dc3db1b84802c7d196dbd7bd47ac86ed_JaffaCakes118

General

Target

dc3db1b84802c7d196dbd7bd47ac86ed_JaffaCakes118
Size

25.5MB
MD5

dc3db1b84802c7d196dbd7bd47ac86ed
SHA1

d4eea2a639164cfaf2d03012fdbea4dd79d8b8df
SHA256

68bfe0e514c36b8f17d9c62b8ac27142aa5cadb82a00761637f4a5335656f7d5
SHA512

76c78de8642ffe2d68c395ff323932a04ab42cec87f220ba50381e593c6243eea01e8a2ccef52c47b1d987d2a4d4f92920bc031bad98cc75683a28839732a294
SSDEEP

393216:pGQwE1CDPXFQXl1ZWgl2e+zDRT6TzoD/h36CRz9g3SFbJ9gJYcd:3I611ZhMzTD/h3PRz9sqNSy6

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read SMS messages.	android.permission.READ_SMS

Files

dc3db1b84802c7d196dbd7bd47ac86ed_JaffaCakes118
.apk android arch:arm

com.boyaa.fben

com.boyaa.texaspoker.application.module.op.OpeningShowActivity

Activities

com.boyaa.texaspoker.application.module.op.OpeningShowActivity

android.intent.action.MAIN

com.google.zxing.client.android.CaptureActivity

android.intent.action.MAIN
com.google.zxing.client.android.SCAN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.google.zxing.client.android.encode.EncodeActivity

com.google.zxing.client.android.ENCODE
android.intent.action.SEND

com.google.zxing.client.android.book.SearchBookContentsActivity

com.google.zxing.client.android.SEARCH_BOOK_CONTENTS

com.google.zxing.client.android.share.ShareActivity

com.google.zxing.client.android.SHARE

com.google.zxing.client.android.share.BookmarkPickerActivity

android.intent.action.PICK

com.google.zxing.client.android.share.AppPickerActivity

android.intent.action.PICK

com.google.zxing.client.android.HelpActivity

android.intent.action.VIEW

ru.ok.android.sdk.OkAuthActivity

android.intent.action.VIEW

Permissions

android.permission.GET_ACCOUNTS
android.permission.WAKE_LOCK
android.permission.RECORD_AUDIO
android.permission.CAMERA
com.boyaa.androidmarket.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.WRITE_SETTINGS
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
com.android.vending.BILLING
android.permission.SEND_SMS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CALL_PHONE
com.boyaa.fben.PAYMENT_INFO
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.CHANGE_NETWORK_STATE
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.RESTART_PACKAGES

Receivers

com.bell.plugin.SmsBroadcastReceiver

android.provider.Telephony.SMS_RECEIVED

com.boyaa.texaspoker.application.receiver.PokerReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_POWER_CONNECTED
com.boyaa.check.updateactivity
com.boyaa.push.forcepushactivity
com.boyaa.push.forcepushactivity_timing
com.boyaa.check.updateactivity

com.boyaa.texaspoker.application.receiver.C2dmReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

com.boyaa.texaspoker.pay.showgoods.checkout.BillingReceiver

com.android.vending.billing.IN_APP_NOTIFY
com.android.vending.billing.RESPONSE_CODE
com.android.vending.billing.PURCHASE_STATE_CHANGED

mp.MpSMSReceiver

android.provider.Telephony.SMS_RECEIVED

com.boyaa.texaspoker.pay.showgoods.fortumo.base.fortumoPaymentStatusReceiver

mp.info.PAYMENT_STATUS_CHANGED

com.boyaa.boyaaad.broadcast.DownloadCompleteBroadcastReceiver

android.intent.action.DOWNLOAD_COMPLETE

Services

Android Permissions

dc3db1b84802c7d196dbd7bd47ac86ed_JaffaCakes118

Permissions

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.CAMERA

com.boyaa.androidmarket.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

com.android.vending.BILLING

android.permission.SEND_SMS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.CALL_PHONE

com.boyaa.fben.PAYMENT_INFO

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.CHANGE_NETWORK_STATE

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.RESTART_PACKAGES

Sharing

General

Malware Config

Signatures

Files

com.boyaa.fben

com.boyaa.texaspoker.application.module.op.OpeningShowActivity

Activities

com.boyaa.texaspoker.application.module.op.OpeningShowActivity

com.google.zxing.client.android.CaptureActivity

com.google.zxing.client.android.encode.EncodeActivity

com.google.zxing.client.android.book.SearchBookContentsActivity

com.google.zxing.client.android.share.ShareActivity

com.google.zxing.client.android.share.BookmarkPickerActivity

com.google.zxing.client.android.share.AppPickerActivity

com.google.zxing.client.android.HelpActivity

ru.ok.android.sdk.OkAuthActivity

Permissions

Receivers

com.bell.plugin.SmsBroadcastReceiver

com.boyaa.texaspoker.application.receiver.PokerReceiver

com.boyaa.texaspoker.application.receiver.C2dmReceiver

com.boyaa.texaspoker.pay.showgoods.checkout.BillingReceiver

mp.MpSMSReceiver

com.boyaa.texaspoker.pay.showgoods.fortumo.base.fortumoPaymentStatusReceiver

com.boyaa.boyaaad.broadcast.DownloadCompleteBroadcastReceiver

Services

Android Permissions

dc3db1b84802c7d196dbd7bd47ac86ed_JaffaCakes118