jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]AndroidOS[.]Drosel[.]n[.]6b50480014b90f7949db8f3baec0e4db

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Drosel.n.6b50480014b90f7949db8f3baec0e4db
Size 1.9MB
Sample261015-db116stx2n
SHA256 2bf9747c51bdc0e12573272a0b56f80baef0f5e8f77e30a1c2c33ca70c16de8c
MD5 6b50480014b90f7949db8f3baec0e4db
SHA1 cb45ee5e690f13de405f6e519fc911b99edbf29a
SHA512 59b354b55db59074d3c7a3b81117c39ca483f21418a7702f9f9d0b46ea63064d0a91318a54e410f2a8993df00ccbad2982f372146dc8567c5b5b1341e4dcf4b7
SSDEEP 49152:yGTyHWUcqN8an1ZtZIl7iQ+kCtBI33M6d+XofM1AAz428as0IO5dMuehgBcd8/fw:FOHW/oDPiM194XqG
TLSH
T1D4950112A3E95966F2F79B359935600164BEBCF16A07E6DE0910747C0C77FE08A24BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Drosel.n.6b50480014b90f7949db8f3baec0e4db

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Drosel.n.6b50480014b90f7949db8f3baec0e4db

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Drosel.n.6b50480014b90f7949db8f3baec0e4db

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Drosel.n.6b50480014b90f7949db8f3baec0e4db

.apk 1.9MB

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Drosel.n.6b50480014b90f7949db8f3baec0e4db

SHA256 2bf9747c51bdc0e12573272a0b56f80baef0f5e8f77e30a1c2c33ca70c16de8c
MD5 6b50480014b90f7949db8f3baec0e4db
SHA1 cb45ee5e690f13de405f6e519fc911b99edbf29a
SHA512 59b354b55db59074d3c7a3b81117c39ca483f21418a7702f9f9d0b46ea63064d0a91318a54e410f2a8993df00ccbad2982f372146dc8567c5b5b1341e4dcf4b7
SSDEEP 49152:yGTyHWUcqN8an1ZtZIl7iQ+kCtBI33M6d+XofM1AAz428as0IO5dMuehgBcd8/fw:FOHW/oDPiM194XqG
TLSH
T1D4950112A3E95966F2F79B359935600164BEBCF16A07E6DE0910747C0C77FE08A24BB3
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

18979f90ed2cc2186155c3386aa97864ce90b749

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=guimeng,OU=guimeng,O=guimeng,L=guimeng,ST=guimeng,C=guimeng

Chains

Jan 1, 0001

cn.opdaqs.android.activity

cn.com.opda.android.mainui.MainActivity

android.intent.action.MAIN

cn.com.opda.android.performance.activity.Test2D_Activity

cn.com.opda.android.performance.activity.Test3D_Activity

cn.com.opda.android.performance.activity.ScreenDetectActivity

cn.com.opda.zmaster.deviceinfo.ZPhoneInfoActivity

cn.com.opda.zmaster.deviceinfo.ZDetailInfoActivity

cn.com.opda.zmaster.deviceinfo.ScreenScanActivity

cn.com.opda.zmaster.deviceinfo.WifiGraphActivity

cn.com.opda.zmaster.deviceinfo.util.JIosDialog

cn.com.opda.android.performance.activity.PerformanceScoreRankTabActivity

cn.com.opda.android.performance.activity.PerformanceCompareRankTab

cn.com.opda.android.performance.activity.PerformanceTotalRankTab

cn.com.opda.android.performance.activity.PerformanceModelRankTab

cn.com.opda.android.performance.activity.Test_Activity

cn.com.opda.android.codecheck.activity.CodeCheckActivity

cn.com.opda.android.dashi.activity.IndexPageActivity

cn.com.opda.android.dashi.activity.AskCenterActivity

cn.com.opda.android.dashi.activity.SquareActivity

cn.com.opda.android.dashi.activity.InformationCenterActivity

cn.com.opda.android.dashi.activity.BindMailActivity

cn.com.opda.android.dashi.activity.DashiLetterListActivity

cn.com.opda.android.dashi.activity.DashiMyInfoTabMyAnswerActivity

cn.com.opda.android.dashi.activity.DashiMyInfoTabMyFavaryteActivity

cn.com.opda.android.dashi.activity.DashiMyInfoTabMyMessageActivity

cn.com.opda.android.dashi.activity.DashiMyInfoTabMyQuestionActivity

cn.com.opda.android.dashi.activity.DaShiPointDetailActivity

cn.com.opda.android.dashi.activity.DashiQuestionCenterActivity

cn.com.opda.android.dashi.activity.DaShiQuestionListActivity

cn.com.opda.android.dashi.activity.DaShiSoftActivity

cn.com.opda.android.dashi.activity.LetterBoxActivity

cn.com.opda.android.dashi.activity.QuestionDetailActivity

cn.com.opda.android.dashi.activity.UserInfoActivity

cn.com.opda.android.dashi.activity.UserListActivity

cn.com.opda.android.dashi.activity.DashiSearchActivity

cn.com.opda.android.dashi.activity.NewQuestionsListActivity

cn.com.opda.android.dashi.activity.DashiCateGraysActivity1

cn.com.opda.android.dashi.activity.HotDeviceListActivity

cn.com.opda.android.dashi.activity.IndexGridOfQuestionListActivity

cn.com.opda.android.dashi.activity.TemplateQuestionActivity

com.exchange.View.PearlCurtainActivity

com.exchange.View.ListCurtainActivity

org.zeroxlab.graphics.DrawCircle

android.intent.action.MAIN

com.nea.nehe.lesson08.MyRendererActivity

android.intent.action.MAIN

com.nea.nehe.lesson16.MyRendererActivity1

android.intent.action.MAIN

com.nea.nehe.lesson16.Run

android.intent.action.MAIN

org.itri.teapot.TeapotES

android.intent.action.MAIN

org.zeroxlab.graphics.DrawRect

android.intent.action.MAIN

org.zeroxlab.graphics.DrawArc

android.intent.action.MAIN

org.zeroxlab.graphics.DrawText

android.intent.action.MAIN

org.zeroxlab.graphics.DrawCircle2

android.intent.action.MAIN

org.zeroxlab.graphics.DrawImage

android.intent.action.MAIN

cn.com.opda.zmaster.deviceinfo.RomInfoActivity

cn.com.opda.zmaster.deviceinfo.RomCommentActivity

cn.com.opda.android.performance.activity.PerformanceCompareRankTab

cn.com.opda.android.performance.activity.RomTestActivityDemo

cn.com.opda.android.performance.activity.RomTestActivity

cn.com.opda.android.performance.activity.CompositeTestActivtiy

cn.com.opda.android.mainui.ShareQWeiboActivity

android.intent.action.VIEW

cn.com.opda.android.mainui.ShareSinaWeiboActivity

cn.com.opda.android.mainui.OAuthWebViewActivity

com.fire.pare.guoc.WActivity

com.fire.pare.gups.DActivity

com.fire.pare.gups.LActivity

com.fire.pare.gups.HActivity

com.fire.pare.guzk.SActivity

android.intent.action.CREATE_SHORTCUT

com.fire.pare.amoz.AmozAct

Android Permissions

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Drosel.n.6b50480014b90f7949db8f3baec0e4db

Permissions

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.GET_ACCOUNTS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.BATTERY_STATS

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.GET_PACKAGE_SIZE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.WRITE_APN_SETTINGS

android.permission.READ_SECURE_SETTINGS

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.FORCE_STOP_PACKAGES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Drosel.n.6b50480014b90f7949db8f3baec0e4db

File Signature issue

cn.com.opda.android.mainui.MainActivity

cn.com.opda.android.performance.activity.Test2D_Activity

cn.com.opda.android.performance.activity.Test3D_Activity

cn.com.opda.android.performance.activity.ScreenDetectActivity

cn.com.opda.zmaster.deviceinfo.ZPhoneInfoActivity

cn.com.opda.zmaster.deviceinfo.ZDetailInfoActivity

cn.com.opda.zmaster.deviceinfo.ScreenScanActivity

cn.com.opda.zmaster.deviceinfo.WifiGraphActivity

cn.com.opda.zmaster.deviceinfo.util.JIosDialog

cn.com.opda.android.performance.activity.PerformanceScoreRankTabActivity

cn.com.opda.android.performance.activity.PerformanceCompareRankTab

cn.com.opda.android.performance.activity.PerformanceTotalRankTab

cn.com.opda.android.performance.activity.PerformanceModelRankTab

cn.com.opda.android.performance.activity.Test_Activity

cn.com.opda.android.codecheck.activity.CodeCheckActivity

cn.com.opda.android.dashi.activity.IndexPageActivity

cn.com.opda.android.dashi.activity.AskCenterActivity

cn.com.opda.android.dashi.activity.SquareActivity

cn.com.opda.android.dashi.activity.InformationCenterActivity

cn.com.opda.android.dashi.activity.BindMailActivity

cn.com.opda.android.dashi.activity.DashiLetterListActivity

cn.com.opda.android.dashi.activity.DashiMyInfoTabMyAnswerActivity

cn.com.opda.android.dashi.activity.DashiMyInfoTabMyFavaryteActivity

cn.com.opda.android.dashi.activity.DashiMyInfoTabMyMessageActivity

cn.com.opda.android.dashi.activity.DashiMyInfoTabMyQuestionActivity

cn.com.opda.android.dashi.activity.DaShiPointDetailActivity

cn.com.opda.android.dashi.activity.DashiQuestionCenterActivity

cn.com.opda.android.dashi.activity.DaShiQuestionListActivity

cn.com.opda.android.dashi.activity.DaShiSoftActivity

cn.com.opda.android.dashi.activity.LetterBoxActivity

cn.com.opda.android.dashi.activity.QuestionDetailActivity

cn.com.opda.android.dashi.activity.UserInfoActivity

cn.com.opda.android.dashi.activity.UserListActivity

cn.com.opda.android.dashi.activity.DashiSearchActivity

cn.com.opda.android.dashi.activity.NewQuestionsListActivity

cn.com.opda.android.dashi.activity.DashiCateGraysActivity1

cn.com.opda.android.dashi.activity.HotDeviceListActivity

cn.com.opda.android.dashi.activity.IndexGridOfQuestionListActivity

cn.com.opda.android.dashi.activity.TemplateQuestionActivity

com.exchange.View.PearlCurtainActivity

com.exchange.View.ListCurtainActivity

org.zeroxlab.graphics.DrawCircle

com.nea.nehe.lesson08.MyRendererActivity

com.nea.nehe.lesson16.MyRendererActivity1

com.nea.nehe.lesson16.Run

org.itri.teapot.TeapotES

org.zeroxlab.graphics.DrawRect

org.zeroxlab.graphics.DrawArc

org.zeroxlab.graphics.DrawText

org.zeroxlab.graphics.DrawCircle2

org.zeroxlab.graphics.DrawImage

cn.com.opda.zmaster.deviceinfo.RomInfoActivity

cn.com.opda.zmaster.deviceinfo.RomCommentActivity

cn.com.opda.android.performance.activity.PerformanceCompareRankTab

cn.com.opda.android.performance.activity.RomTestActivityDemo

cn.com.opda.android.performance.activity.RomTestActivity

cn.com.opda.android.performance.activity.CompositeTestActivtiy

cn.com.opda.android.mainui.ShareQWeiboActivity

cn.com.opda.android.mainui.ShareSinaWeiboActivity

cn.com.opda.android.mainui.OAuthWebViewActivity

com.fire.pare.guoc.WActivity

com.fire.pare.gups.DActivity

com.fire.pare.gups.LActivity

com.fire.pare.gups.HActivity

com.fire.pare.guzk.SActivity

com.fire.pare.amoz.AmozAct

com.exchange.Public.DownloadingService

com.fire.pare.guoc.WService

com.fire.pare.gups.OService

com.fire.pare.guzk.SService

com.fire.pare.amoz.AmozSer

Android Permissions

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Drosel.n.6b50480014b90f7949db8f3baec0e4db