ce29aabf3bc4bd64f39a5056b64da68d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ce29aabf3bc4bd64f39a5056b64da68d_JaffaCakes118
Size

10.8MB
MD5

ce29aabf3bc4bd64f39a5056b64da68d
SHA1

d372caaf3cc1775dec8f42c247cfb3c488be470c
SHA256

4ee70f2b071377f5242643fbb42a1d459beeb04f929c0c132c22f6efbac44dad
SHA512

879e5e1c22b9db619fdb139a2f4e97b3f9a4a0ee0fa99c1302a0a7e8d512eac1eb2c250da81b0c85da396de6ed8382e8205a88656835201d5f1a21e317c50843
SSDEEP

196608:6AZndZ+SX4gwoXWbiLvbAwJp806cmnZJ+gkR7JyPiz+DuPSWX7QLTNXbyT:6AddZ+StJXWbAbAwJC06cG7+Xl0D0B8G

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 25 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

ce29aabf3bc4bd64f39a5056b64da68d_JaffaCakes118
.apk android arch:arm arch:x86

com.pingan.carowner

.activity.SplashActivity

Activities

.activity.SplashActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.MAIN

.activity.MyPaPushhelperActivity

com.pingan.carowner.activity.MyPushhelperActivity

.lib.share.WeiboShareDetailActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.pingan.anydoor.ui.activity.CommonWebViewActivity

android.intent.action.VIEW

com.pingan.anydoor.hybrid.activity.CacheableWebViewActivity

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.pingan.anydoor.hybrid.activity.MsgCenterWebviewActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.SYSTEM_ALERT_WINDOW
com.android.vending.BILLING
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.CAMERA
android.permission.RESTART_PACKAGES
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WAKE_LOCK
android.permission.PROCESS_OUTGOING_CALLS
android.permission.CHANGE_WIFI_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CAMERA
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.FLASHLIGHT
android.permission.CALL_PHONE
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.READ_PHONE_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.VIBRATE
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.READ_EXTERNAL_STORAGE

Receivers

.lib.extra.paframe.cron4j.BootReceiver

android.intent.action.BOOT_COMPLETED
com.pingan.carowner.action.messagereceiver
com.pingan.carowner.action.messagedetailreceiver
com.pabank.action.LISTENER

.fragments.MainPageFragment$MainPageBroad

com.pingan.check.page
com.pingan.main.page
com.pingan.main.page.dynamicitem

.broadcast.MyReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.paf.hybridframe_support.RemoveAppChecker

com.paf.hybridframe.ACTION_CHECKAPPISUSED

Services

.lib.extra.paframe.cron4j.BootService

com.pabank.cron4j.BootService

com.pingan.driverway.service.AMapLocationService

com.pingan.driverway.service.AMapLocationService

Android Permissions

ce29aabf3bc4bd64f39a5056b64da68d_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SYSTEM_ALERT_WINDOW

com.android.vending.BILLING

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.CAMERA

android.permission.RESTART_PACKAGES

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WAKE_LOCK

android.permission.PROCESS_OUTGOING_CALLS

android.permission.CHANGE_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FLASHLIGHT

android.permission.CALL_PHONE

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

Files

com.pingan.carowner

.activity.SplashActivity

Activities

.activity.SplashActivity

.activity.MyPaPushhelperActivity

.lib.share.WeiboShareDetailActivity

com.pingan.anydoor.ui.activity.CommonWebViewActivity

com.pingan.anydoor.hybrid.activity.CacheableWebViewActivity

com.tencent.tauth.AuthActivity

com.pingan.anydoor.hybrid.activity.MsgCenterWebviewActivity

Permissions

Receivers

.lib.extra.paframe.cron4j.BootReceiver

.fragments.MainPageFragment$MainPageBroad

.broadcast.MyReceiver

com.paf.hybridframe_support.RemoveAppChecker

Services

.lib.extra.paframe.cron4j.BootService

com.pingan.driverway.service.AMapLocationService

Android Permissions

ce29aabf3bc4bd64f39a5056b64da68d_JaffaCakes118