General

  • Target

    0a18775f1c5ffba040549fe5fc92ce44_JaffaCakes118

  • Size

    22.2MB

  • MD5

    0a18775f1c5ffba040549fe5fc92ce44

  • SHA1

    984ae99863b8ce64c4940e3773cbb6f154414d12

  • SHA256

    b2b3b7fcc49fef4ccad02053fcc4b475453ad6853461b1a3ac7c134a1948087d

  • SHA512

    ecb794df24686105bc9f85720c2d3724dccf45668d69f137f9bb3d758b88e5010d57c51b242c8554c7b16b52747caf0ea801ff7291a76866908d47ee14588e9d

  • SSDEEP

    393216:Y1/aIhHzbV1fgIuMuBEUXJ1+JaKZC625l/BlGQQipUaYDL1++ZQpL7ADuyh1+q2K:G35PIIuBZJgJZZCb/3qi4DL1+UQaDuy9

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 10 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Requests dangerous framework permissions 5 IoCs
  • UPX packed file 10 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 0a18775f1c5ffba040549fe5fc92ce44_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    io.rivermap.wemap

    io.rivermap.wemap.MainActivity


Android Permissions

0a18775f1c5ffba040549fe5fc92ce44_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE