JaffaCakes118_0db8e537b648c752c783c15912b39111

General

Target
JaffaCakes118_0db8e537b648c752c783c15912b39111
Size 5.0MB
Sample250604-wk5d3ack6x
SHA256 d24ab6208dea148769ea45fdd4a102d2601e38073f69033f51a04a1c2537fa45
MD5 0db8e537b648c752c783c15912b39111
SHA1 40d60a78a1352e9df1f296d612ca12411d26e090
SHA512 140f327e802ebe4ff1bbecef009657f420bb834cdd7eb08c01817f85260a6e77d841948ff9851de94815e8dd88436d366baabfe0d3acea562444ad79fa0f2bde
SSDEEP 98304:mmEL7WlFaJfOB8FK+ETdqRxiqD1l6UxlVL1SWUklhFwmehn76VZXP5Sl:mmwWlFwOB8C4xT1JlVxSWwmehn+Vm
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

JaffaCakes118_0db8e537b648c752c783c15912b39111

.apk 5.0MB

JaffaCakes118_0db8e537b648c752c783c15912b39111

SHA256 d24ab6208dea148769ea45fdd4a102d2601e38073f69033f51a04a1c2537fa45
MD5 0db8e537b648c752c783c15912b39111
SHA1 40d60a78a1352e9df1f296d612ca12411d26e090
SHA512 140f327e802ebe4ff1bbecef009657f420bb834cdd7eb08c01817f85260a6e77d841948ff9851de94815e8dd88436d366baabfe0d3acea562444ad79fa0f2bde
SSDEEP 98304:mmEL7WlFaJfOB8FK+ETdqRxiqD1l6UxlVL1SWUklhFwmehn76VZXP5Sl:mmwWlFwOB8C4xT1JlVxSWwmehn+Vm
MD5 SHA1 SHA512 SSDEEP

android arch:arm

csa.rtg.fed.vtr

Android Permissions

JaffaCakes118_0db8e537b648c752c783c15912b39111

Permissions

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.BROADCAST_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.WRITE_APN_SETTINGS

android.permission.WRITE_SMS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.INTERNET

JaffaCakes118_0db8e537b648c752c783c15912b39111

org.cocos2dx.cpp.AppActivity

com.google.firebase.PayActivity

com.google.firebase.WebViewActivity

com.google.android.gms.analytics.CampaignTrackingService

com.google.firebase.messaging.FirebaseMessagingService

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_0db8e537b648c752c783c15912b39111

org.cocos2dx.cpp.AppActivity

com.google.firebase.PayActivity

com.google.firebase.WebViewActivity

com.google.android.gms.analytics.CampaignTrackingService

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

JaffaCakes118_0db8e537b648c752c783c15912b39111