fd90bcd09a5fa30650de99fd330748e6_JaffaCakes118

General

Target

fd90bcd09a5fa30650de99fd330748e6_JaffaCakes118
Size

12.5MB
MD5

fd90bcd09a5fa30650de99fd330748e6
SHA1

d0259bda0cf5129f169482c5160d4d2db8ec09b4
SHA256

46e405fa62e2bfd13e6362cffff846860440d67311070b34469f7e0ac397b58c
SHA512

8c5ce1389c19dde29aba4b33c9968a6929f8ba366759dadd9985ad795b9bd6e9b4b6cd3e6759ba8a0467e322afc21561c299cb9439344ca9912060dafede6dcd
SSDEEP

393216:QG4vYC71WzN49ARcGFzDRuXWKbjmo/JyJ:QG+pbsNlumKl/Jy

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

fd90bcd09a5fa30650de99fd330748e6_JaffaCakes118
.apk android arch:arm

com.css.mobile

org.zywx.wbpalmstar.engine.LoadingActivity

Activities

org.zywx.wbpalmstar.engine.EBrowserActivity

android.intent.action.VIEW

org.zywx.wbpalmstar.engine.LoadingActivity

android.intent.action.MAIN

org.zywx.wbpalmstar.plugin.uexcamera.CustomCamera

android.intent.action.CAMERA_PLUGIN

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PushActivity

org.zywx.wbpalmstar.plugin.uextent.Auth1WeiboActivity

android.intent.action.MAIN

org.zywx.wbpalmstar.plugin.uextent.Auth2WeiboActivity

android.intent.action.MAIN

org.zywx.wbpalmstar.plugin.uextent.MainPageActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.VIBRATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.ACCESS_MOCK_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.GET_TASKS
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_CONFIGURATION
com.css.mobile.permission.JPUSH_MESSAGE
android.permission.RECEIVE_USER_PRESENT
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_APN_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

org.zywx.wbpalmstar.platform.push.PushRecieveMsgReceiver

org.zywx.push.receive

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

org.zywx.wbpalmstar.widgetone.uexJPush.MyReceiver

cn.jpush.android.intent.REGISTRATION
cn.jpush.android.intent.MESSAGE_RECEIVED
cn.jpush.android.intent.NOTIFICATION_RECEIVED
cn.jpush.android.intent.NOTIFICATION_OPENED

Services

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER
cn.jpush.android.intent.REPORT
cn.jpush.android.intent.PushService
cn.jpush.android.intent.PUSH_TIME

Android Permissions

fd90bcd09a5fa30650de99fd330748e6_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_CONFIGURATION

com.css.mobile.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

Sharing

General

Malware Config

Signatures

Files

com.css.mobile

org.zywx.wbpalmstar.engine.LoadingActivity

Activities

org.zywx.wbpalmstar.engine.EBrowserActivity

org.zywx.wbpalmstar.engine.LoadingActivity

org.zywx.wbpalmstar.plugin.uexcamera.CustomCamera

cn.jpush.android.ui.PushActivity

org.zywx.wbpalmstar.plugin.uextent.Auth1WeiboActivity

org.zywx.wbpalmstar.plugin.uextent.Auth2WeiboActivity

org.zywx.wbpalmstar.plugin.uextent.MainPageActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

org.zywx.wbpalmstar.platform.push.PushRecieveMsgReceiver

cn.jpush.android.service.PushReceiver

org.zywx.wbpalmstar.widgetone.uexJPush.MyReceiver

Services

cn.jpush.android.service.PushService

Android Permissions

fd90bcd09a5fa30650de99fd330748e6_JaffaCakes118