General

  • Target

    14893357222bcbac03d1eff0dd4bed84_JaffaCakes118

  • Size

    25.3MB

  • MD5

    14893357222bcbac03d1eff0dd4bed84

  • SHA1

    08d37b2c527bc9271d4a96a94e5c338cc40aa4fc

  • SHA256

    fbd2a9ef3a479cb697634af8a0adc484c96b94e257c06b086f707ce025306fee

  • SHA512

    5d4478b1339d7822ff3737fcca8b80c3974790de1427563b9bd73b91f61293b86088e0d522997619d14edf1b1158c3c508d2ccc9163f339f5e6bf35ca5c73108

  • SSDEEP

    393216:7YkoMXHtf+HS0BChak1Foh+CKMSmpbOpyZbNI5/CKmqaLyleOYBGB2mKMOCFqRIb:MrQHbc8oAC/OpH/COa2lEGvqRI0c

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 14 IoCs

Files

  • 14893357222bcbac03d1eff0dd4bed84_JaffaCakes118
    .apk android arch:arm

    com.saicmobility.user

    com.saic.passenger.main.welcome.WelcomeActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


  • payegis-did-dex-v7.0.0.jar
    .apk android
  • payegis-did-dex-v7.0.1.jar
    .apk android

Android Permissions

14893357222bcbac03d1eff0dd4bed84_JaffaCakes118

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.INTERNET

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_LOGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECORD_AUDIO

android.permission.RECEIVE_BOOT_COMPLETED

com.saicmobility.user.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.BLUETOOTH

android.permission.CAMERA

android.permission.FLASHLIGHT