jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]ne[.]a8e0dbf7af42b26ae3233

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.ne.a8e0dbf7af42b26ae3233
Size 1.8MB
Sample261009-tfleaaa15x
SHA256 3e8450d5a0dff8fa950a64df97b9a0de70af6998de8248b987b811d7f0007598
MD5 2b88dbde4d1a8e0dbf7af42b26ae3233
SHA1 fd0ae8858fb19abf0a8dbea279e15c445d556d14
SHA512 2c2a84e6699d86eee4d090c02f96d9085d7a182999e35c6e7fd9cb32be6257b4e804b6c317433192a6589d9b80c23dd46924bfb256aa4a61eef021e85e68b1ed
SSDEEP 49152:OrmoD57iJ0eUc1Ayxb2Mhv/xpcWKXdVDv80dc:OrDDViJ7Z1A5M54dVDv80dc
TLSH
T13F85F19267ED582AF1B38F39A67642596875BCC02501D25E2328715C4FFBF80CE64FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.ne.a8e0dbf7af42b26ae3233

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.ne.a8e0dbf7af42b26ae3233

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.ne.a8e0dbf7af42b26ae3233

.apk 1.8MB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.ne.a8e0dbf7af42b26ae3233

SHA256 3e8450d5a0dff8fa950a64df97b9a0de70af6998de8248b987b811d7f0007598
MD5 2b88dbde4d1a8e0dbf7af42b26ae3233
SHA1 fd0ae8858fb19abf0a8dbea279e15c445d556d14
SHA512 2c2a84e6699d86eee4d090c02f96d9085d7a182999e35c6e7fd9cb32be6257b4e804b6c317433192a6589d9b80c23dd46924bfb256aa4a61eef021e85e68b1ed
SSDEEP 49152:OrmoD57iJ0eUc1Ayxb2Mhv/xpcWKXdVDv80dc:OrDDViJ7Z1A5M54dVDv80dc
TLSH
T13F85F19267ED582AF1B38F39A67642596875BCC02501D25E2328715C4FFBF80CE64FA3
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

373e4fad046bbb070a713c8deb65533125aa4839

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=wang,OU=byte,O=sw,L=hz,ST=zj,C=CN

Chains

Jan 1, 0001

com.zwkj

.activity.PrefaceActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW

.activity.DownloadBatchActivity

.activity.AccountActivity

.activity.CmRegisterActivity

.activity.BookFinishedPromptActivity

.activity.CmChargeActivity

.activity.OsmanthusActivity

.activity.BookCityActivity

.activity.ReaderActivity

.activity.FileSelectActivity

.activity.CmBookIndexActivity

.activity.LocalBookIndexActivity

.activity.CmBookLoginActivity

.activity.CmSetPasswordActivity

.activity.CmYueduhuiActivity

.activity.CmBookOrderActivity

.activity.RankingActivity

.activity.RecommendationActivity

.activity.SubjectActivity

.activity.ClassificationEntryActivity

.activity.ClassificationDetailActivity

.activity.KeyWordDetailActivity

.activity.RankingDetailActivity

.activity.BookmarkActivity

.activity.DirectoryActivity

.activity.CommentActivity

.activity.MonthlyClassActivity

.activity.MonthlyDetailActivity

.activity.MonthlyDetailYueduhuiActivity

.activity.CmSearchActivity

.activity.AboutActivity

.activity.CustomServiceActivity

.activity.FeedbackActivity

.activity.FeedbackQuestionsActivity

.activity.ReadRecordActivity

.activity.NotifyActivity

.activity.HelpActivity

.activity.WelfareCenterActivity

.activity.WebviewActivity

.activity.FontActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

.util.UpdateManager$updateDialog

Android Permissions

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.ne.a8e0dbf7af42b26ae3233

Permissions

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RRAD_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.RECEIVE_WAP_PUSH

android.permission.SEND_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.ne.a8e0dbf7af42b26ae3233

File Signature issue

.activity.PrefaceActivity

.activity.DownloadBatchActivity

.activity.AccountActivity

.activity.CmRegisterActivity

.activity.BookFinishedPromptActivity

.activity.CmChargeActivity

.activity.OsmanthusActivity

.activity.BookCityActivity

.activity.ReaderActivity

.activity.FileSelectActivity

.activity.CmBookIndexActivity

.activity.LocalBookIndexActivity

.activity.CmBookLoginActivity

.activity.CmSetPasswordActivity

.activity.CmYueduhuiActivity

.activity.CmBookOrderActivity

.activity.RankingActivity

.activity.RecommendationActivity

.activity.SubjectActivity

.activity.ClassificationEntryActivity

.activity.ClassificationDetailActivity

.activity.KeyWordDetailActivity

.activity.RankingDetailActivity

.activity.BookmarkActivity

.activity.DirectoryActivity

.activity.CommentActivity

.activity.MonthlyClassActivity

.activity.MonthlyDetailActivity

.activity.MonthlyDetailYueduhuiActivity

.activity.CmSearchActivity

.activity.AboutActivity

.activity.CustomServiceActivity

.activity.FeedbackActivity

.activity.FeedbackQuestionsActivity

.activity.ReadRecordActivity

.activity.NotifyActivity

.activity.HelpActivity

.activity.WelfareCenterActivity

.activity.WebviewActivity

.activity.FontActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

.util.UpdateManager$updateDialog

.service.LocationService

com.umeng.common.net.DownloadingService

.service.DownloadFileService

.service.OrderChapterService

com.baidu.location.f

.advertisement.ByteReceiver

.advertisement.ByteReceiver

.advertisement.ByteReceiver

Android Permissions

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.ne.a8e0dbf7af42b26ae3233