com.i100c.cp.MainActivity
android.intent.action.MAIN
Behavioral task
behavioral1
Sample
88f20c1e18f9a773ee9c2b26eeeb3da4_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Target
88f20c1e18f9a773ee9c2b26eeeb3da4_JaffaCakes118
Size
26.5MB
MD5
88f20c1e18f9a773ee9c2b26eeeb3da4
SHA1
be4b5e04756e1993e63330f917b41ae7273bc5fd
SHA256
88b1dff091f292743f012b2d3520143a507469e445e1260f78507aeacc76a150
SHA512
69f8f6100b95e83ba76b9d167ff6c58e59db9c4476d336b4786c6db2d2816de59f2f55d34883341edbc0da752bff3f090cf212695d46adb17bf88883d34d199a
SSDEEP
393216:xKmqaLgq7/7QtO3DnyVyg+OydAexHlc131DQRdac47xqvyIQAtSvMC9qg3PXKeEF:xOasq7KIdJxHly3VMUxlrtMC8cXOucf
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource | yara_rule |
---|---|
sample | patched_upx |
resource | yara_rule |
---|---|
sample | upx |
description | ioc |
---|---|
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
Allows an application to record audio. | android.permission.RECORD_AUDIO |
Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
Allows an application to request installing packages. | android.permission.REQUEST_INSTALL_PACKAGES |
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
Required to be able to access the camera device. | android.permission.CAMERA |
Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
Allows an application to read or write the system settings. | android.permission.WRITE_SETTINGS |
Allows access to the list of accounts in the Accounts Service. | android.permission.GET_ACCOUNTS |
Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
android.intent.action.MAIN
android.permission.READ_LOGS
android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECORD_AUDIO
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.ACCESS_FINE_LOCATION
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
android.permission.RESTART_PACKAGES
android.permission.GET_TASKS
android.permission.GET_ACCOUNTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REORDER_TASKS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.USER_PRESENT
com.taobao.accs.intent.action.COMMAND
com.taobao.accs.intent.action.START_FROM_AGOO
com.i100c.cp.intent.action.COMMAND
android.intent.action.PACKAGE_REMOVED
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
com.alibaba.push2.action.NOTIFICATION_OPENED
com.alibaba.push2.action.NOTIFICATION_REMOVED
com.alibaba.sdk.android.push.RECEIVE
com.alibaba.sdk.android.push.NOTIFY_ACTION
com.alibaba.sdk.android.push.CHECK_SERVICE
com.taobao.accs.intent.action.SERVICE
com.taobao.accs.intent.action.RECEIVE
com.taobao.accs.intent.action.RECEIVE
org.agoo.android.intent.action.RECEIVE
org.android.agoo.client.MessageReceiverService
android.permission.READ_LOGS
android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECORD_AUDIO
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.ACCESS_FINE_LOCATION
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
android.permission.RESTART_PACKAGES
android.permission.GET_TASKS
android.permission.GET_ACCOUNTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REORDER_TASKS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN