371581702729313f8c3d11f023e76905_JaffaCakes118

General

Target

371581702729313f8c3d11f023e76905_JaffaCakes118
Size

13.1MB
MD5

371581702729313f8c3d11f023e76905
SHA1

7f0ea64b85b48b78269fa8420dd3de3faf1266e8
SHA256

4f0d67d4775cb518be89b133afad05933c14f5fed26e24dd52fe9e96fe163874
SHA512

fdbc7d274579203a7f1710467b2655a402ba1211bb89aee6b57a71da76c081dde35f3150fb288e1776642399394c2aa7179e6cbf5601db09b9def67a4581c0e1
SSDEEP

393216:VB8YqBV+Kf6tf32tSJEdu/qaFnFeL2szz:ryVDf653WUFUz

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

371581702729313f8c3d11f023e76905_JaffaCakes118
.apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

cn.mama.activity

cn.mama.activity.Launch_

Activities

cn.mama.activity.Launch_

android.intent.action.MAIN

cn.mama.activity.MMHomeActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.baidu.appsearchlib.NASLib

android.intent.action.VIEW

cn.mama.framework.activity.FileBrowserActivity

cn.mama.framework.intent.action_file_browser

Permissions

android.permission.DISABLE_KEYGUARD
android.permission.INTERNET
android.permission.GET_TASKS
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.SYSTEM_ALERT_WINDOW
getui.permission.GetuiService.cn.mama.activity
android.permission.READ_EXTERNAL_STORAGE

Receivers

com.intowow.sdk.ScheduleReceiver

com.intowow.sdk.prefetch

cn.mama.receiver.ExitPushReceiver

cn.mama.android.intent.exit_push

cn.mama.receiver.SystemActionReceiver

com.igexin.sdk.action.VcJZGToLZw9JjUTix3adf3
com.igexin.sdk.action.refreshls
com.igexin.sdk.action.pushmanager
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

cn.mama.receiver.push.PushReceiver

cn.mama.android.intent.MESSAGE_RECEIVED

cn.mama.receiver.HappyPregnancyReceiver

android.service.HAPPYPREGNANCY

cn.mama.activityparts.utils.PassportUtil$AlarmReceiver

cn.mama.passport.action

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.igexin.sdk.PushManagerReceiver

com.igexin.sdk.action.pushmanager

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.VcJZGToLZw9JjUTix3adf3

cn.mama.hotfix.receiver.ExitAppReceier

cn.mama.android.intent.exit_app

cn.mama.hotfix.receiver.RestartAppReceiver

cn.mama.android.intent.restart_app

Services

cn.mama.service.UpdateService

cn.mama.UPDATE_SERVICE

Android Permissions

371581702729313f8c3d11f023e76905_JaffaCakes118

Permissions

android.permission.DISABLE_KEYGUARD

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.SYSTEM_ALERT_WINDOW

getui.permission.GetuiService.cn.mama.activity

android.permission.READ_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

Files

cn.mama.activity

cn.mama.activity.Launch_

Activities

cn.mama.activity.Launch_

cn.mama.activity.MMHomeActivity

com.tencent.tauth.AuthActivity

com.baidu.appsearchlib.NASLib

cn.mama.framework.activity.FileBrowserActivity

Permissions

Receivers

com.intowow.sdk.ScheduleReceiver

cn.mama.receiver.ExitPushReceiver

cn.mama.receiver.SystemActionReceiver

cn.mama.receiver.push.PushReceiver

cn.mama.receiver.HappyPregnancyReceiver

cn.mama.activityparts.utils.PassportUtil$AlarmReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.getuiext.service.PayloadReceiver

cn.mama.hotfix.receiver.ExitAppReceier

cn.mama.hotfix.receiver.RestartAppReceiver

Services

cn.mama.service.UpdateService

Android Permissions

371581702729313f8c3d11f023e76905_JaffaCakes118