235f11a32ef7562_JaffaCakes118

General

Target

b825d41d0963944b7235f11a32ef7562_JaffaCakes118
Size

24.0MB
MD5

b825d41d0963944b7235f11a32ef7562
SHA1

c8bf8ba32a077e93fc43af8c28d8faaff586bf56
SHA256

f94f27f414d8ef1b62a48b414960cfaf90940e12987b8471036f7ecf61aeb81b
SHA512

635f6c06d31a760b8e0a0069cb1fb5d3128b833dd32eb5cd9cd4df7a663a8b030ca2a1f3ba95f27af984946c842b5190dc1a8ddfdcc361b368f9d200af67dbf1
SSDEEP

393216:4eZqXhaYiG0Wyy07ATMkIkEV8wGHVCegVCeV4HNtVqE2Eouhdm8DbK:4eZ+hazoyy08TDOV+VCegVCeOHN3p1oh

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

b825d41d0963944b7235f11a32ef7562_JaffaCakes118
.apk android arch:arm arch:mips arch:x86

com.youku.phone

com.youku.phone.ActivityWelcome

Activities

com.youku.phone.ActivityWelcome

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW

com.youku.ui.activity.MyUploadVideoPageActivity

android.intent.action.SEND
android.intent.action.VIEW

com.youku.ui.activity.DownloadPageActivity

android.intent.action.VIEW

com.youku.phone.search.activity.SearchResultActivity

android.intent.action.SEARCH

com.youku.ui.search.last.SearchActivity

android.intent.action.SEARCH

com.youku.ui.activity.DetailActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.youku.ui.activity.WebViewActivity

com.youku.action.YoukuWebview

com.zijunlin.Zxing.CaptureActivity

com.youku.action.QRCODE

com.youku.gamecenter.GameCenterHomeActivity

android.intent.action.VIEW

com.youku.gamecenter.GameDetailsActivity

android.intent.action.VIEW

com.youku.alipay.activity.CallbackActivity

android.intent.action.VIEW

com.taobao.tae.sdk.ui.TradeWebViewActivity

COM_TAOBAO_TAE_SDK_TRADE_WEB_VIEW_ACTION

com.alipay.mobile.command.trigger.WebViewTrigger

android.intent.action.VIEW

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
android.permission.GET_TASKS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.RECORD_AUDIO
android.permission.FLASHLIGHT
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.CHANGE_WIFI_STATE
android.permission.READ_SETTINGS
android.permission.WRITE_SETTINGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_CONFIGURATION
com.youku.phone.permission.MIPUSH_RECEIVE

Receivers

com.youku.service.download.DownloadReceiver

android.intent.action.DOWNLOAD_TRACKER

com.youku.gamecenter.outer.GamePlayersReceiver

com.youku.gamecenter.outer.action.GET_PACKAGE_VERSION

com.youku.appcenter.ClickActionReceiver

com.youku.appcenter.action.YOUKU_CLICK_ACTION

com.youku.gamecenter.GameInstallActionReceiver

com.youku.appcenter.action.LAUNCH_APP_INSTALL_ACTION

com.youku.service.push.PushReceiver

com.youku.android.pushsdk.action.MESSAGE

com.youku.pushsdk.receiver.YoukuMyPushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.youku.pushsdk.receiver.YoukuAppActionReceiver

com.youku.pushsdk.pushservice.ALARM_TICK
com.youku.pushsdk.pushservice.ALARM_DATA_COLLECT

com.datac.newspm.broadcast.LauncherBroadcast

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.REBOOT
android.intent.action.USER_PRESENT

com.datac.newspm.broadcast.ApplicationBroadcast

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

com.datac.newspm.broadcast.AppFlowBroadcast

android.net.conn.CONNECTIVITY_CHANGE

com.youku.phone.PackageChangeReceiver

android.intent.action.PACKAGE_ADDED

com.alipay.mobile.command.trigger.NotifyTrigger

com.alipay.mobile.command.NOTIFY

com.xiaomi.pushsdk.control.MIMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.youku.service.push.LocalPushReceiver

android.intent.action.BOOT_COMPLETED

com.youku.service.push.WakeUpReceiver

com.youku.android.pushsdk.action.WAKEUP_COLLECT

Services

com.punchbox.engine.PunchBoxService

com.punchbox.service

org.openudid.OpenUDID_service

org.openudid.GETUDID

com.youku.pushsdk.service.PushService

com.youku.pushsdk.pushservice.START_PUSH_SERVICE
com.youku.pushsdk.pushservice.BASE_DATA
com.youku.pushsdk.pushservice.EVENT_DATA
com.youku.pushsdk.pushservice.ACTION_PUSH_SWITCH_CHANGE
com.youku.pushsdk.pushservice.ACTION_NET_CHANGE
com.youku.pushsdk.pushservice.ACTION_COLLECT_DATA
com.youku.pushsdk.pushservice.PUSH_STATE
com.youku.pushsdk.pushservice.FRIEND

com.datac.newspm.services.MMS

com.datac.newspm.services.MMS

com.youku.multiscreensdk.client.api.AutoSilenceSetupService

com.youku.multiscreensdk.start_sddp_search
com.youku.multiscreensdk.stop_sddp_search

Android Permissions

b825d41d0963944b7235f11a32ef7562_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.FLASHLIGHT

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.CHANGE_WIFI_STATE

android.permission.READ_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

com.youku.phone.permission.MIPUSH_RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.youku.phone

com.youku.phone.ActivityWelcome

Activities

com.youku.phone.ActivityWelcome

com.youku.ui.activity.MyUploadVideoPageActivity

com.youku.ui.activity.DownloadPageActivity

com.youku.phone.search.activity.SearchResultActivity

com.youku.ui.search.last.SearchActivity

com.youku.ui.activity.DetailActivity

com.youku.ui.activity.WebViewActivity

com.zijunlin.Zxing.CaptureActivity

com.youku.gamecenter.GameCenterHomeActivity

com.youku.gamecenter.GameDetailsActivity

com.youku.alipay.activity.CallbackActivity

com.taobao.tae.sdk.ui.TradeWebViewActivity

com.alipay.mobile.command.trigger.WebViewTrigger

Permissions

Receivers

com.youku.service.download.DownloadReceiver

com.youku.gamecenter.outer.GamePlayersReceiver

com.youku.appcenter.ClickActionReceiver

com.youku.gamecenter.GameInstallActionReceiver

com.youku.service.push.PushReceiver

com.youku.pushsdk.receiver.YoukuMyPushServiceReceiver

com.youku.pushsdk.receiver.YoukuAppActionReceiver

com.datac.newspm.broadcast.LauncherBroadcast

com.datac.newspm.broadcast.ApplicationBroadcast

com.datac.newspm.broadcast.AppFlowBroadcast

com.youku.phone.PackageChangeReceiver

com.alipay.mobile.command.trigger.NotifyTrigger

com.xiaomi.pushsdk.control.MIMessageReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.youku.service.push.LocalPushReceiver

com.youku.service.push.WakeUpReceiver

Services

com.punchbox.engine.PunchBoxService

org.openudid.OpenUDID_service

com.youku.pushsdk.service.PushService

com.datac.newspm.services.MMS

com.youku.multiscreensdk.client.api.AutoSilenceSetupService

Android Permissions

b825d41d0963944b7235f11a32ef7562_JaffaCakes118