0c1c79520a6e4c7aa61a7a3c27d2e091_JaffaCakes118

General

Target

0c1c79520a6e4c7aa61a7a3c27d2e091_JaffaCakes118
Size

22.5MB
MD5

0c1c79520a6e4c7aa61a7a3c27d2e091
SHA1

e0b213ca7c238a5cd51bd307db03af176fae2856
SHA256

61aeea20ead3004aebdd2874292a5b98b904d02196fb7240198470588193b3da
SHA512

77cee6fadcce3dedf64ed356e028a40c367030e7505f27dc50476d8f137a009f6387662bad61f45405d5f523308736c268916d85405cbe2c3a76b754a9460c30
SSDEEP

393216:FiBQITCpPkrV6RItakeA1Y7D5KThT+ibpnj52jXX2nSUNUnXPBemxy2F1zPSvkM:FeTCmp6Hkna2TDlnjWn4S8UnfBey51zC

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

Files

0c1c79520a6e4c7aa61a7a3c27d2e091_JaffaCakes118
.apk android arch:arm arch:x86

com.diguayouxi

com.diguayouxi.ui.FirstActivity

Activities

com.diguayouxi.ui.SearchActivity

android.intent.action.VIEW

com.diguayouxi.ui.ManageActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.diguayouxi.ui.FirstActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

getui.permission.GetuiService.com.diguayouxi
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.WRITE_SETTINGS
android.permission.ACCESS_NETWORK_STATE
android.permission.BATTERY_STATS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_TASKS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.VIBRATE
android.permission.CAMERA
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.WRITE_APN_SETTINGS
android.permission.PACKAGE_USAGE_STATS
android.permission.NFC
android.permission.VIBRATE
android.webkit.permission.PLUGIN
cn.swiftpass.wxpay.permission.MMOAUTH_CALLBACK
cn.swiftpass.wxpay.permission.MM_MESSAGE
xvtian.gai.receiver
org.simalliance.openmobileapi.SMARTCARD

Receivers

com.diguayouxi.receiver.AppReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
com.downjoy.action.PACKAGE_ADDED
com.downjoy.action.PACKAGE_REMOVED

com.diguayouxi.receiver.ServiceReciever

com.diguayouxi.action.MGMT_SERVICE_START
com.diguayouxi.action.MGMT_SERVICE_RESTART
com.diguayouxi.action.MGMT_SERVICE_LOG_RUNNING_APP
com.diguayouxi.action.ACTION_RETRY
android.net.conn.CONNECTIVITY_CHANGE

com.diguayouxi.receiver.ReMountBroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MEDIA_EJECT
android.intent.action.MEDIA_MOUNTED

com.diguayouxi.receiver.SdcardReceiver

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_EJECT
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.MEDIA_REMOVED

com.diguayouxi.receiver.AutoStartReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT

com.diguayouxi.receiver.NetWorkReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.igexin.sdk.PushManagerReceiver

com.igexin.sdk.action.pushmanager

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.diguayouxi.receiver.PushReceiver

com.igexin.sdk.action.09kAYtZYY77cyOFbMhF707

Services

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

com.diguayouxi.autoinstaller.AutoInstallAccessibilityService

android.accessibilityservice.AccessibilityService

com.diguayouxi.syd.Daemon

com.syd.game.market.main

Android Permissions

0c1c79520a6e4c7aa61a7a3c27d2e091_JaffaCakes118

Permissions

getui.permission.GetuiService.com.diguayouxi

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.BATTERY_STATS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.VIBRATE

android.permission.CAMERA

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.WRITE_APN_SETTINGS

android.permission.PACKAGE_USAGE_STATS

android.permission.NFC

android.permission.VIBRATE

android.webkit.permission.PLUGIN

cn.swiftpass.wxpay.permission.MMOAUTH_CALLBACK

cn.swiftpass.wxpay.permission.MM_MESSAGE

xvtian.gai.receiver

org.simalliance.openmobileapi.SMARTCARD

Sharing

General

Malware Config

Signatures

Files

com.diguayouxi

com.diguayouxi.ui.FirstActivity

Activities

com.diguayouxi.ui.SearchActivity

com.diguayouxi.ui.ManageActivity

com.diguayouxi.ui.FirstActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.diguayouxi.receiver.AppReceiver

com.diguayouxi.receiver.ServiceReciever

com.diguayouxi.receiver.ReMountBroadcastReceiver

com.diguayouxi.receiver.SdcardReceiver

com.diguayouxi.receiver.AutoStartReceiver

com.diguayouxi.receiver.NetWorkReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.diguayouxi.receiver.PushReceiver

Services

com.igexin.sdk.PushService

com.diguayouxi.autoinstaller.AutoInstallAccessibilityService

com.diguayouxi.syd.Daemon

Android Permissions

0c1c79520a6e4c7aa61a7a3c27d2e091_JaffaCakes118