2fe4b82390ae7590f4d286602d06ebd5_JaffaCakes118

General

Target

2fe4b82390ae7590f4d286602d06ebd5_JaffaCakes118
Size

6.7MB
MD5

2fe4b82390ae7590f4d286602d06ebd5
SHA1

2c66efb29a8ca6815d32c530138d29e11bdaebb7
SHA256

dacca1095b4568a84cb836c64721399bc423d827a3bff0c6b9cfc7a6c0b7962c
SHA512

770aad16e55758a4314691410989249182c92c9a5339077ba9d18042b18a7ed644f35c63ac4ef7136ee02fd508ee51c5a274e9130c624c95568b2c4d2fbb36b4
SSDEEP

196608:ypovGAzQqHOCJOCedcHntKwo5EJMwFgWHiH2mYj:sovGsZedcHe2xvj

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

2fe4b82390ae7590f4d286602d06ebd5_JaffaCakes118
.apk android

com.android.gifsepfgh

com.android.gifsep.SplashActivity

Activities

com.android.gifsep.SplashActivity

android.intent.action.MAIN

cn.qtt.SMSEditorActivity

android.intent.action.VIEW
android.intent.action.DIAL

Permissions

android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.WRITE_APN_SETTINGS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CALL_PHONE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_MMS
android.permission.SEND_SMS
android.permission.VIBRATE
android.permission.INTERNET
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INSTALL_DRM
android.permission.READ_SMS
android.permission.RESTART_PACKAGES
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_WIFI_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.GET_TASKS
android.permission.ACCESS_CACHE_FILESYSTEM
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_WIFI_STATE

Receivers

cn.qtt.transaction.send2.PrivilegedSmsReceiver

android.provider.Telephony.SMS_RECEIVED
android.intent.action.DATA_SMS_RECEIVED

cn.qtt.transaction.send2.SmsReceiver

android.intent.action.BOOT_COMPLETED
cn.qtt.mms.transaction.MESSAGE_SENT
cn.qtt.mms.transaction.SEND_MESSAGE

cn.qtt.transaction.send2.PushReceiver

android.provider.Telephony.WAP_PUSH_RECEIVED

cn.qtt.transaction.send2.TransactionResultReceiver

cn.qtt.intent.action.TRANSACTION_FINISH_ACTION

cn.qtt.login.SelfReplyNotLoginReceiver

cn.qtt.login.auto.nophoneandpass

cn.qtt.download.DownloadReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.google.tool.JR

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.google.net.MainReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

Services
lingxi_v1.0.1189_16018002_lite.apk
.apk android arch:arm

com.iflytek.cmcc

com.iflytek.viafly.Home

Activities

com.iflytek.viafly.Home

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CALL_PHONE
android.permission.INTERNET
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECORD_AUDIO
android.permission.RESTART_PACKAGES
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.WAKE_LOCK
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.GET_TASKS
android.permission.READ_OWNER_DATA
android.permission.WRITE_OWNER_DATA
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.DISABLE_KEYGUARD
android.permission.CHANGE_CONFIGURATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW

Services

com.iflytek.viafly.speech.SpeechService

com.iflytek.component.speechrecognizer
com.iflytek.component.speechsynthesizer
com.iflytek.component.speechunderstander
com.iflytek.component.textunderstander
com.iflytek.cmcc.SpeechService

com.iflytek.viafly.download.DownloadHandlerService

com.iflytek.cmcc.download.handler_service

Android Permissions

2fe4b82390ae7590f4d286602d06ebd5_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.WRITE_APN_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INSTALL_DRM

android.permission.READ_SMS

android.permission.RESTART_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

android.permission.ACCESS_CACHE_FILESYSTEM

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

Sharing

General

Malware Config

Signatures

Files

com.android.gifsepfgh

com.android.gifsep.SplashActivity

Activities

com.android.gifsep.SplashActivity

cn.qtt.SMSEditorActivity

Permissions

Receivers

cn.qtt.transaction.send2.PrivilegedSmsReceiver

cn.qtt.transaction.send2.SmsReceiver

cn.qtt.transaction.send2.PushReceiver

cn.qtt.transaction.send2.TransactionResultReceiver

cn.qtt.login.SelfReplyNotLoginReceiver

cn.qtt.download.DownloadReceiver

com.google.tool.JR

com.google.net.MainReceiver

Services

com.iflytek.cmcc

com.iflytek.viafly.Home

Activities

com.iflytek.viafly.Home

Permissions

Services

com.iflytek.viafly.speech.SpeechService

com.iflytek.viafly.download.DownloadHandlerService

Android Permissions

2fe4b82390ae7590f4d286602d06ebd5_JaffaCakes118