584db5ea89c525e99f1d9c8a732e96a4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
584db5ea89c525e99f1d9c8a732e96a4_JaffaCakes118
Size 20.9MB
Sample241018-telnnavgre
SHA256 bf406c3359cc30008885d4230b9fa620fe2132fbca49573bc803531cbdb3124e
MD5 584db5ea89c525e99f1d9c8a732e96a4
SHA1 ef67b2df4e90aec2188dba394c7c82dbee091e5d
SHA512 a402b5ec51952982aa44aa81b1ab2e381ed092258ff281b02e72704abf370743473ae8b1a0d6ae2dc23f73a8cc23c998519fd9581602337798d99da3ebd536a3
SSDEEP 393216:8QFaizc2Y9PcDhTKD+Co+8r2Cze4PlD+vAJDByIjbJQQvCn9UoEWXZ:3nQ2Y9PcDhmSCdnQe4Plivikk1QQW5XJ
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

upx

Malware Config

Signatures

Patched UPX-packed file 1 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Required to be able to access the camera device.	android.permission.CAMERA

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

File Explorer

584db5ea89c525e99f1d9c8a732e96a4_JaffaCakes118

.apk 20.9MB
MidasEmptyRes1.apk

.apk 5KB
MidasEmptyRes2.apk

.apk 5KB

584db5ea89c525e99f1d9c8a732e96a4_JaffaCakes118

SHA256 bf406c3359cc30008885d4230b9fa620fe2132fbca49573bc803531cbdb3124e
MD5 584db5ea89c525e99f1d9c8a732e96a4
SHA1 ef67b2df4e90aec2188dba394c7c82dbee091e5d
SHA512 a402b5ec51952982aa44aa81b1ab2e381ed092258ff281b02e72704abf370743473ae8b1a0d6ae2dc23f73a8cc23c998519fd9581602337798d99da3ebd536a3
SSDEEP 393216:8QFaizc2Y9PcDhTKD+Co+8r2Cze4PlD+vAJDByIjbJQQvCn9UoEWXZ:3nQ2Y9PcDhmSCdnQe4Plivikk1QQW5XJ
MD5 SHA1 SHA512 SSDEEP

android arch:arm

Patched UPX-packed file

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

com.tencent.qqmusic

com.tencent.qqmusic.activity.baseactivity.DexActivity

com.tencent.qqmusic.activity.ShareAccountActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.ImportPersonalAssetsActivity

com.tencent.qqmusic.activity.NewGuideActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.NullActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.GuideActivity

com.tencent.qqmusic.activity.DynamicSplashActivity

com.tencent.qqmusic.activity.LiteWebViewActivity

com.tencent.qqmusic.activity.JumpToMusicCircleActivity

com.tencent.qqmusic.activity.BillInfoEditActivityNew

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.AppStarterActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE android.intent.action.MAIN android.intent.action.VIEW

com.tencent.qqmusic.activity.WebViewActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.MVPlayerActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.EditMvListActivity

com.tencent.qqmusic.activity.DTSInvalidActivity

com.tencent.qqmusic.activity.DTSLoadingActivity

com.tencent.qqmusic.activity.DTSSettingActivity

com.tencent.qqmusic.activity.DTSEqualizerActivity

com.tencent.qqmusic.activity.DTSEqualizerAdvancedActivity

com.tencent.qqmusic.activity.WeiXinShareSongListActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE android.intent.action.VIEW

com.tencent.qqmusic.activity.MediaScannerActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.CheckScanResultListActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.MediaScannerFilterActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.FolderFilterActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.CustomScanActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.EditSongListActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.EditLocalDirListActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.NewUserInfoActivity

com.tencent.qqmusic.activity.SettingActivity

com.tencent.qqmusic.activity.SettingQualityAndDownloadActivity

com.tencent.qqmusic.activity.SettingOfflineConditionActivity

com.tencent.qqmusic.activity.SettingAuditionQualityActivity

com.tencent.qqmusic.activity.SettingOfflineQualityActivity

com.tencent.qqmusic.activity.SettingQPlaySetActivity

com.tencent.qqmusic.activity.SettingQPlayWatchSetActivity

com.tencent.qqmusic.activity.SettingQPlaySetupActivity

com.tencent.qqmusic.activity.SettingQPlaySetupProcessActivity

com.tencent.qqmusic.activity.SettingQPlayAutoSetActivity

com.tencent.qqmusic.activity.SettingDownloadPathActivity

com.tencent.qqmusic.activity.GroupMemberActivity

com.tencent.qqmusic.activity.VIPIntrodutionWebViewActivity

com.tencent.qqmusic.activity.SettingHelpAndFeedbackActivity

com.tencent.qqmusic.activity.SettingNetworkDiagnosisActivity

com.tencent.qqmusic.activity.SettingLogDiagnosisActivity

com.tencent.qqmusic.activity.IdentifyingCodeActivity

com.tencent.qqmusic.activity.SettingFeedbackActivity

com.tencent.qqmusic.activity.SettingShakeSetActivity

com.tencent.qqmusic.activity.SettingDebugSetServerActivity

com.tencent.qqmusic.activity.SettingDebugStatisticsActivity

com.tencent.qqmusic.activity.SettingDebugSetAOPActivity

com.tencent.qqmusic.activity.LoginActivity

com.tencent.qqmusic.activity.LoginNormalActivity

com.tencent.qqmusic.activity.LoginNormalIsolatedActivity

com.tencent.qqmusic.activity.VerifyCodeActivity

com.tencent.qqmusic.wxapi.WXEntryActivity

com.tencent.qqmusic.activity.RecognizerActivity

com.tencent.qqmusic.recognizer

com.tencent.qqmusic.recognize.RecognizeActivity

com.tencent.qqmusic.recognizer

com.tencent.qqmusic.activity.AddToMusicListActivityNew

com.tencent.qqmusic.activity.RingTongCutActivity

com.tencent.qqmusic.activity.FolderAddSongActivity

com.tencent.qqmusic.activity.FolderAddSongSearchActivity

com.tencent.qqmusic.activity.FolderAddSongListActivity

com.tencent.qqmusic.business.lockscreen.LockScreenActivity

com.tencent.qqmusic.activity.UpgradeSongQualityActivity

com.tencent.qqmusic.activity.DownloadListSongHistoryActivity

com.tencent.qqmusic.third.DispacherActivityForThird

com.tencent.qqmusic.forthird.activity.MY_MUSIC com.tencent.qqmusic.forthird.activity.APP_LIST com.tencent.qqmusic.forthird.activity.THEME_PAGE com.tencent.qqmusic.forthird.activity.RECOGNIZER com.tencent.qqmusic.forthird.activity.PUSH com.tencent.qqmusic.forthird.activity.PUSH_2 com.tencent.qqmusic.forthird.activity.PLAYER com.tencent.qqmusic.forthird.activity.PLAYER2 android.intent.action.VIEW android.intent.action.VIEW

com.tencent.qqmusic.activity.EditFolderDetailActivity

com.tencent.qqmusic.activity.ImageCropActivity

com.tencent.qqmusic.activity.ImageViewActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.tencent.midas.proxyactivity.APMidasPayProxyActivity

com.tencent.midas.wx.APMidasWXPayActivity

com.tencent.midas.qq.APMidasQQWalletActivity

android.intent.action.VIEW

com.tencent.midas.jsbridge.APWebJSBridgeActivity

com.tencent.qqmusic.landscape.activity.PicturePlayerActivity

com.tencent.qqmusic.activity.GeneOperationActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.LyricSearchActivity

com.tencent.qqmusic.activity.UseInputActivity

com.tencent.qqmusic.activity.InputActivity

com.tencent.qqmusic.activity.DanmuCommentActivity

com.tencent.qqmusic.activity.EditFolderListActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.DownloadLyricAndAlbumActivity

com.tencent.qqmusiccommon.PLAYLIST_VIEWER.PHONE

com.tencent.qqmusic.activity.cloudlocalmusic.CloudLocalMusicListActivity

com.tencent.qqmusic.business.lyricnew.desklyric.DeskHomeDialogActivity

com.tencent.tmassistantagentsdk.activity.WebAppActivity

com.tencent.qqmusic.business.player.PlayerActivity

com.tencent.qqmusic.activity.QPlayAutoLockScreenActivity

com.tencent.qqmusic.activity.ShareToWeiboActivity

com.tencent.qqmusic.activity.ShareActivity

com.tencent.qqmusic.lyricposter.LyricPosterActivity

com.tencent.qqmusic.lyricposter.LyricPosterRecommendActivity

com.tencent.qqmusic.activity.CountryCodeSettingActivity

com.tencent.qqmusic.fragment.recommandapp.RcmdAppPageActivity

com.tencent.qqmusic.activity.IPCCheckActivity

com.tencent.qqmusic.activity.FordLockScreenActivity

com.tencent.qqmusicplayerprocess.servicenew.listener.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON android.intent.action.HEADSET_PLUG android.media.AUDIO_BECOMING_NOISY

com.tencent.qqmusiccommon.WidgetProviderSmall

android.appwidget.action.APPWIDGET_UPDATE

com.tencent.qqmusiccommon.WidgetProviderMiddle

android.appwidget.action.APPWIDGET_UPDATE

com.tencent.qqmusiccommon.WidgetProviderLarge

android.appwidget.action.APPWIDGET_UPDATE

com.tencent.qqmusic.BootBroadcastReceiver

android.intent.action.BOOT_COMPLETED

com.tencent.qqmusic.third.BroadcastReceiverCenterForThird

com.tencent.qqmusic.forthird.activity.APP_LIST com.tencent.qqmusic.forthird.activity.THEME_PAGE com.tencent.qqmusic.forthird.activity.RECOGNIZER com.tencent.qqmusic.forthird.activity.PUSH com.tencent.qqmusic.forthird.activity.PUSH_2 com.tencent.qqmusic.forthird.activity.PLAYER com.tencent.qqmusic.forthird.activity.PLAYER2 com.tencent.qqmusic.forthird.activity.THEME_DETAIL com.tencent.qqmusic.forthird.activity.RADIO_PAGE com.tencent.qqmusic.forthird.activity.RANK_PAGE com.tencent.qqmusic.forthird.activity.NEW_SONG_PAGE com.tencent.qqmusic.forthird.activity.SINGLE_NEW_SONG com.tencent.qqmusic.forthird.activity.SINGER_PAGE com.tencent.qqmusic.forthird.activity.ALBUM_PAGE com.tencent.qqmusic.forthird.activity.HTML_PAGE com.tencent.qqmusic.forthird.activity.BILL com.tencent.qqmusic.forthird.activity.PROFILE com.tencent.qqmusic.forthird.activity.MVPLAYER com.tencent.qqmusic.forthird.activity.MV_THEME com.tencent.qqmusic.forthird.activity.MV_THEME_DETAIL com.tencent.qqmusic.forthird.activity.ASSORT_LIST com.tencent.qqmusic.forthird.activity.ASSORT_FRAGMENT com.tencent.qqmusic.forthird.activity.SKIN_THEME_DETAIL com.tencent.qqmusic.forthird.activity.DAILY_RC_DETAIL com.tencent.qqmusic.forthird.activity.PC_WIFI_IMPORT

com.tencent.qqmusic.business.local.MediaScannReceiver

com.tencent.qqpimsecure.ACTION_MEDIA_CACHE_CHANGE com.tencent.qqmusic.ACTION_GOTO_LOCAL

com.tencent.base.os.clock.AlarmClockReceiver

wns.heartbeat

com.tencent.qqmusic.business.ford.AppLinkReceiver

android.bluetooth.adapter.action.STATE_CHANGED android.bluetooth.device.action.ACL_CONNECTED android.bluetooth.device.action.ACL_DISCONNECTED

Android Permissions

584db5ea89c525e99f1d9c8a732e96a4_JaffaCakes118

Permissions

android.permission.GET_TASKS

com.tencent.qqmusic.permission.MMOAUTH_CALLBACK

com.tencent.qqmusic.permission.MM_MESSAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.BROADCAST_STICKY

com.tencent.qqmusic.permission.SEND_BROADCAST_PERMISSION

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_MEDIA_STORAGE

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH

android.permission.RECEIVE_SMS

android.permission.EXPAND_STATUS_BAR

android.permission.READ_LOGS

com.tencent.qqmusic.theme.permission

android.permission.CHANGE_NETWORK_STATE

android.permission.REORDER_TASKS

android.permission.CAMERA