c8f30fd320b4330ccef11da3b07a7a2d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c8f30fd320b4330ccef11da3b07a7a2d_JaffaCakes118
Size

11.7MB
MD5

c8f30fd320b4330ccef11da3b07a7a2d
SHA1

5f7a2f7240f38c4d766e775fde77a0c712254cd5
SHA256

d8a979065fd881864a48dbfa151b093f2340fb9655d05527ccff2245f540ae8d
SHA512

2bed9d355ef91dd8fe34893af546f293b37ad496b5972a071cf89c5635040136fef4598f73249a4ab043a603dced30d86bbc85dc662db64da75e8bc59716d860
SSDEEP

196608:uIwyanlKlGO8Xv0O+ywHhiejUfZwgYG3JrdLF63zfE3bjqINzQ7R2b/wItgQRKR:LYl0T8/CjiZ1YG3plF6jKPqINoSVKR

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR

Files

c8f30fd320b4330ccef11da3b07a7a2d_JaffaCakes118
.apk android arch:arm

cn.ninegame.gamemanager

cn.ninegame.gamemanager.activity.MainActivity

Activities

cn.ninegame.gamemanager.activity.LaunchActivity

android.intent.action.VIEW

cn.ninegame.gamemanager.activity.MainActivity

android.intent.action.MAIN
cn.ninegame.gamemanager.action.PULLUP

cn.ninegame.gamemanager.activity.HomeActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

cn.ninegame.gamemanager.activity.MessageBoxActivity

android.intent.action.MAIN

cn.ninegame.gamemanager.activity.LaunchMarketActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.GET_PACKAGE_SIZE
android.permission.VIBRATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.BROADCAST_STICKY
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.PACKAGE_USAGE_STATS
android.permission.BLUETOOTH
android.permission.CLEAR_APP_CACHE
android.webkit.permission.PLUGIN
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.WRITE_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.WRITE_SETTINGS
com.nd.android.launcher.permission.READ_SETTINGS
com.guiji.launcher.permission.READ_SETTINGS
com.fx.launcher.permission.READ_SETTINGS
com.sec.android.app.twlauncher.WRITE_SETTINGS
com.sec.android.app.twlauncher.READ_SETTINGS
org.adw.launcher.permission.READ_SETTINGS
org.adw.launcher.permission.WRITE_SETTINGS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.WRITE_SETTINGS
com.gau.go.launcherex.permission.READ_SETTINGS
com.gau.go.launcherex.permission.WRITE_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.fede.launcher.permission.WRITE_SETTINGS
android.permission.READ_LOGS
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.RESTART_PACKAGES
android.permission.GET_ACCOUNTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.USE_CREDENTIALS
android.permission.READ_CONTACTS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CHANGE_CONFIGURATION
android.permission.MANAGE_ACCOUNTS
android.permission.READ_SYNC_STATS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
cn.ninegame.gamemanager.permission.MIPUSH_RECEIVE

Receivers

cn.ninegame.gamemanager.system.receiver.NotificationsReceiver

android.net.conn.CONNECTIVITY_CHANGE
cn.ninegame.gamemanager.notifications.push
cn.ninegame.gamemanager.notifications.push.force
cn.ninegame.gamemanager.notifications.push.start.service
cn.ninegame.gamemanager.notifications.showNotification
cn.ninegame.gamemanager.notifications.checkNetGameGiftTime
cn.ninegame.gamemanager.notifications.showNetGameNotification
cn.ninegame.gamemanager.notifications.GetGiftInfoNotification
cn.ninegame.gamemanager.notifications.reset.interval
cn.ninegame.gamemanager.notifications.syncFollowNotify.login

cn.ninegame.gamemanager.system.receiver.UninstallAutoDeletePacketReceiver

android.intent.action.PACKAGE_REMOVED

cn.ninegame.gamemanager.system.service.CheckService

cn.ninegame.gamemanager.system.service.CheckService

cn.ninegame.gamemanager.system.receiver.BackProcessReceiver

android.intent.action.USER_PRESENT
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.net.wifi.WIFI_STATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.ANY_DATA_STATE
android.net.wifi.STATE_CHANGE
android.intent.action.PACKAGE_RESTARTED
android.intent.action.PACKAGE_DATA_CLEARED
android.intent.action.PACKAGE_REMOVED
android.intent.action.QUERY_PACKAGE_RESTART
android.intent.action.PACKAGE_INSTALL
android.intent.action.MEDIA_REMOVED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTABLE
android.intent.action.MEDIA_EJECT
android.intent.action.MEDIA_CHECKING
android.intent.action.CLOSE_SYSTEM_DIALOGS

com.taobao.accs.EventReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.taobao.accs.ServiceReceiver

com.taobao.accs.intent.action.COMMAND
com.taobao.accs.intent.action.START_FROM_AGOO

anet.channel.heartbeat.HeartbeatManager$Receiver

anetwork.channel.intent.action.COMMAND

com.taobao.agoo.AgooCommondReceiver

cn.ninegame.gamemanager.intent.action.COMMAND
android.intent.action.PACKAGE_REMOVED

org.android.agoo.xiaomi.MiPushBroadcastReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

cn.ninegame.agoo.adapt.AgooMessageReceiver

cn.ninegame.agoopush

cn.ninegame.gamemanager.module.alarm.AlarmReceiver

cn.ninegame.gamemanager.alarm.action

cn.ninegame.gamemanager.system.receiver.PromoteAppCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED

cn.ninegame.modules.im.biz.notification.receiver.IMNotificationBroadcastReceiver

cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.RECEIVED_MSG
cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.MODIFY_NOTIFICATION
cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.REMOVE_NOTIFICATION
cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.CANCEL_ALL_NOTIFICATION
cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.SEND_MSG_FAIL_NOTIFICATION
cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.CONFIG_UPDATE
cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.RECEIVED_IM_CORE_ADD_GROUP
cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.RECEIVED_IM_CORE_ADD_FRIEND
cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.RECEIVE_IM_INVITE
cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.RECEIVE_IM_GROUP_JOIN
cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.CANCEL_TARGET
cn.ninegame.gamemanager.im.biz.notification.receiver.IMNotificationBroadcastReceiver.CANCEL_BY_USER

Services

cn.ninegame.gamemanager.system.service.NotificationsPushService

cn.ninegame.gamemanager.pullup

cn.ninegame.gamemanager.system.service.ShareService

cn.ninegame.gamemanager.share

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.SERVICE
org.agoo.android.intent.action.PING_V4
com.taobao.accs.intent.action.ELECTION

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

cn.ninegame.gamemanager.TaobaoIntentService

org.agoo.android.intent.action.RECEIVE
cn.ninegame.gamemanager.intent.thirdPush.action.COMMAND

com.taobao.agoo.TaobaoMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService

cn.ninegame.gamemanager.system.service.NGAccessibilityService

android.accessibilityservice.AccessibilityService

cn.ninegame.modules.account.authsync.NGAuthService

android.accounts.AccountAuthenticator

cn.ninegame.modules.account.authsync.NGSyncService

android.content.SyncAdapter

Android Permissions

c8f30fd320b4330ccef11da3b07a7a2d_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.BROADCAST_STICKY

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.PACKAGE_USAGE_STATS

android.permission.BLUETOOTH

android.permission.CLEAR_APP_CACHE

android.webkit.permission.PLUGIN

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.WRITE_SETTINGS

com.nd.android.launcher.permission.READ_SETTINGS

com.guiji.launcher.permission.READ_SETTINGS

com.fx.launcher.permission.READ_SETTINGS

com.sec.android.app.twlauncher.WRITE_SETTINGS

com.sec.android.app.twlauncher.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.WRITE_SETTINGS

android.permission.AUTHENTICATE_ACCOUNTS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.WRITE_SETTINGS

com.gau.go.launcherex.permission.READ_SETTINGS

com.gau.go.launcherex.permission.WRITE_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.WRITE_SETTINGS

android.permission.READ_LOGS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

Files

cn.ninegame.gamemanager

cn.ninegame.gamemanager.activity.MainActivity

Activities

cn.ninegame.gamemanager.activity.LaunchActivity

cn.ninegame.gamemanager.activity.MainActivity

cn.ninegame.gamemanager.activity.HomeActivity

cn.ninegame.gamemanager.activity.MessageBoxActivity

cn.ninegame.gamemanager.activity.LaunchMarketActivity

Permissions

Receivers

cn.ninegame.gamemanager.system.receiver.NotificationsReceiver

cn.ninegame.gamemanager.system.receiver.UninstallAutoDeletePacketReceiver

cn.ninegame.gamemanager.system.service.CheckService

cn.ninegame.gamemanager.system.receiver.BackProcessReceiver

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

anet.channel.heartbeat.HeartbeatManager$Receiver

com.taobao.agoo.AgooCommondReceiver

org.android.agoo.xiaomi.MiPushBroadcastReceiver

cn.ninegame.agoo.adapt.AgooMessageReceiver

cn.ninegame.gamemanager.module.alarm.AlarmReceiver

cn.ninegame.gamemanager.system.receiver.PromoteAppCompleteReceiver

cn.ninegame.modules.im.biz.notification.receiver.IMNotificationBroadcastReceiver

Services

cn.ninegame.gamemanager.system.service.NotificationsPushService

cn.ninegame.gamemanager.system.service.ShareService

com.taobao.accs.ChannelService

com.taobao.accs.data.MsgDistributeService

org.android.agoo.accs.AgooService

cn.ninegame.gamemanager.TaobaoIntentService

com.taobao.agoo.TaobaoMessageIntentReceiverService

cn.ninegame.gamemanager.system.service.NGAccessibilityService

cn.ninegame.modules.account.authsync.NGAuthService

cn.ninegame.modules.account.authsync.NGSyncService

Android Permissions

c8f30fd320b4330ccef11da3b07a7a2d_JaffaCakes118