JaffaCakes118_1b1ef4d521740b1d8505bff89d5b5884

General

Target
JaffaCakes118_1b1ef4d521740b1d8505bff89d5b5884
Size 5.3MB
Sample250628-2h3ekscr5x
SHA256 12c65ea652e5ab4d72ba65c1d578728f565434344ecba53f8c277b2b5400dbf8
MD5 1b1ef4d521740b1d8505bff89d5b5884
SHA1 9aab403bebde21708235e7c9f546757a429a22c9
SHA512 4343ad339ceeb0790f459f14d6aa9fe1290bc12c9a0bb09317c667a3ea3d3828799fce320b621036145d41a3074ec7e2964377cf1dcf248a29ce55ccc5ae77b6
SSDEEP 98304:MlbIwHwiwF3aS9DNfVAhDPbpj7dpwR9wKh5kK1/5C1dTSUNHeYWOD3SAf3jIbpNw:MZHHKrHuDPbpjwRS25CPvNmOuAfjCzlO
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

JaffaCakes118_1b1ef4d521740b1d8505bff89d5b5884

.apk 5.3MB

JaffaCakes118_1b1ef4d521740b1d8505bff89d5b5884

SHA256 12c65ea652e5ab4d72ba65c1d578728f565434344ecba53f8c277b2b5400dbf8
MD5 1b1ef4d521740b1d8505bff89d5b5884
SHA1 9aab403bebde21708235e7c9f546757a429a22c9
SHA512 4343ad339ceeb0790f459f14d6aa9fe1290bc12c9a0bb09317c667a3ea3d3828799fce320b621036145d41a3074ec7e2964377cf1dcf248a29ce55ccc5ae77b6
SSDEEP 98304:MlbIwHwiwF3aS9DNfVAhDPbpj7dpwR9wKh5kK1/5C1dTSUNHeYWOD3SAf3jIbpNw:MZHHKrHuDPbpjwRS25CPvNmOuAfjCzlO
MD5 SHA1 SHA512 SSDEEP

android arch:arm

klx.ebchn.ulltoe.CX2017_329

Android Permissions

JaffaCakes118_1b1ef4d521740b1d8505bff89d5b5884

Permissions

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.BROADCAST_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.WRITE_APN_SETTINGS

android.permission.WRITE_SMS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.INTERNET

JaffaCakes118_1b1ef4d521740b1d8505bff89d5b5884

org.cocos2dx.cpp.AppActivity

com.google.android.gms.analytics.CampaignTrackingService

com.google.firebase.messaging.FirebaseMessagingService

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_1b1ef4d521740b1d8505bff89d5b5884

org.cocos2dx.cpp.AppActivity

com.google.android.gms.analytics.CampaignTrackingService

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

JaffaCakes118_1b1ef4d521740b1d8505bff89d5b5884