c0c24ea91977be8235890be987bf89d5_JaffaCakes118

General

Target

c0c24ea91977be8235890be987bf89d5_JaffaCakes118
Size

31.2MB
MD5

c0c24ea91977be8235890be987bf89d5
SHA1

f1bbfcc740791066219ad35349980b9ab593a9ac
SHA256

759810960fb8b880422ea470a83b89c5f9e7ca4b7d340d3e0653f3dd5609f779
SHA512

5d5037cabd8dd9532121af290427eac17b1639fcbcd77bd67b6854f0835fd7f857159c51865cf20b32254fac17b3df49bc0b671fc49791795c361c03e0fec577
SSDEEP

786432:pOayc/fVtl4S2hNYT1CrUFAsxKzya4z+wSpW7EOCD:Qayof3lIoT1ymKzhW7A

Score

8^/10

upx

Malware Config

Signatures

Patched UPX-packed file 2 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx
sample	patched_upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx
sample	upx

Requests dangerous framework permissions 8 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

c0c24ea91977be8235890be987bf89d5_JaffaCakes118
.apk android arch:arm arch:x86

com.izaodao.gm

com.izaodao.gm.feature.splash.SplashActivity

Activities

com.izaodao.gm.feature.splash.SplashActivity

android.intent.action.MAIN

com.izaodao.gm.feature.main.MainActivity

android.intent.action.VIEW

com.benmu.framework.activity.GlobalWebViewActivity

android.intent.action.VIEW

com.benmu.framework.activity.DebugActivity

android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.izaodao.gm.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.umeng.qq.tencent.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.CAMERA
android.permission.READ_CONTACTS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.WAKE_LOCK
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.VIBRATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_GPS
getui.permission.GetuiService.com.bmdoctor.jyt
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
com.google.android.c2dm.permission.RECEIVE
com.izaodao.gm.permission.C2D_MESSAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Receivers

com.google.android.gms.analytics.AnalyticsReceiver

com.google.android.gms.analytics.ANALYTICS_DISPATCH

com.google.android.gms.analytics.CampaignTrackingReceiver

com.android.vending.INSTALL_REFERRER

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.alibaba.android.bindingx.plugin.weex.WXBindingXModuleService

bindingx
binding
expressionBinding

Android Permissions

c0c24ea91977be8235890be987bf89d5_JaffaCakes118

Permissions

android.permission.CAMERA

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.VIBRATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_GPS

getui.permission.GetuiService.com.bmdoctor.jyt

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.google.android.c2dm.permission.RECEIVE

com.izaodao.gm.permission.C2D_MESSAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Sharing

General

Malware Config

Signatures

Files

com.izaodao.gm

com.izaodao.gm.feature.splash.SplashActivity

Activities

com.izaodao.gm.feature.splash.SplashActivity

com.izaodao.gm.feature.main.MainActivity

com.benmu.framework.activity.GlobalWebViewActivity

com.benmu.framework.activity.DebugActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.izaodao.gm.wxapi.WXPayEntryActivity

com.umeng.qq.tencent.AuthActivity

Permissions

Receivers

com.google.android.gms.analytics.AnalyticsReceiver

com.google.android.gms.analytics.CampaignTrackingReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.google.firebase.iid.FirebaseInstanceIdService

com.alibaba.android.bindingx.plugin.weex.WXBindingXModuleService

Android Permissions

c0c24ea91977be8235890be987bf89d5_JaffaCakes118