146a8ac7daca162b12407caffa5835db_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
146a8ac7daca162b12407caffa5835db_JaffaCakes118
Size 18.8MB
Sample240627-dc2zvsyeqa
SHA256 353b1456f0b9d16f3b6f633e14faaff0a07541d26bf125a17719d2596610ec1f
MD5 146a8ac7daca162b12407caffa5835db
SHA1 d0054c72c9b808df60825da3842143af41ac66fc
SHA512 8cb73acb59dcefa69f2c66f2872e8d53f1761114155c090baf1414ef2fd405b76f970aecc863224de6958186ba5fbe2b1bc088f14c2f74dfc5501fe0ffec5f36
SSDEEP 393216:3QSH2eJNtayJOcO4BwkRyRWDk75F1xOBky945/HqyWuJp:3KwaMO+B07iV45/H0m
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

146a8ac7daca162b12407caffa5835db_JaffaCakes118

.apk 18.8MB
cn.uc.gamesdk.loader.apk

.apk 7.1MB
libcn.uc.gamesdk.account.so

.apk 760KB
libcn.uc.gamesdk.asr.so

.apk 2.4MB
libcn.uc.gamesdk.core.so

.apk 2.4MB
libcn.uc.gamesdk.floater.so

.apk 843KB
libcn.uc.gamesdk.init.so

.apk 150KB
libcn.uc.gamesdk.update.so

.apk 20KB
ucsdk.apk

.apk 37KB
vivounionapk_v2.2.41_a1e788e_201708101947.vua

.apk 3.0MB

146a8ac7daca162b12407caffa5835db_JaffaCakes118

SHA256 353b1456f0b9d16f3b6f633e14faaff0a07541d26bf125a17719d2596610ec1f
MD5 146a8ac7daca162b12407caffa5835db
SHA1 d0054c72c9b808df60825da3842143af41ac66fc
SHA512 8cb73acb59dcefa69f2c66f2872e8d53f1761114155c090baf1414ef2fd405b76f970aecc863224de6958186ba5fbe2b1bc088f14c2f74dfc5501fe0ffec5f36
SSDEEP 393216:3QSH2eJNtayJOcO4BwkRyRWDk75F1xOBky945/HqyWuJp:3KwaMO+B07iV45/H0m
MD5 SHA1 SHA512 SSDEEP

android

com.hnby.byxytx.aligames

vivounionapk_v2.2.41_a1e788e_201708101947.vua

SHA256 4b0a741b1158767c032a2cedaaa1b63726a1c658004527d195298a828d303af2
MD5 3248f54bbd1b25712393c0ffae0ac586
SHA1 bd1142b337fc19e09762e938e2174a860f1780b1
SHA512 4f7aa55f10526feaf8be053f0633aff3cc47c9f86ba9e0d723e3d335ac73fdd0ca6c3ade44c01d9b3dc37290a648d54154c877de59cded41b309bffde6d3e1ea
SSDEEP 49152:vha0tP3ogJhIDaIzmVAI0tWkL6c8knFf5O2/wwby4VesOKVKkwKSIYOka7SmvvoO:Z3BJyD8iIMW5cRFRO2/Bb7Ve98KTKtYS
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.vivo.sdkplugin

Android Permissions

146a8ac7daca162b12407caffa5835db_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS

android.permission.WRITE_CALENDAR

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MANAGE_ACCOUNTS

android.permission.ACCESS_FINE_LOCATION

com.android.alarm.permission.SET_ALARM

android.permission.PACKAGE_USAGE_STATS

android.permission.READ_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

File Explorer

146a8ac7daca162b12407caffa5835db_JaffaCakes118

com.hnjw.LaunchActivity

com.hnjw.Second

cn.gundam.sdk.shell.activity.ProxyActivity

cn.uc.gamesdk.activity.PullupActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.alipay.sdk.app.H5AuthActivity

cn.gundam.sdk.shell.service.ProxyService

cn.uc.gamesdk.loader.apk

libcn.uc.gamesdk.account.so

cn.uc.gamesdk.account.activity.AccountActivity

libcn.uc.gamesdk.asr.so

libcn.uc.gamesdk.core.so

cn.uc.gamesdk.core.updategame.activity.UpdateGameActivity

cn.uc.gamesdk.core.entrance.activity.SdkWebViewActivity

cn.uc.gamesdk.core.entrance.activity.SdkNativeViewActivity

cn.uc.gamesdk.core.entrance.activity.SdkDialogActivity

cn.uc.gamesdk.core.entrance.activity.SdkFloatViewActivity

cn.uc.gamesdk.core.operation.display.method.DisplayInDialogActivity

cn.uc.gamesdk.core.download.DownloadProgressActivity

libcn.uc.gamesdk.floater.so

cn.uc.gamesdk.floater.business.video.SdkVideoViewActivity

cn.uc.gamesdk.floater.keyboard.KeyboardViewActivity

libcn.uc.gamesdk.init.so

cn.uc.gamesdk.init.splash.SplashActivity

libcn.uc.gamesdk.update.so

ucsdk.apk

vivounionapk_v2.2.41_a1e788e_201708101947.vua

com.vivo.upgradelibrary.upmode.VivoUpgradeActivityDialog

com.vivo.unionsdk.ui.PermissionAlertActivity

com.vivo.sdkplugin.activity.LoginActivity

com.bbk.payment.PaymentActivity

com.bbkmobile.iqoo.payment.PaymentActivity

com.vivo.unionsdk.ui.UnionActivity

com.vivo.sdkplugin.wxapi.WXPayEntryActivity

com.vivo.sdkplugin.payment.qqpay.VivoQQPayResultActivity

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.vivo.plugin.aidl.LoginAccInfoService

com.vivo.assist.AssistService

com.vivo.sdkplugin.AccountAppWidgetProvider

Android Permissions

146a8ac7daca162b12407caffa5835db_JaffaCakes118