de13d5fb4b49ce20846af86411772df2_JaffaCakes118

General

Target

de13d5fb4b49ce20846af86411772df2_JaffaCakes118
Size

6.0MB
MD5

de13d5fb4b49ce20846af86411772df2
SHA1

adf9d6565ef7ebcb9a99e951043d2f70cb6613ff
SHA256

b1cb8d86286f2833df72207781aada1758c752be7667e29b9b51f42dad2698be
SHA512

7edaf868b1689e36bc56d904c9e2077c60ba2377899a08bc11f2d30a46bb6413eb2461149994c399f1c760586e810789ca36c0bc92b60cc9a994197afd85613f
SSDEEP

98304:naFXRm0QLo1lt+Q0N+Q4iZasW2QpQ3oa6TRrbH1ep63exrScz9fzM/BOLuSbHccl:cRmY1cy9hRch/p7/1Hc5HLiadVu

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

de13d5fb4b49ce20846af86411772df2_JaffaCakes118
.apk android arch:arm

com.u17.comic.phone

com.u17.phone.ui.FirstActivity

Activities

com.u17.phone.ui.FirstActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_LOGS
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SET_WALLPAPER
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.SEND_SMS
android.permission.CHANGE_WIFI_STATE
android.permission.VIBRATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.u17.permission.ACCESS_DOWNLOAD_MANAGER
com.u17.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED
com.u17.permission.SEND_DOWNLOAD_COMPLETED_INTENTS
android.permission.GET_TASKS
android.permission.SET_DEBUG_APP
android.permission.GET_ACCOUNTS
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.RECORD_AUDIO
com.u17.comic.phone.localdata

Receivers

com.u17.phone.receiver.ConnectChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.u17.comic.phone.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

com.u17.phone.receiver.UninstalledApkReceiver

android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_ADDED

Services

com.umeng.message.UmengService

com.u17.comic.phone.intent.action.START
com.u17.comic.phone.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2
alipay_plugin_20120428msp.apk
.apk android

com.alipay.android.app

.Cashier

Activities

.Cashier

android.intent.action.MAIN

.Alerter

android.intent.action.MAIN

.Welcome

android.intent.action.MAIN

.Updater

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_COARSE_LOCATION
com.aliyun.xiaoyunmi.alipay

Receivers

.AlixReceiver

com.aliyun.xiaoyunmi.alipay_exit

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

Android Permissions

de13d5fb4b49ce20846af86411772df2_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_LOGS

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.SEND_SMS

android.permission.CHANGE_WIFI_STATE

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.u17.permission.ACCESS_DOWNLOAD_MANAGER

com.u17.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED

com.u17.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.GET_TASKS

android.permission.SET_DEBUG_APP

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

com.u17.comic.phone.localdata

Sharing

General

Malware Config

Signatures

Files

com.u17.comic.phone

com.u17.phone.ui.FirstActivity

Activities

com.u17.phone.ui.FirstActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.u17.phone.receiver.ConnectChangeReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

com.u17.phone.receiver.UninstalledApkReceiver

Services

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

com.alipay.android.app

.Cashier

Activities

.Cashier

.Alerter

.Welcome

.Updater

Permissions

Receivers

.AlixReceiver

Services

.AlixService

Android Permissions

de13d5fb4b49ce20846af86411772df2_JaffaCakes118