2f33d2e11ef480c3adcffe7aa8adacec_JaffaCakes118

General

Target

2f33d2e11ef480c3adcffe7aa8adacec_JaffaCakes118
Size

7.1MB
MD5

2f33d2e11ef480c3adcffe7aa8adacec
SHA1

d9bf185814f5802fc73bbe938ac81c8e22200165
SHA256

45a5ba56a8f490689cd042f8f44b5b41d9079ea0797b08bd2a1727e94388c518
SHA512

0762b93bd1a755368774044e21c89f52644faa55e7cd72adb69da38ad87260be0da08545b3a44262ea1511c69d92f6da7218b6a7b45d6bb1d2173c441c6d6662
SSDEEP

196608:U6qH1w/H8BKaAuJYMm4ibFNBTDUz8HAz4GaW:tDaAuJYMhibVTDUz8gz5n

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

2f33d2e11ef480c3adcffe7aa8adacec_JaffaCakes118
.apk android arch:arm

com.android.youzhuan

.activity.LoadingActivity

Activities

.activity.LoadingActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.WRITE_SETTINGS
android.permission.CAMERA
android.permission.CHANGE_WIFI_STATE
android.permission.RECORD_AUDIO
android.permission.VIBRATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_CONFIGURATION
android.permission.BROADCAST_STICKY
android.permission.SYSTEM_ALERT_WINDOW
android.permission.DISABLE_KEYGUARD
android.permission.GET_TASKS
android.permission.RESTART_PACKAGES
android.permission.ACCESS_COARSE_LOCATION
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

Receivers

.common.BootReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

a.b.c.AdReceiver

android.intent.action.PACKAGE_ADDED

cn.immob.sdk.brocastreceiver.AppChangeBrocastreceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.PACKAGE_ADDED

com.zkmm.appoffer.ZkmmBroadcastReceiver

android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_ADDED

com.rtbwall.wall.receiver.AdWallReceiver

android.intent.action.PACKAGE_ADDED

com.datouniao.AdPublisher.service.AppReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.datouniao.AdPublisher.service.check

com.ads8.AdReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_ADDED

com.ads8.AppMonitorReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.SCREEN_OFF

com.zy.phone.service.BootReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

Services

net.xiaoniu.ads.AdsService

net.xiaoniu.ads.AdsService

cn.guomob.android.intwal.Service01

com.exe.server01

cn.guomob.android.intwal.Service02

com.exe.service02

com.qidian.intwal.Service01

com.exe.server01

com.qidian.intwal.Service02

com.exe.server02

com.yql.dr.sdk.ProcessService

com.android.youzhuan.ProcessService

Android Permissions

2f33d2e11ef480c3adcffe7aa8adacec_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_CONFIGURATION

android.permission.BROADCAST_STICKY

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.ACCESS_COARSE_LOCATION

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

Sharing

General

Malware Config

Signatures

Files

com.android.youzhuan

.activity.LoadingActivity

Activities

.activity.LoadingActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

.common.BootReceiver

a.b.c.AdReceiver

cn.immob.sdk.brocastreceiver.AppChangeBrocastreceiver

com.zkmm.appoffer.ZkmmBroadcastReceiver

com.rtbwall.wall.receiver.AdWallReceiver

com.datouniao.AdPublisher.service.AppReceiver

com.ads8.AdReceiver

com.ads8.AppMonitorReceiver

com.zy.phone.service.BootReceiver

Services

net.xiaoniu.ads.AdsService

cn.guomob.android.intwal.Service01

cn.guomob.android.intwal.Service02

com.qidian.intwal.Service01

com.qidian.intwal.Service02

com.yql.dr.sdk.ProcessService

Android Permissions

2f33d2e11ef480c3adcffe7aa8adacec_JaffaCakes118