ff162347a7a9d26dca748710be86bd36_JaffaCakes118

General

Target

ff162347a7a9d26dca748710be86bd36_JaffaCakes118
Size

14.2MB
MD5

ff162347a7a9d26dca748710be86bd36
SHA1

469c5eaef29eab70c830d83f7159f0b75fac2dbf
SHA256

1a402b8bb73621b2c5d54df312899bc6b8354cbb4b3720587bf748e9ad59aa29
SHA512

8af771e629e7ff0bf7625ccace87346e042fa5d0f319eb00e3a1cae884bbe46871b2325a3f5c3c0e42ff9e17a7ce672937fc58366f8c4f51e267355d1ed3a6eb
SSDEEP

196608:54G9fAG4C5tcUrm23ks3ghj2kb9UJtGlRcXIhRISfn84PyYM2+E/ncXy1:5nAFC3ck39wphb9mGlmaI+nPPIbmR

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

ff162347a7a9d26dca748710be86bd36_JaffaCakes118
.apk android arch:arm

com.babytree.apps.pregnancy

com.babytree.apps.pregnancy.MainActivity

Activities

com.babytree.apps.pregnancy.MainActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.babytree.apps.pregnancy.activity.ChooseSkinActivity

com.babytree.apps.pregnancy.action.WIDGET

com.babytree.apps.pregnancy.activity.WebviewActivity

com.babytree.apps.pregnancy.action.WEB

com.babytree.apps.pregnancy.activity.music.activity.PregnancyAlbumActivity

com.babytree.apps.pregnancy.action.MIKAMUISC

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.babytree.apps.pregnancy.activity.topicdetail.TopicDetailActivity

com.babytree.apps.pregnancy.action.TOPIC
android.intent.action.VIEW

com.babytree.apps.pregnancy.activity.KnowledgeDailyActivity

com.babytree.apps.pregnancy.action.KNOWLEDGE

com.babytree.apps.pregnancy.activity.ExceptionAlertActivity

com.babytree.apps.pregnancy.EXCEPTION

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.CALL_PHONE
android.permission.CHANGE_NETWORK_SATET
getui.permission.GetuiService
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SETTINGS
android.permission.RECORD_AUDIO
android.permission.CHANGE_NETWORK_STATE
android.permission.CAMERA
android.permission.GET_TASKS
android.permission.RESTART_PACKAGES
android.permission.READ_EXTERNAL_STORAGE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW

Receivers

com.babytree.apps.pregnancy.activity.music.activity.StopMusicReceiver

com.babytree.apps.pregnancy.logout

com.babytree.apps.pregnancy.widget.WidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.intent.action.TIME_SET
android.intent.action.USER_PRESENT
com.babytree.apps.pregnancy.action.UPDATE_COUNTDOWN
com.babytree.apps.pregnancy.action.UPDATE_PICTURE
com.babytree.apps.pregnancy.action.UPDATE_PREG
com.babytree.apps.pregnancy.action.CLEAR_MESSAGE
com.babytree.apps.pregnancy.logout
com.babytree.apps.pregnancy.login
com.babytree.apps.pregnancy.type.changed

com.babytree.apps.pregnancy.service.PushService

com.igexin.sdk.action.5fRgXnE6pR7T08br1enXz

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls

com.igexin.sdk.PushManagerReceiver

com.igexin.sdk.action.pushmanager

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.5fRgXnE6pR7T08br1enXz

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.babytree.apps.biz.push.BootReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED

Services

com.babytree.apps.pregnancy.widget.WidgetService

android.appwidget.action.WIDGET_SERVICE

com.baidu.location.f

com.baidu.location.service_v2.2

Android Permissions

ff162347a7a9d26dca748710be86bd36_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CALL_PHONE

android.permission.CHANGE_NETWORK_SATET

getui.permission.GetuiService

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WRITE_SETTINGS

android.permission.RECORD_AUDIO

android.permission.CHANGE_NETWORK_STATE

android.permission.CAMERA

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

com.babytree.apps.pregnancy

com.babytree.apps.pregnancy.MainActivity

Activities

com.babytree.apps.pregnancy.MainActivity

com.babytree.apps.pregnancy.activity.ChooseSkinActivity

com.babytree.apps.pregnancy.activity.WebviewActivity

com.babytree.apps.pregnancy.activity.music.activity.PregnancyAlbumActivity

com.tencent.tauth.AuthActivity

com.babytree.apps.pregnancy.activity.topicdetail.TopicDetailActivity

com.babytree.apps.pregnancy.activity.KnowledgeDailyActivity

com.babytree.apps.pregnancy.activity.ExceptionAlertActivity

Permissions

Receivers

com.babytree.apps.pregnancy.activity.music.activity.StopMusicReceiver

com.babytree.apps.pregnancy.widget.WidgetProvider

com.babytree.apps.pregnancy.service.PushService

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.getuiext.service.PayloadReceiver

com.igexin.download.DownloadReceiver

com.babytree.apps.biz.push.BootReceiver

Services

com.babytree.apps.pregnancy.widget.WidgetService

com.baidu.location.f

Android Permissions

ff162347a7a9d26dca748710be86bd36_JaffaCakes118