facd8e4ec2d23ad4ab86d46661bf291f_JaffaCakes118

General

Target

facd8e4ec2d23ad4ab86d46661bf291f_JaffaCakes118
Size

24.2MB
MD5

facd8e4ec2d23ad4ab86d46661bf291f
SHA1

b6a36dc7514464aff1941f6475da7c1fc6851adc
SHA256

cc87a14b755fec6e11c0a861efafaffa684a1ac134140db8b439f692725193e9
SHA512

63a998df90fc6a01d7a9c0a1c37ef433e15afad8a78d1fb327f3ad593a2a55bc99e1c7e0d38483a4bd2423cf68b18da905cf9ad31c4100ff0c999393115be817
SSDEEP

786432:Uc8QnfL1PhvxLx2jYKKcwIUcw/AEtrUtEBC10pAt:xvDjqj/KcJUcwlotESt

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Required to be able to access the camera device.	android.permission.CAMERA

Files

facd8e4ec2d23ad4ab86d46661bf291f_JaffaCakes118
.apk android arch:arm arch:x86

com.docin.zlibrary.ui.android

com.docin.shelf.DocinOpenInActivity

Activities

com.baidu.appsearchlib.NASLib

android.intent.action.VIEW

com.docin.shelf.DocinOpenInActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.docin.oauth.activity.SinaWebViewActivity

android.intent.action.VIEW

com.tencent.tauth.TAuthView

android.intent.action.VIEW

com.docin.asus.AsusToDocinActivity

android.intent.action.VIEW

com.docin.bookshop.charge.ui.RechargeModeActivity

android.intent.action.VIEW

com.baidu.wallet.scheme.WalletSchemeActivity

android.intent.action.VIEW

com.ryg.dynamicload.DLProxyActivity

com.ryg.dynamicload.proxy.activity.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.jdpaysdk.author.AuthorActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.sina.weibo.sdk.share.WbShareToStoryActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

Permissions

android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_LOGS
android.permission.VIBRATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WAKE_LOCK
android.permission.DISABLE_KEYGUARD
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.WRITE_SETTINGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.SET_DEBUG_APP
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.CAMERA
android.permission.FLASHLIGHT
org.fidoalliance.uaf.permissions.FIDO_CLIENT
android.permission.USE_FINGERPRINT
com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER
com.sec.feature.fingerprint_manager_service
android.permission.INTERNET
android.permission.BLUETOOTH
android.permission.READ_SETTINGS

Receivers

com.docin.xmly.receiver.PlayerControlReceiver

com.ximalaya.ting.android.opensdk.test.constants.ACTION_CONTROL_PLAY_PAUSE
com.ximalaya.ting.android.opensdk.test.constants.ACTION_CONTROL_PLAY_NEXT
com.ximalaya.ting.android.opensdk.test.constants.ACTION_CONTROL_OPEN

com.docin.tts.PhoneReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.docin.zlibrary.ui.android.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

com.docin.newshelf.plugin.PdfPluginReceiver

PDFPLUGIN_DOWNLOADCOMPLETE_ACTION

com.docin.network.NetBroadcastReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.docin.broadcast.PopLoginDialogReceiver

com.docin.login.dialog

com.docin.xmly.receiver.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.alibaba.sdk.android.feedback.impl.NetworkChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

com.umeng.message.UmengService

com.docin.zlibrary.ui.android.intent.action.START
com.docin.zlibrary.ui.android.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2

com.docin.tts.TTSService

com.docin.tts.SERVICE_DEMO

com.docin.comtools.OpenUDID_service

com.docin.comtools.openudid.GETUDID

com.docin.statistics.BackStatisticsService

com.docin.statistics
wifiupload-plugin.apk
.apk android

com.docin.wifi.upload

.WiFiUploadActivity

Activities

.WiFiUploadActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK

Services

Android Permissions

facd8e4ec2d23ad4ab86d46661bf291f_JaffaCakes118

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.SET_DEBUG_APP

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.CAMERA

android.permission.FLASHLIGHT

org.fidoalliance.uaf.permissions.FIDO_CLIENT

android.permission.USE_FINGERPRINT

com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER

com.sec.feature.fingerprint_manager_service

android.permission.INTERNET

android.permission.BLUETOOTH

android.permission.READ_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.docin.zlibrary.ui.android

com.docin.shelf.DocinOpenInActivity

Activities

com.baidu.appsearchlib.NASLib

com.docin.shelf.DocinOpenInActivity

com.docin.oauth.activity.SinaWebViewActivity

com.tencent.tauth.TAuthView

com.docin.asus.AsusToDocinActivity

com.docin.bookshop.charge.ui.RechargeModeActivity

com.baidu.wallet.scheme.WalletSchemeActivity

com.ryg.dynamicload.DLProxyActivity

com.tencent.tauth.AuthActivity

com.jdpaysdk.author.AuthorActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.share.WbShareToStoryActivity

Permissions

Receivers

com.docin.xmly.receiver.PlayerControlReceiver

com.docin.tts.PhoneReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

com.docin.newshelf.plugin.PdfPluginReceiver

com.docin.network.NetBroadcastReceiver

com.docin.broadcast.PopLoginDialogReceiver

com.docin.xmly.receiver.MediaButtonReceiver

com.alibaba.sdk.android.feedback.impl.NetworkChangeReceiver

Services

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

com.docin.tts.TTSService

com.docin.comtools.OpenUDID_service

com.docin.statistics.BackStatisticsService

com.docin.wifi.upload

.WiFiUploadActivity

Activities

.WiFiUploadActivity

Permissions

Services

Android Permissions

facd8e4ec2d23ad4ab86d46661bf291f_JaffaCakes118