bcf13ee80adbdc175e3b7d1ee9ca3816_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
bcf13ee80adbdc175e3b7d1ee9ca3816_JaffaCakes118
Size 30.9MB
Sample240618-t7relswbql
SHA256 f1f9a8e1864020db237278515e234f4d8ca93a91ffaf056afe7c6727241cf1fb
MD5 bcf13ee80adbdc175e3b7d1ee9ca3816
SHA1 502a6b8b583dc0e031ba8618b039e1a219e6aa4b
SHA512 8331262b9cd462667e1368c48550f25a85c673ff3868c0fb20c864410b46e06da6b4f080833a664670d4edf8252d274aeab97daeb29fb652467fcff63ba1c5ee
SSDEEP 786432:QL+tE/QlbM+KDQk0JsDBfyl+PTrGUcfhkyt6RJAwpb:QKtE/QxrKwJEy0Tofh5tBwF
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

bcf13ee80adbdc175e3b7d1ee9ca3816_JaffaCakes118

.apk 30.9MB

bcf13ee80adbdc175e3b7d1ee9ca3816_JaffaCakes118

SHA256 f1f9a8e1864020db237278515e234f4d8ca93a91ffaf056afe7c6727241cf1fb
MD5 bcf13ee80adbdc175e3b7d1ee9ca3816
SHA1 502a6b8b583dc0e031ba8618b039e1a219e6aa4b
SHA512 8331262b9cd462667e1368c48550f25a85c673ff3868c0fb20c864410b46e06da6b4f080833a664670d4edf8252d274aeab97daeb29fb652467fcff63ba1c5ee
SSDEEP 786432:QL+tE/QlbM+KDQk0JsDBfyl+PTrGUcfhkyt6RJAwpb:QKtE/QxrKwJEy0Tofh5tBwF
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.example.cifnews

com.example.cifnews.WelcomeActivity

android.intent.action.MAIN

com.example.cifnews.MainActivity

com.example.cifnews.GuideActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.example.cifnews.wxapi.WXEntryActivity

com.example.cifnews.wxapi.WXPayEntryActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.mine.activity.FankuiActivity

com.mine.activity.AboutMeActivity

com.mine.activity.MoreSettingActivity

com.mine.activity.MyPostActivity

com.mine.activity.MyMessageActivity

com.mine.activity.MyCollectionActivity

com.circle.CircleDetialActivity

com.circle.RelesePostActivity

com.circle.PostDetialActivity

com.mine.activity.MyToastActivity

com.example.cifnews.PreviewPhotoActivity

galleryfinal.preview.ImagePagerActivity

com.search.SearchActivity

com.message.MessageDetialActivity

com.message.WebDetialActivity

com.search.SearchHomeActivity

com.search.MoreSearchCircleActivity

com.search.MoreSearchPostActivity

com.search.MoreSearchAudioActivity

com.diytype.FirstDiyActivity

com.diytype.HomeDiyActivity

com.example.cifnews.WebActivity

com.diytype.PdfPreviewActivity

com.example.cifnews.WBShareActivity

com.example.cifnews.WxLoginActivity

com.circle.Act_CircleDetial

com.circle.PostDetialWebActivity

com.message.ActivityWebDetial

com.mine.activity.EditMineActivity

com.example.cifnews.LoginActivity

com.example.cifnews.SignActivity

com.example.cifnews.FrogetPwActivity

com.example.cifnews.UpdatePassWordActivity

com.example.cifnews.UpdateUserNameActivity

com.yalantis.ucrop.UCropActivity

com.example.cifnews.BaseLoginActivity

com.Live.LiveActivity

android.intent.action.VIEW

com.Live.LiveDetialActivity

com.mine.activity.MyTicketsActivity

com.Live.MyQrCodeActivity

com.message.SubjectDetialActivity

com.search.MoreSubjectActivity

com.message.BigActionActivity

com.message.EmptyActivity

android.intent.action.VIEW

com.mine.activity.MyPayActivity

com.mine.activity.MyDownLoadActivity

com.mine.activity.MyReportHomeActivity

com.mine.activity.MyReportListActivity

com.diytype.YouZanActivity

com.diytype.ShowPdfActivity

com.search.MoreReportActivity

com.message.UpdateActivity

com.topic.TopicDeitalActivity

com.search.MoreSearchTopicActivity

com.topic.SelectTopicActivity

com.yuke.CourseDetialActivity

com.yuke.VodPlayActivity

com.mine.activity.MyCouponsActivity

com.yuke.LiveVideoActivity

com.mine.activity.RealNmaeActivity

com.mine.activity.ChangePhoneActivity

com.orchard.OrchardActivity

com.orchard.OrchardDetialActivity

com.orchard.OrhcardMoreReportActivity

com.orchard.OrchardVideoActivity

com.orchard.OrhcardMoreLiveActivity

com.orchard.OrhcardMoreYuKeActivity

com.orchard.OrhcardMoreActActivity

com.orchard.OrhcardMorePostActivity

com.orchard.OrhcardMoreSubjectActivity

com.orchard.OrhcardMoreTopicActivity

com.orchard.OrhcardMoreArticleActivity

com.orchard.OrhcardMoreVideoActivity

com.Live.LiveVideoDetialActivity

com.radio.AudioPlaylActivity

com.radio.AudioSubjectActivity

com.mine.activity.MyAudioActivity

com.factory.FactoryDetialActivity

com.factory.FactoryEvaluationActivity

com.factory.FactoryClassifyActivity

com.factory.FactoryListActivity

com.Live.VideoOrderActivity

com.yuke.activity.PlatformCourseActivity

com.mine.activity.MyCourseActivity

io.rong.imkit.plugin.location.AMapLocationActivity

io.rong.imkit.plugin.location.AMapPreviewActivity

io.rong.imkit.plugin.location.AMapRealTimeActivity

io.rong.imkit.plugin.image.PictureSelectorActivity

io.rong.imkit.plugin.image.PicturePreviewActivity

io.rong.imkit.tools.RongWebviewActivity

io.rong.imkit.intent.action.webview

io.rong.imkit.widget.provider.TakingPicturesActivity

io.rong.imkit.activity.PicturePagerActivity

io.rong.imkit.intent.action.picturepagerview

io.rong.imkit.mention.MemberMentionedActivity

io.rong.imkit.activity.FileManagerActivity

io.rong.imkit.activity.FileListActivity

io.rong.imkit.activity.FilePreviewActivity

io.rong.imkit.intent.action.openfile

io.rong.imkit.activity.CSLeaveMessageActivity

cn.finalteam.galleryfinal.PhotoSelectActivity

cn.finalteam.galleryfinal.PhotoEditActivity

cn.finalteam.galleryfinal.PhotoPreviewActivity

com.sina.weibo.sdk.web.WeiboSdkWebActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.sina.weibo.sdk.share.WbShareToStoryActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

Android Permissions

bcf13ee80adbdc175e3b7d1ee9ca3816_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH_ADMIN

android.permission.WAKE_LOCK

android.permission.VIBRATE

com.example.cifnews.permission.MIPUSH_RECEIVE

android.permission.RECORD_AUDIO

android.permission.GET_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.WRITE_SETTINGS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CALL_PHONE

com.example.cifnews.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.FLASHLIGHT