General

  • Target

    cebdb58037dae460b24028a0094bf4d5_JaffaCakes118

  • Size

    15.0MB

  • MD5

    cebdb58037dae460b24028a0094bf4d5

  • SHA1

    6377db4a2e483e30e97db6fba4dff307c188c42a

  • SHA256

    996949a4d419fd66c54fcdd0218ab0bd543cdf01a4015a7c35225d459b66d5e5

  • SHA512

    5cc8d779beccdc67828c375e316c609b7a8f641134d40360a4e5defa18ae956b4b242dc95e24b3584b11eb9eb52d851c231f57b7e653e3bbac6edf0f098270d1

  • SSDEEP

    393216:7pg0L1iyQDBCSKQr4v7cQK6BD8KQ0TzgGlg:7pggQDUSKs4vjK8D8N0ngGa

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • cebdb58037dae460b24028a0094bf4d5_JaffaCakes118
    .apk android arch:arm

    com.magic.clmanager

    com.qihoo360.mobilesafe.opti.ui.main.AppEnterActivity


  • authguide.jar
    .apk android

    com.qihoo360.mobilesafe.authguide

    com.qihoo360.mobilesafe.authguide.MainActivity


  • business.jar
    .apk android arch:arm

    com.qihoo360.mobilesafe.business

    com.qihoo360.mobilesafe.business.ui.TestMainActivity


  • chargescreen.jar
    .apk android

    com.qihoo360.mobilesafe.chargescreen

    com.qihoo360.mobilesafe.chargescreen.ui.GuideActivity


  • deviceinfo.jar
    .apk android arch:x86 arch:arm arch:arm64

    com.qihoo360.mobilesafe.deviceinfo

    com.qihoo360.mobilesafe.deviceinfo.MainActivity


  • floatwindow.jar
    .apk android

    com.qihoo360.mobilesafe.floatwindow

    com.qihoo360.mobilesafe.floatwindow.MainActivity


  • global.jar
    .apk android

    com.global.vxproto_ec


  • lockscreen.jar
    .apk android arch:arm

    com.qihoo360.mobilesafe.lockscreen

    com.qihoo360.mobilesafe.applock.ui.TestScreenActivity


  • p-n-lssvc.jar
    .apk android

    com.qihoo360.mobilesafe.lssvc

    com.qihoo360.plugin.lockscreen.activity.LockScreenHomeActivity


  • lsscv.jar
    .apk android

    com.qihoo360.mobilesafe.lssvc

    com.qihoo360.plugin.lockscreen.activity.LockScreenHomeActivity


  • news.jar
    .apk android arch:arm

    com.qihoo360.mobilesafe.news

    com.qihoo360.news.page.DemoActivity


  • protocol.jar
    .apk android

    com.qihoo360.mobilesafe.protocol

    com.qihoo360.mobilesafe.MainActivity


  • rooter.jar
    .apk android

    com.qihoo.rooter

    .Entry


  • shortcut_4.apk
    .apk android

    com.qihoo.cleandroid_cn.onekeycleanshortcut

    com.qihoo.cleandroid_cn.onekeycleanshortcut.MainActivity


Android Permissions

cebdb58037dae460b24028a0094bf4d5_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.REAL_GET_TASKS

android.permission.PACKAGE_USAGE_STATS

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.REORDER_TASKS

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.CAMERA

android.permission.READ_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_MTK_MMHW

android.permission.VIBRATE

android.permission.GET_ACCOUNTS

android.permission.FLASHLIGHT

android.permission.CHANGE_NETWORK_STATE

android.permission.EXPAND_STATUS_BAR

android.permission.ACCESS_COARSE_LOCATION

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.USE_FINGERPRINT

android.permission.INTERACT_ACROSS_USERS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.BLUETOOTH

com.qihoo.antivirus.update.permission.clmanager

com.magic.clmanager.permission.NEWS_SDK_BROADCAST

android.permission.SET_WALLPAPER

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.DISABLE_KEYGUARD

com.google.android.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS