d6994d38f8316df997498767b5a71c4b_JaffaCakes118

General

Target

d6994d38f8316df997498767b5a71c4b_JaffaCakes118
Size

20.1MB
MD5

d6994d38f8316df997498767b5a71c4b
SHA1

908308c52308b547ef2a99e04e9eca39be43ba27
SHA256

49475a7c8b67ef471ce7b6561348fc5e83d85b6e166394ccf4bc9494c55692cf
SHA512

58aeaf85a83e31c2d44ef6dafe2216bfd8be0b00c6ef57074a591643bd7e9e106357789574d9ec16040d671e37c3dec67521974bfe5015971e49c0aba6165ab5
SSDEEP

393216:c+ZdX23KRPsK4YKAhilrnbNdSrGTTvCYWptZVF9KGrAzNIFcpgp5rAo:c+ZZ2YPMY3hilrnbAqLCjrKGcZI5co

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

d6994d38f8316df997498767b5a71c4b_JaffaCakes118
.apk android arch:arm arch:x86

com.docin.zlibrary.ui.android

com.docin.shelf.DocinOpenInActivity

Activities

com.baidu.appsearchlib.NASLib

android.intent.action.VIEW

com.docin.shelf.DocinOpenInActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.docin.oauth.activity.SinaWebViewActivity

android.intent.action.VIEW

com.tencent.tauth.TAuthView

android.intent.action.VIEW

com.docin.asus.AsusToDocinActivity

android.intent.action.VIEW

com.docin.bookshop.charge.ui.RechargeModeActivity

android.intent.action.VIEW

com.ryg.dynamicload.DLProxyActivity

com.ryg.dynamicload.proxy.activity.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_LOGS
android.permission.VIBRATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WAKE_LOCK
android.permission.DISABLE_KEYGUARD
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.WRITE_SETTINGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.SET_DEBUG_APP
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS

Receivers

com.docin.xmly.receiver.PlayerControlReceiver

com.ximalaya.ting.android.opensdk.test.constants.ACTION_CONTROL_PLAY_PAUSE
com.ximalaya.ting.android.opensdk.test.constants.ACTION_CONTROL_PLAY_NEXT
com.ximalaya.ting.android.opensdk.test.constants.ACTION_CONTROL_OPEN

com.docin.tts.PhoneReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.docin.zlibrary.ui.android.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

com.docin.newshelf.plugin.PdfPluginReceiver

PDFPLUGIN_DOWNLOADCOMPLETE_ACTION

com.docin.network.NetBroadcastReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.docin.broadcast.PopLoginDialogReceiver

com.docin.login.dialog

com.docin.xmly.receiver.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

Services

com.umeng.message.UmengService

com.docin.zlibrary.ui.android.intent.action.START
com.docin.zlibrary.ui.android.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2

com.docin.tts.TTSService

com.docin.tts.SERVICE_DEMO

com.docin.comtools.OpenUDID_service

com.docin.comtools.openudid.GETUDID

com.docin.statistics.BackStatisticsService

com.docin.statistics
wifiupload-plugin.apk
.apk android

com.docin.wifi.upload

.WiFiUploadActivity

Activities

.WiFiUploadActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK

Services

Android Permissions

d6994d38f8316df997498767b5a71c4b_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.SET_DEBUG_APP

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

Sharing

General

Malware Config

Signatures

Files

com.docin.zlibrary.ui.android

com.docin.shelf.DocinOpenInActivity

Activities

com.baidu.appsearchlib.NASLib

com.docin.shelf.DocinOpenInActivity

com.docin.oauth.activity.SinaWebViewActivity

com.tencent.tauth.TAuthView

com.docin.asus.AsusToDocinActivity

com.docin.bookshop.charge.ui.RechargeModeActivity

com.ryg.dynamicload.DLProxyActivity

Permissions

Receivers

com.docin.xmly.receiver.PlayerControlReceiver

com.docin.tts.PhoneReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

com.docin.newshelf.plugin.PdfPluginReceiver

com.docin.network.NetBroadcastReceiver

com.docin.broadcast.PopLoginDialogReceiver

com.docin.xmly.receiver.MediaButtonReceiver

Services

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

com.docin.tts.TTSService

com.docin.comtools.OpenUDID_service

com.docin.statistics.BackStatisticsService

com.docin.wifi.upload

.WiFiUploadActivity

Activities

.WiFiUploadActivity

Permissions

Services

Android Permissions

d6994d38f8316df997498767b5a71c4b_JaffaCakes118