f023e981f2ec4eed59ff5f689cc3df0c_JaffaCakes118

General

Target

f023e981f2ec4eed59ff5f689cc3df0c_JaffaCakes118
Size

2.8MB
MD5

f023e981f2ec4eed59ff5f689cc3df0c
SHA1

48c3694ea0bd90e5560f1e03f2fd5586156179e5
SHA256

23d126b589f972a6851eae050207e5a9b4c3e5f9c0fd39fd772ca83a1831e60c
SHA512

4f3019925908218b5afb5f0156b4fe4f823091dfd75090540bce19d87c068093456c69b0cb827d73e6ca99f2e587f2a78c8190e37f063671ee4af8f3c4b3d151
SSDEEP

49152:mVoiR/Gno5uII2PBaBd4Ch4caSupBf/ULqQopJWtzz5d1QiwG9Int01XvD1lk8:mxR/0bII25g1h4cakLqQopJORskInCZv

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS

Files

f023e981f2ec4eed59ff5f689cc3df0c_JaffaCakes118
.apk .ps1 android arch:arm arch:mips polyglot

com.geeksoft.wps

com.geeksoft.wps.MainActivity

Activities

com.geeksoft.wps.activity.RealMainActivity

android.intent.action.VIEW

com.geeksoft.wps.MainActivity

android.intent.action.MAIN

com.mob.tools.MobUIShell

android.intent.action.VIEW

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.USE_CREDENTIALS
android.permission.GET_ACCOUNTS
android.permission.FLASHLIGHT
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS

Receivers

com.geeksoft.wps.receiver.PackageActionReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.geeksoft.wps.receiver.ConnectivityReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.geeksoft.wps.receiver.UiRemindReceiver

remind_action_toast
remind_action_dialog

com.geeksoft.wps.receiver.MarketTracerReceiver

com.android.vending.INSTALL_REFERRER

com.geeksoft.wps.receiver.BootCompleteReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.geeksoft.wps.widget.WpsAppWidget

android.appwidget.action.APPWIDGET_UPDATE
android.net.conn.CONNECTIVITY_CHANGE
com.geeksoft.wps.widget.click.event
com.geeksoft.wps.widget.server.started
com.geeksoft.wps.widget.server.stoped
com.geeksoft.wps.widget.server.clipboard

com.geeksoft.wps.baidupush.BaiduPushReceive

com.baidu.android.pushservice.action.MESSAGE
com.baidu.android.pushservice.action.RECEIVE
com.baidu.android.pushservice.action.notification.CLICK

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK
android.intent.action.MEDIA_MOUNTED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.geeksoft.wps.baidupush.PushClickCountReceiver

push_click_count_receiver

Services

com.baidu.android.pushservice.PushService

com.baidu.android.pushservice.action.PUSH_SERVICE

Android Permissions

f023e981f2ec4eed59ff5f689cc3df0c_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.USE_CREDENTIALS

android.permission.GET_ACCOUNTS

android.permission.FLASHLIGHT

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

Sharing

General

Malware Config

Signatures

Files

com.geeksoft.wps

com.geeksoft.wps.MainActivity

Activities

com.geeksoft.wps.activity.RealMainActivity

com.geeksoft.wps.MainActivity

com.mob.tools.MobUIShell

Permissions

Receivers

com.geeksoft.wps.receiver.PackageActionReceiver

com.geeksoft.wps.receiver.ConnectivityReceiver

com.geeksoft.wps.receiver.UiRemindReceiver

com.geeksoft.wps.receiver.MarketTracerReceiver

com.geeksoft.wps.receiver.BootCompleteReceiver

com.geeksoft.wps.widget.WpsAppWidget

com.geeksoft.wps.baidupush.BaiduPushReceive

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.geeksoft.wps.baidupush.PushClickCountReceiver

Services

com.baidu.android.pushservice.PushService

Android Permissions

f023e981f2ec4eed59ff5f689cc3df0c_JaffaCakes118