4b0aa46c38b98a67ab10882ec49d0b79_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
4b0aa46c38b98a67ab10882ec49d0b79_JaffaCakes118
Size 6.3MB
Sample241016-c18a4ssfkl
SHA256 e39fb7c8180ea2ae68582a34a3b022daa4740d9955bbb9644ab7a0c59ad612af
MD5 4b0aa46c38b98a67ab10882ec49d0b79
SHA1 40039e81971d7949a0c2c07bb130760a50a1a5ee
SHA512 a56cb21b6dae0e71efb9698aeae0a185bebcc348f2886c61bc7b1f73e51e81bb4693edb19c6429757ccd76b37f103aaa640b1fdca25047b7bf722741f4d5c1e7
SSDEEP 196608:067NUBCLy7/2ym9MDmZaO0WjYBp+ofR7Y79fb7J7GgMO4OontxJN3Cpp5jOHBp:L5UBCtb9MDmZaO0WjYBp+of56RvxrMFP
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

4b0aa46c38b98a67ab10882ec49d0b79_JaffaCakes118

.apk 6.3MB
SinaPayPluginSamsung.apk

.apk 1.4MB
OnlineBank.apk

.apk 259KB
alipay_msp.apk

.apk 807KB

4b0aa46c38b98a67ab10882ec49d0b79_JaffaCakes118

SHA256 e39fb7c8180ea2ae68582a34a3b022daa4740d9955bbb9644ab7a0c59ad612af
MD5 4b0aa46c38b98a67ab10882ec49d0b79
SHA1 40039e81971d7949a0c2c07bb130760a50a1a5ee
SHA512 a56cb21b6dae0e71efb9698aeae0a185bebcc348f2886c61bc7b1f73e51e81bb4693edb19c6429757ccd76b37f103aaa640b1fdca25047b7bf722741f4d5c1e7
SSDEEP 196608:067NUBCLy7/2ym9MDmZaO0WjYBp+ofR7Y79fb7J7GgMO4OontxJN3Cpp5jOHBp:L5UBCtb9MDmZaO0WjYBp+of56RvxrMFP
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips arch:x86

com.mci.smagazine

android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_NETWORK_STATE android.permission.GET_ACCOUNTS android.permission.GET_TASKS com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS android.permission.WRITE_SETTINGS android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.READ_LOGS com.android.launcher.permission.INSTALL_SHORTCUT android.permission.SYSTEM_ALERT_WINDOW android.permission.FULLSCREEN android.permission.QUERY_DRM android.permission.ACCESS_DRM android.permission.CHANGE_NETWORK_STATE android.permission.RESTART_PACKAGES android.permission.READ_OWNER_DATA android.permission.WRITE_OWNER_DATA android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.GET_PACKAGE_SIZE android.permission.ACCESS_COARSE_LOCATION android.permission.READ_EXTERNAL_STORAGE android.permission.VIBRATE android.permission.ACCESS_DOWNLOAD_MANAGER android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.permission.GET_TASKS android.permission.INTERNET android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.MANAGE_ACCOUNTS android.permission.GET_ACCOUNTS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

.PreSplashActivity

android.intent.action.MAIN android.intent.action.VIEW com.mci.storedetails.Main

.SplashActivity

android.intent.action.VIEW

.UseAnnounceActivity

.MainActivity

.CategoryActivity

.ArticleActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

.FeaturedActivity

StoreDetailsActivity

.SettingActivity

.FeedbackActivity

.FaqActivity

.MyOrderListActivity

.RecoveryBoughtActivity

.PaymentActivity

.EULAActivity

com.mci.smagazine.SinaPaymentActivity

com.imobile.mixobserver.activity.MagazineColumnsPadActivity

com.imobile.mixobserver.activity.MagazineContentPageActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.imobile.mixobserver.activity.VideoPlayerActivity

com.imobile.mixobserver.ui.AppWebViewActivity

com.imobile.mixobserver.activity.SPenLauncherActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

.FromActivity

com.mci.smagazine.pushmessage.BaiduPushDialogActivity

cn.sharesdk.framework.ShareSDKUIShell

android.intent.action.VIEW

com.umeng.socialize.view.ShareActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

.wxapi.WXEntryActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

SinaPayPluginSamsung.apk

SHA256 ded8f8657c62e13babaf84c543c540f774a8d0a52a0f057e04fcf6db5b9050ab
MD5 3601959f251a7d290904797599f9944f
SHA1 ef7e0536afca292336a5febf3111543885262c8f
SHA512 2e54b566a08f6b0c216771d484bd93104a5cfbd96afb60d3edbc166289eb098a116e5a6246621b3131957db3b26cd7a7ff1c81c4c078d25dbecb3a6085033fd8
SSDEEP 24576:6vyKUan4PxwdGHJfALbB8q4BOiwIX6QLfFUvWk8q99x/HNtf+VP084XHB92o3vEN:6vyKUj5pJfAnBuB7wiXLyvP8OHff+Vn1
MD5 SHA1 SHA512 SSDEEP

android

com.sina.alex.sinapaypluginsumsang

alipay_msp.apk

SHA256 2e5ac4ddf8ccf0a45a59e86ea56db4c0b57ae7a7ac181a26ccb2a9da0c29b8f0
MD5 c8ff873b2a0d1efcbc81d83343732b29
SHA1 4f67883898f70e472313e7d76d36c40f8eef9c22
SHA512 53ae58acd4cd458851f40ee71a313f908a7ee06f7df76d9f3a015988d0b4f00a5f73ae24a2a923a09530746f3492f35a893acca553fa1ceac0c80a7886bd9317
SSDEEP 24576:NPxwdGHJfALbB8q4BOiwIX6QLfFUvWk8q99x/HNtf+VD:N5pJfAnBuB7wiXLyvP8OHff+VD
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.alipay.android.app

Android Permissions

4b0aa46c38b98a67ab10882ec49d0b79_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_LOGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FULLSCREEN

android.permission.QUERY_DRM

android.permission.ACCESS_DRM

android.permission.CHANGE_NETWORK_STATE

android.permission.RESTART_PACKAGES

android.permission.READ_OWNER_DATA

android.permission.WRITE_OWNER_DATA

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

Sharing

General

Malware Config

Signatures

File Explorer

4b0aa46c38b98a67ab10882ec49d0b79_JaffaCakes118

.PreSplashActivity

.SplashActivity

.UseAnnounceActivity

.MainActivity

.CategoryActivity

.ArticleActivity

.FeaturedActivity

StoreDetailsActivity

.SettingActivity

.FeedbackActivity

.FaqActivity

.MyOrderListActivity

.RecoveryBoughtActivity

.PaymentActivity

.EULAActivity

com.mci.smagazine.SinaPaymentActivity

com.imobile.mixobserver.activity.MagazineColumnsPadActivity

com.imobile.mixobserver.activity.MagazineContentPageActivity

com.imobile.mixobserver.activity.VideoPlayerActivity

com.imobile.mixobserver.ui.AppWebViewActivity

com.imobile.mixobserver.activity.SPenLauncherActivity

.FromActivity

com.mci.smagazine.pushmessage.BaiduPushDialogActivity

cn.sharesdk.framework.ShareSDKUIShell

com.umeng.socialize.view.ShareActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

.wxapi.WXEntryActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

.downloadservice.ListenNetStateService

com.imobile.mixobserver.util.AppUpgradeService

.downloadservice.DownloadService

.pushmessage.MessageAlarmService

.pushmessage.MessageService

.account.UserVerifyService

com.datalog.log4j.service.LogManagerService

.widget.SMagazineWidgetService

com.mci.smagazine.pushmessage.BaiduPushService

com.baidu.android.pushservice.PushService

.account.AccountStateChangeReceiver

com.datalog.log4j.service.LogManagerReceiver

.widget.SMagazineWidgetProvider

.widget.SMagazineWidgetProvider4x3

.widget.SMagazineWidgetProvider4x4

com.mci.smagazine.pushmessage.BaiduPushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

.widget.SMagazineWidgetDataProvider

.widget.SMagazineWidgetRotationProvider

SinaPayPluginSamsung.apk

com.sina.alex.sinapaypluginsumsang.WelcomeActivity

com.sina.alex.sinapaypluginsumsang.PayListActivity

com.sina.alex.sinapaypluginsumsang.AliWebActivity

com.sina.alex.sinapaypluginsumsang.BankOnlineActivity

com.sina.alex.sinapaypluginsumsang.AliPluginActivity

com.sina.alex.sinapaypluginsumsang.SmsActivity

com.alipay.android.app.sdk.WapPayActivity

OnlineBank.apk

com.sina.alex.onlinebank.MainActivity

alipay_msp.apk

com.alipay.android.app.pay.MainActivity

com.alipay.android.app.pay.TransContainer

com.alipay.android.app.pay.HyperlinkActivity

com.alipay.android.app.pay.PageForBrowser

com.alipay.android.app.MspService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

com.alipay.android.app.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

com.alipay.android.app.helper.UserIdShareProvider

Android Permissions

4b0aa46c38b98a67ab10882ec49d0b79_JaffaCakes118