General

  • Target

    9ffc114da69c9596ae6ef42e99c6cc6f_JaffaCakes118

  • Size

    1.8MB

  • MD5

    9ffc114da69c9596ae6ef42e99c6cc6f

  • SHA1

    b9c0c45efe66b566e9a1f46162eacc7e9c98161a

  • SHA256

    a0bbf84811572456c00b9aff843056d41d542abac0e5997abd1a970afd56bf5c

  • SHA512

    f056d766a6d9c4a3e9b420642eb93ffa5d7fbb47f5a45b62e615fe03d5022a0ec6f94d462644bdadfb1d16736d5d2dbfe6582b98e12ddd34a01749817c5564fd

  • SSDEEP

    49152:GJVKtChgrMeaZwDue5o5jC9RGlRxXuBOHkZ/sdw5QbBQXdJXu:GJVKtHrW2D5o5+RadCOEDQIJe

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ffc114da69c9596ae6ef42e99c6cc6f_JaffaCakes118
    .zip
  • files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • files/busybox
    .elf linux arm
  • files/su
    .elf linux arm
  • files/zergRush
    .elf linux arm
  • runme.bat