dbc7eaaaeb25e1fc4022a2bf04162918_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dbc7eaaaeb25e1fc4022a2bf04162918_JaffaCakes118
Size

18.1MB
MD5

dbc7eaaaeb25e1fc4022a2bf04162918
SHA1

ecd98abec1e25c270d49b6958ced04dd79cda69d
SHA256

fe10a038fa6fcabcb853d798f70dceb0bf770f4a55fa8b265da953168e90773e
SHA512

769fec77ca9f5d9715129c0e5b0a4feb17f61f07c55054bfb82b40e10121dfa7a150cc15dd3c7ae85fb94d3d9ebfbecfb43f44fe19d60f0b92a4c9b353cd3d1b
SSDEEP

393216:NIsILyQNGXDFy1YnwOv+D8zUhZIQiSG27saJSYWz2bwI:7ILOpDdUGP27sEWzlI

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

dbc7eaaaeb25e1fc4022a2bf04162918_JaffaCakes118
.apk android arch:arm arch:x86

com.baidu.browser.apps

com.baidu.browser.framework.BdBrowserActivity

Activities

com.baidu.cloudsdk.social.share.handler.QQFriendShareReceiverActivity

android.intent.action.VIEW

com.baidu.browser.framework.BdBrowserActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.SEARCH
android.intent.action.WEB_SEARCH
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
com.baidu.browser.apps.INVOKE
baidu.intent.action.BROWSERPLAYER
com.baidu.browser.advert.notifyclick
com.baidu.browser.apps.action.DOWNLOADSTORY
com.baidu.browser.OPEN
android.intent.action.VIEW

com.baidu.browser.feature.newvideoapi.BdVideoThirdPartyActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.baidu.browser.nativebaidu.BdNativeBaiduActivity

android.intent.action.MAIN

com.baidu.browser.novelapi.reader.BdNovelReaderSettingsActivity

com.baidu.searchbox.reader.action.SHOW_PREFERENCE

com.baidu.browser.plugin.readers.entry.BdPDFReaderActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.baidu.browser.plugin.readers.entry.BdOfficeReaderActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.baidu.browser.plugin.readers.entry.BdUnzipActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.baidu.browser.bubble.search.BdBubbleFrontSearchActivity

android.intent.action.ASSIST
com.baidu.browser.bubble.search.INVOKE
com.baidu.browser.bubble.search.INVOKE
com.baidu.browser.bubble.search.INVOKE

com.baidu.appsearch.lite.AppsearchDesktopIconActivity

com.baidu.appsearch.lite.iconinvoke

com.baidu.appsearch.lite.AppsearchIconActivity

android.intent.action.MAIN

com.baidu.appsearch.lite.InstallAppsearchActivity

android.intent.action.MAIN

Permissions

com.baidu.browser.apps.permission.APS_INSTALL
android.permission.INTERNET
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.BACKUP_DATA
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.CLEAR_APP_CACHE
android.permission.WRITE_SETTINGS
android.permission.GET_TASKS
android.permission.RECORD_AUDIO
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.PERSISTENT_ACTIVITY
android.permission.CAMERA
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.BAIDU_LOCATION_SERVICE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_LOGS
android.permission.BROADCAST_STICKY
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SYSTEM_ALERT_WINDOW
android.permission.DISABLE_KEYGUARD
baidu.push.permission.WRITE_PUSHINFOPROVIDER.com.baidu.browser.apps
android.permission.SET_ACTIVITY_WATCHER
android.permission.INSTALL_PACKAGES
android.permission.DELETE_PACKAGES
android.permission.CHANGE_COMPONENT_ENABLED_STATE
android.permission.EXPAND_STATUS_BAR
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.CHANGE_NETWORK_STATE
android.permission.BATTERY_STATS
android.permission.RESTART_PACKAGES
android.permission.READ_CALENDAR
android.permission.write_calendar
android.permission.GET_PACKAGE_SIZE
com.baidu.browser.apps.permission.MIPUSH_RECEIVE
android.permission.RECEIVE_SMS
android.permission.BLUETOOTH
android.permission.READ_CONTACTS
com.baidu.permission.SHARE
android.permission.READ_EXTERNAL_STORAGE

Receivers

com.baidu.bottom.service.BottomReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE

com.baidu.browser.bbm.util.BdGalaxyReceiver

com.baidu.intent.action.GALAXY

com.baidu.browser.push.service.BdPushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.DATE_CHANGED
com.baidu.browser.push.service.OPTIMEOUT
com.baidu.browser.push.service.novelupdate
com.baidu.browser.push.service.videoupdate
com.baidu.browser.wakeup.pulltimeout
com.baidu.browser.wakeup.waketimeout
com.baidu.browser.push.autobind
com.baidu.browser.install_callback
com.baidu.appsearch.browser.ACTION
com.baidu.browser.theme.hasnewtheme
com.baidu.browser.push.pull.update.action
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
com.baidu.browser.quietinvoke

com.baidu.browser.push.service.PushMessageReceiver

com.baidu.android.pushservice.action.MESSAGE
com.baidu.android.pushservice.action.RECEIVE
com.baidu.android.pushservice.action.notification.CLICK

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK
android.intent.action.MEDIA_MOUNTED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

com.baidu.browser.home.BdHomeAppInstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

com.baidu.browser.installs.BdInstallsReceiver

android.net.conn.CONNECTIVITY_CHANGE
com.baidu.browser.statistics.installs.TIMEOUT

com.baidu.browser.plugincenter.BdPluginCrashReceiver

com.baidu.browser.plugin.remote.crash

com.baidu.browser.bubble.search.BdBubbleFrontSearchReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.CLOSE_SYSTEM_DIALOGS
com.baidu.browser.bubble.search.action.switchupdate

com.baidu.browser.clipboard.BdClipboardReceiver

android.intent.action.BOOT_COMPLETED

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.baidu.browser.push.BdXiaomiPushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.baidu.browser.hotfix.BdHotfixReceiver

com.baidu.browser.hotfix.action.startservice

Services

com.baidu.sapi2.share.ShareService

baidu.intent.action.account.SHARE_SERVICE

com.baidu.android.pushservice.PushService

com.baidu.android.pushservice.action.PUSH_SERVICE

com.baidu.browser.plugin.redpackets.BdLuckyMoneyService

android.accessibilityservice.AccessibilityService

com.baidu.browser.apps.BdProvokeService

com.baidu.browser.apps.invoke.action.startup
com.baidu.browser.invoke.action.provoke_server
com.baidu.browser.theme.night.apk
.apk android

com.baidu.browser.theme.night

Android Permissions

dbc7eaaaeb25e1fc4022a2bf04162918_JaffaCakes118

Permissions

com.baidu.browser.apps.permission.APS_INSTALL

android.permission.INTERNET

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BACKUP_DATA

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.CLEAR_APP_CACHE

android.permission.WRITE_SETTINGS

android.permission.GET_TASKS

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.PERSISTENT_ACTIVITY

android.permission.CAMERA

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.BAIDU_LOCATION_SERVICE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_LOGS

android.permission.BROADCAST_STICKY

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

baidu.push.permission.WRITE_PUSHINFOPROVIDER.com.baidu.browser.apps

android.permission.SET_ACTIVITY_WATCHER

android.permission.INSTALL_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.EXPAND_STATUS_BAR

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.CHANGE_NETWORK_STATE

android.permission.BATTERY_STATS

android.permission.RESTART_PACKAGES

android.permission.READ_CALENDAR

android.permission.write_calendar

android.permission.GET_PACKAGE_SIZE

com.baidu.browser.apps.permission.MIPUSH_RECEIVE

android.permission.RECEIVE_SMS

android.permission.BLUETOOTH

android.permission.READ_CONTACTS

com.baidu.permission.SHARE

android.permission.READ_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

Files

com.baidu.browser.apps

com.baidu.browser.framework.BdBrowserActivity

Activities

com.baidu.cloudsdk.social.share.handler.QQFriendShareReceiverActivity

com.baidu.browser.framework.BdBrowserActivity

com.baidu.browser.feature.newvideoapi.BdVideoThirdPartyActivity

com.baidu.browser.nativebaidu.BdNativeBaiduActivity

com.baidu.browser.novelapi.reader.BdNovelReaderSettingsActivity

com.baidu.browser.plugin.readers.entry.BdPDFReaderActivity

com.baidu.browser.plugin.readers.entry.BdOfficeReaderActivity

com.baidu.browser.plugin.readers.entry.BdUnzipActivity

com.baidu.browser.bubble.search.BdBubbleFrontSearchActivity

com.baidu.appsearch.lite.AppsearchDesktopIconActivity

com.baidu.appsearch.lite.AppsearchIconActivity

com.baidu.appsearch.lite.InstallAppsearchActivity

Permissions

Receivers

com.baidu.bottom.service.BottomReceiver

com.baidu.browser.bbm.util.BdGalaxyReceiver

com.baidu.browser.push.service.BdPushServiceReceiver

com.baidu.browser.push.service.PushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.browser.home.BdHomeAppInstallReceiver

com.baidu.browser.installs.BdInstallsReceiver

com.baidu.browser.plugincenter.BdPluginCrashReceiver

com.baidu.browser.bubble.search.BdBubbleFrontSearchReceiver

com.baidu.browser.clipboard.BdClipboardReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.baidu.browser.push.BdXiaomiPushReceiver

com.baidu.browser.hotfix.BdHotfixReceiver

Services

com.baidu.sapi2.share.ShareService

com.baidu.android.pushservice.PushService

com.baidu.browser.plugin.redpackets.BdLuckyMoneyService

com.baidu.browser.apps.BdProvokeService

com.baidu.browser.theme.night

Android Permissions

dbc7eaaaeb25e1fc4022a2bf04162918_JaffaCakes118