3ca428daca852115e9d8ff360a5a0062_JaffaCakes118

General

Target

3ca428daca852115e9d8ff360a5a0062_JaffaCakes118
Size

485KB
MD5

3ca428daca852115e9d8ff360a5a0062
SHA1

7b5b98dbae3872f211a48b98923ef5e15986e802
SHA256

18a32c7ed71ce79fac6e313abfee21db5c80f556e226fa9a8e1ebf5349c5e736
SHA512

c02f799970419839f364ef2b4f3743ed5b988f376f6f6f38712b3c05504fd0471401877c18b47746c253b4913a17192fed21e7e922393e6696085e54c965921d
SSDEEP

12288:7+CeOPU8uL4OXESep+qbcF8vPDJLt1853:7+x8uL4O9ep+qwuPdt18h

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Files

3ca428daca852115e9d8ff360a5a0062_JaffaCakes118
.apk android arch:arm

a2e3ft.aer4w

a2e3ft.aer4w.MainActivity

Activities

a2e3ft.aer4w.MainActivity

android.intent.action.MAIN

a2e3ft.aer4w.UninstallerActivity

android.intent.action.VIEW
android.intent.action.DELETE

a2e3ft.aer4w.ComposeSmsActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.RECEIVE_WAP_PUSH
android.permission.RECEIVE_MMS
android.permission.CALL_PHONE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS

Receivers

a2e3ft.aer4w.TelInternal

android.intent.action.NEW_OUTGOING_CALL
android.intent.action.PHONE_STATE

a2e3ft.aer4w.BootReceiver

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_RECEIVED_2
android.provider.Telephony.GSM_SMS_RECEIVED
android.intent.action.PACKAGE_RESTARTED
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT

a2e3ft.aer4w.NetstateReceiver

android.net.conn.CONNECTIVITY_CHANGE

a2e3ft.aer4w.SmsReceiver

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_RECEIVED_2
android.provider.Telephony.GSM_SMS_RECEIVED
android.intent.action.USER_PRESENT
android.media.RINGER_MODE_CHANGED

a2e3ft.aer4w.MyAdmin

android.app.action.DEVICE_ADMIN_ENABLED

a2e3ft.aer4w.SmsReceiver4_4

android.provider.Telephony.SMS_DELIVER

a2e3ft.aer4w.MmsReceiver4_4

android.provider.Telephony.WAP_PUSH_DELIVER

Services

a2e3ft.aer4w.MainService4_4

android.intent.action.RESPOND_VIA_MESSAGE

Android Permissions

3ca428daca852115e9d8ff360a5a0062_JaffaCakes118

Permissions

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.RECEIVE_WAP_PUSH

android.permission.RECEIVE_MMS

android.permission.CALL_PHONE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

Sharing

General

Malware Config

Signatures

Files

a2e3ft.aer4w

a2e3ft.aer4w.MainActivity

Activities

a2e3ft.aer4w.MainActivity

a2e3ft.aer4w.UninstallerActivity

a2e3ft.aer4w.ComposeSmsActivity

Permissions

Receivers

a2e3ft.aer4w.TelInternal

a2e3ft.aer4w.BootReceiver

a2e3ft.aer4w.NetstateReceiver

a2e3ft.aer4w.SmsReceiver

a2e3ft.aer4w.MyAdmin

a2e3ft.aer4w.SmsReceiver4_4

a2e3ft.aer4w.MmsReceiver4_4

Services

a2e3ft.aer4w.MainService4_4

Android Permissions

3ca428daca852115e9d8ff360a5a0062_JaffaCakes118