2f40ddeccc1c35418376d0ef06de5f47_JaffaCakes118

Sharing

Copy URL Twitter E-mail

Reason

error processing APK: could not decode AXML: unexpected chunk type

General

Target

2f40ddeccc1c35418376d0ef06de5f47_JaffaCakes118
Size

36.0MB
MD5

2f40ddeccc1c35418376d0ef06de5f47
SHA1

a3931d5ab2bef2f239e32a547af7a0b5834c201d
SHA256

a246a5f2169543da3bcb009f9f42272dc7b9f31161eb90ba5cbf2b34563cdaf6
SHA512

23c6a3f82bc437e6d12c00d93a537eb78d8da3446d7edd45654cf4b1c02e33de22e20a5a0e44f8d33c5a49438a0f35af31cfb22bb1a9e1d515b0cb5e3ee9c149
SSDEEP

786432:mv06Bl9SqiVy+9egJ4QSq/15G1XHweRhAg5J0PTcMqE:mv39SqiVt4QBwHJug5J0PTcMN

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS

Files

2f40ddeccc1c35418376d0ef06de5f47_JaffaCakes118
.apk android arch:arm arch:mips arch:x86

com.baidu.tieba

com.baidu.tieba.LogoActivity

Activities

com.baidu.tieba.tblauncher.MainTabActivity

android.intent.action.VIEW

com.baidu.tieba.LogoActivity

android.intent.action.MAIN

com.baidu.cloudsdk.social.share.handler.QQFriendShareReceiverActivity

android.intent.action.VIEW

com.baidu.sumeru.lightapp.activity.LightAppPlayerActivity

com.baidu.lightapp.runtime.start

com.quvideo.xiaoying.XiaoYingActivity

com.baidu.tieba.android.media.action.VIDEO_CAPTURE
com.baidu.tieba.android.intent.action.EDIT
com.baidu.tieba.android.intent.action.EDIT
com.baidu.tieba.android.intent.action.SEND
com.baidu.tieba.android.intent.action.SEND_MULTIPLE

com.quvideo.xiaoying.camera.framework.CameraActivity

com.quvideo.xiaoying.intent.action.CAMERA

com.quvideo.xiaoying.videoeditor.simpleedit.SimpleVideoEditorV4

com.quvideo.xiaoying.intent.action.EDIT

com.quvideo.xiaoying.videoeditor.simpleedit.VideoTrimActivity

com.quvideo.xiaoying.intent.action.FILEPICKER
com.quvideo.xiaoying.intent.action.EDITORFILEPICKER

com.baidu.tieba.togetherhi.TogetherhiH5ProxyActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.baidu.tieba.light.share.LightappGameShare

com.baidu.tieba.PERSONGROUP

com.baidu.tieba.game.mygame.MyGameActivity

com.baidu.tieba.game.mygame.MY_GAME_ACTIVITY

com.baidu.tieba.write.shareSDK.WriteShareActivity

com.baidu.tieba.shareSDK.SHARETOTB

com.baidu.tieba.write.video.WriteVideoActivity

com.baidu.tieba.write.video.WriteVideoActivity

com.baidu.tieba.photolive.photolive.PhotoLiveActivity

android.intent.action.VIEW

com.unionpay.uppay.PayActivity

android.intent.action.Run

com.baidu.wallet.scheme.WalletSchemeActivity

android.intent.action.VIEW

com.baidu.tieba.payment.PaymentConfirmActivity

com.baidu.tieba.payment.pay

com.baidu.tieba.pb.pb.main.PbActivity

android.intent.action.VIEW

com.baidu.tieba.frs.FrsActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.baidu.appsearchlib.NASLib

android.intent.action.VIEW

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.BROADCAST_STICKY
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.AUTHENTICATE_ACCOUNTS
com.android.launcher.permission.READ_SETTINGS
android.permission.WRITE_SETTINGS
android.permission.ACCESS_MOCK_LOCATION
android.permission.ACCESS_LOCATION_COMMANDS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.PROCESS_OUTGOING_CALLS
android.permission.WAKE_LOCK
android.permission.DEVICE_POWER
android.permission.CALL_PHONE
android.permission.FLASHLIGHT
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.RESTART_PACKAGES
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_USER_DICTIONARY
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.hardware.sensor.accelerometer
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.CHANGE_NETWORK_STATE
android.permission.REORDER_TASKS
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.baidu.permission.SHARE
android.permission.BLUETOOTH
com.baidu.tieba.permission.DATACENTER
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_SMS
android.hardware.camera
org.fidoalliance.uaf.permissions.FIDO_CLIENT
android.permission.USE_FINGERPRINT
com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER
com.sec.feature.fingerprint_manager_service

Receivers

com.baidu.sapi2.share.ShareReceiver

baidu.intent.action.SHARE
baidu.intent.action.NEWSHARE
baidu.intent.action.SHARE_V6

com.baidu.tieba.tblauncher.alarmRemind.AlarmReceiver

com.baidu.tieba.tblauncher.alarmRemind.AlarmReceiver

com.baidu.tieba.homepage.fragment.controller.HomePageAlarmReceiver

com.baidu.tieba.homepage.fragment.controller.HomePageAlarmReceiver

com.baidu.tieba.service.ChangeSkinReceiver

com.baidu.tieba.broadcast.changeskin

com.baidu.tbadk.TiebaSocketReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PHONE_STATE
com.baidu.android.pushservice.action.BIND_SYNC

com.baidu.tbadk.commonReceiver.PackageChangedReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.baidu.tieba.service.TiebaReceiver

com.baidu.tieba.broadcast.service
com.baidu.tieba.broadcast.sync

com.baidu.tieba.service.SignAlertReceiver

com.baidu.tieba.broadcast.signalert

Services

com.baidu.sapi2.share.ShareService

baidu.intent.action.account.SHARE_SERVICE

com.baidu.sumeru.lightapp.service.PluginServiceProxy

com.baidu.sumeru.lightapp.plugin.service

com.baidu.tbadk.plugins.xiaoying.XiaoyingSocialService

socialservice.action.USER
socialservice.action.VIDEO
socialservice.action.MISC
socialservice.action.CONTENTS
socialservice.action.INTERACTION

com.baidu.tbadk.plugins.xiaoying.XiaoyingDownloadService

socialservice.action.DOWNLOAD

com.baidu.tbadk.plugins.xiaoying.XiaoyingTaskService

socialservice.action.TASK

com.baidu.tbadk.plugins.xiaoying.XiaoyingShareService

socialservice.action.SHARE

com.baidu.tbadk.plugins.bcsdk.BcSdkDownloadService

com.baidu.bcsdk.action.download

com.baidu.tieba.service.HandleSSOService

com.baidu.tieba.sso.HandleSSOService
com.baidu.tieba.pluginAdvertSDK.apk
.apk android

com.baidu.tieba.pluginAdvertSDK
com.baidu.tieba.pluginCard.apk
.apk android

com.baidu.tieba.pluginCard
com.baidu.tieba.pluginDnsproxy.apk
.apk android

com.baidu.tieba.pluginDnsproxy
com.baidu.tieba.pluginGraffiti.apk
.apk android

com.baidu.tieba.pluginGraffiti
com.baidu.tieba.pluginInjectAll.apk
.apk android arch:x86 arch:arm

com.baidu.tieba.pluginInjectAll
com.baidu.tieba.pluginInjectCore.apk
.apk android

com.baidu.tieba.pluginInjectCore
com.baidu.tieba.pluginMemberCenter.apk
.apk android

com.baidu.tieba.pluginMemberCenter
com.baidu.tieba.pluginMotu.apk
.apk android arch:mips arch:x86 arch:arm

com.baidu.tieba.pluginMotu
com.baidu.tieba.pluginPhotoLive.apk
.apk android

com.baidu.tieba.pluginPhotoLive
com.baidu.tieba.pluginUserConsume.apk
.apk android

com.baidu.tieba.pluginUserConsume
com.baidu.tieba.pluginWalletsdk.apk
.apk android arch:x86 arch:arm

com.baidu.tieba.pluginWalletsdk
com.baidu.tieba.pluginall.apk
.apk android

com.baidu.tieba.pluginall

Android Permissions

2f40ddeccc1c35418376d0ef06de5f47_JaffaCakes118

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.BROADCAST_STICKY

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.AUTHENTICATE_ACCOUNTS

com.android.launcher.permission.READ_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_LOCATION_COMMANDS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.PROCESS_OUTGOING_CALLS

android.permission.WAKE_LOCK

android.permission.DEVICE_POWER

android.permission.CALL_PHONE

android.permission.FLASHLIGHT

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.RESTART_PACKAGES

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_USER_DICTIONARY

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.hardware.sensor.accelerometer

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.CHANGE_NETWORK_STATE

android.permission.REORDER_TASKS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.baidu.permission.SHARE

Sharing

Errors

General

Malware Config

Signatures

Files

com.baidu.tieba

com.baidu.tieba.LogoActivity

Activities

com.baidu.tieba.tblauncher.MainTabActivity

com.baidu.tieba.LogoActivity

com.baidu.cloudsdk.social.share.handler.QQFriendShareReceiverActivity

com.baidu.sumeru.lightapp.activity.LightAppPlayerActivity

com.quvideo.xiaoying.XiaoYingActivity

com.quvideo.xiaoying.camera.framework.CameraActivity

com.quvideo.xiaoying.videoeditor.simpleedit.SimpleVideoEditorV4

com.quvideo.xiaoying.videoeditor.simpleedit.VideoTrimActivity

com.baidu.tieba.togetherhi.TogetherhiH5ProxyActivity

com.baidu.tieba.light.share.LightappGameShare

com.baidu.tieba.game.mygame.MyGameActivity

com.baidu.tieba.write.shareSDK.WriteShareActivity

com.baidu.tieba.write.video.WriteVideoActivity

com.baidu.tieba.photolive.photolive.PhotoLiveActivity

com.unionpay.uppay.PayActivity

com.baidu.wallet.scheme.WalletSchemeActivity

com.baidu.tieba.payment.PaymentConfirmActivity

com.baidu.tieba.pb.pb.main.PbActivity

com.baidu.tieba.frs.FrsActivity

com.baidu.appsearchlib.NASLib

Permissions

Receivers

com.baidu.sapi2.share.ShareReceiver

com.baidu.tieba.tblauncher.alarmRemind.AlarmReceiver

com.baidu.tieba.homepage.fragment.controller.HomePageAlarmReceiver

com.baidu.tieba.service.ChangeSkinReceiver

com.baidu.tbadk.TiebaSocketReceiver

com.baidu.tbadk.commonReceiver.PackageChangedReceiver

com.baidu.tieba.service.TiebaReceiver

com.baidu.tieba.service.SignAlertReceiver

Services

com.baidu.sapi2.share.ShareService

com.baidu.sumeru.lightapp.service.PluginServiceProxy

com.baidu.tbadk.plugins.xiaoying.XiaoyingSocialService

com.baidu.tbadk.plugins.xiaoying.XiaoyingDownloadService

com.baidu.tbadk.plugins.xiaoying.XiaoyingTaskService

com.baidu.tbadk.plugins.xiaoying.XiaoyingShareService

com.baidu.tbadk.plugins.bcsdk.BcSdkDownloadService

com.baidu.tieba.service.HandleSSOService

com.baidu.tieba.pluginAdvertSDK

com.baidu.tieba.pluginCard

com.baidu.tieba.pluginDnsproxy

com.baidu.tieba.pluginGraffiti

com.baidu.tieba.pluginInjectAll

com.baidu.tieba.pluginInjectCore

com.baidu.tieba.pluginMemberCenter

com.baidu.tieba.pluginMotu

com.baidu.tieba.pluginPhotoLive

com.baidu.tieba.pluginUserConsume

com.baidu.tieba.pluginWalletsdk

com.baidu.tieba.pluginall

Android Permissions

2f40ddeccc1c35418376d0ef06de5f47_JaffaCakes118