com.mob.tools.MobUIShell
android.intent.action.VIEW
com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY
android.intent.action.VIEW
com.loror.mychater.activity.SplashActivity
android.intent.action.MAIN
com.stub.stub01.Stub01
android.intent.action.MAIN
General
-
Target
f68a11187f78936c0e455cf7b75e18b3_JaffaCakes118
-
Size
13.8MB
-
MD5
f68a11187f78936c0e455cf7b75e18b3
-
SHA1
65bb29b193211add579ffbd2f6c64b19796c2d46
-
SHA256
eb17e4b7722742be35c17cfa27b0d2d2032cb0e897ebde63341c5d9b93a1b965
-
SHA512
b154f6cdf432de8577ec515651f70eb1adf2da7200dd53902dac09f885dcb6fcd2b93d98896b639f735b962470afa73386be0b160b7603bef14c28b89e67205f
-
SSDEEP
196608:hA9OB9pPiAhdfAKE37eIqZp9Lyf++gSbvY67Q1vzrZp0p+Hj+uT+NXy8O0+nMG2h:h5BDJj03QG2+DaZrHXauSpGB2oO
Score
8/10
Malware Config
Signatures
-
Patched UPX-packed file 20 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
-
Requests dangerous framework permissions 7 IoCs
-
UPX packed file 20 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Files
-
f68a11187f78936c0e455cf7b75e18b3_JaffaCakes118
com.loror.mychater
com.stub.stub01.Stub01
Android Permissions
f68a11187f78936c0e455cf7b75e18b3_JaffaCakes118
Permissions
com.loror.messagecenter
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.INTERNET
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.FLASHLIGHT
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECORD_AUDIO
android.permission.GET_TASKS
android.permission.FLASHLIGHT
android.permission.CAMERA