General

  • Target

    38f13940b65da024fe4a44319b91ff9a_JaffaCakes118

  • Size

    1.7MB

  • MD5

    38f13940b65da024fe4a44319b91ff9a

  • SHA1

    ec0875448e3e3f69f62053af42d922bfb165c463

  • SHA256

    789ea4732eb703c5a9842deca4ae6e31accce37c50c2addedc0b00f1896a7e89

  • SHA512

    c52822b29f0638b41790901a6dc1f894cee03049a6900012a917aa653b61a9c8d554275a772daa51b255cdf47d9820e87a716d41130fd7f6154000d006a1a89a

  • SSDEEP

    49152:ffmZWpFZCrimIL8egKPdyBnHlShp2OClNiYq6:nmeZCriv8egOdyBFSbElNi+

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 38f13940b65da024fe4a44319b91ff9a_JaffaCakes118
    .zip
  • һroot/root/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • һroot/root/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • һroot/root/files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • һroot/root/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • һroot/root/files/busybox
    .elf linux arm
  • һroot/root/files/su
    .elf linux arm
  • һroot/root/files/zergRush
    .elf linux arm
  • һroot/root/rootض.txt
  • һroot/root/runme.bat