General

  • Target

    b4ee1888bc789d82e59051426b79767e_JaffaCakes118

  • Size

    1.2MB

  • MD5

    b4ee1888bc789d82e59051426b79767e

  • SHA1

    d86509d63a91f5064d2453aad737319c3b3010d3

  • SHA256

    e5bbb0155b64a9b97c580165e5e39cc0f4cc06f513e7940eb2bce83d0b542513

  • SHA512

    c0d5bad522aed671f864d2c747c09ebb7c7d278ec9852aee081a7e97c63bc38e34a4a57cd4139511bb6fb11a2ab3b2ee585d5af4cb8d150c612c43573da1a693

  • SSDEEP

    24576:rBtIQGHWxvaP6LOSrw7VOHOZDP4kq33/zE8Voo846CDDbYSVp+8XJOaJ16KTKJDo:fZGHWvaP6LTrw7VO4D7IE8Voo846Cr17

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 9 IoCs

Files

  • b4ee1888bc789d82e59051426b79767e_JaffaCakes118
    .apk android arch:arm

    com.mobile.indiapp

    com.mobile.indiapp.activity.WelcomePageActivity


Android Permissions

b4ee1888bc789d82e59051426b79767e_JaffaCakes118

Permissions

com.mobile.indiapp.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.RESTART_PACKAGES

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.BROADCAST_STICKY

android.permission.GET_TASKS

android.permission.SET_WALLPAPER

android.permission.WRITE_SETTINGS

android.permission.EXPAND_STATUS_BAR

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE