jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]AndroidOS[.]Ewind[.]cs[.]cdf8119c8f4f606fdb83d35b56f45f9b

Sharing

Copy URL Twitter E-mail

Reason

error processing APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.cdf8119c8f4f606fdb83d35b56f45f9b
Size 9.5MB
Sample261015-db99vac13p
SHA256 44edb14e4d26c50380ef7369128ba4dadd8c90d36354dfe099e07cdc7a216256
MD5 cdf8119c8f4f606fdb83d35b56f45f9b
SHA1 e8a859bebd91aa604f5cada884440eaebd7d5bc3
SHA512 d54e92c47a1bc139e580d1b315255123de603ad104249a0cbee74be3161ce608fb17a05582c3a27ec25ee04bf4b58a276d332d6172fd948aa1d0276cad39a1c3
SSDEEP 196608:dpD6Pyv7I9RWu40uaSPF87SjGmb61EjHkpDnMfhHqKyFGCyvPvDzgATow:dAPe7I9R5btyv1jEx08wRnDzgAUw
TLSH
T162A633839358A466D0BAC536C3F98F9F65A99C085707EB330149F47C94BFDC4AE48AC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Codesign digest Mismatch 2 IoCs

File was altered after it was signed.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.cdf8119c8f4f606fdb83d35b56f45f9b
unpack001/gamebox.apk

Insecure Codesign Algorithm 3 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.cdf8119c8f4f606fdb83d35b56f45f9b
unpack001/flash.apk
unpack001/gamebox.apk

Untrusted Codesign Signers 3 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.cdf8119c8f4f606fdb83d35b56f45f9b
unpack001/flash.apk
unpack001/gamebox.apk

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.cdf8119c8f4f606fdb83d35b56f45f9b

.apk 9.5MB
flash.apk

.apk 4.5MB
gamebox.apk

.apk 1.7MB

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.cdf8119c8f4f606fdb83d35b56f45f9b

SHA256 44edb14e4d26c50380ef7369128ba4dadd8c90d36354dfe099e07cdc7a216256
MD5 cdf8119c8f4f606fdb83d35b56f45f9b
SHA1 e8a859bebd91aa604f5cada884440eaebd7d5bc3
SHA512 d54e92c47a1bc139e580d1b315255123de603ad104249a0cbee74be3161ce608fb17a05582c3a27ec25ee04bf4b58a276d332d6172fd948aa1d0276cad39a1c3
SSDEEP 196608:dpD6Pyv7I9RWu40uaSPF87SjGmb61EjHkpDnMfhHqKyFGCyvPvDzgATow:dAPe7I9R5btyv1jEx08wRnDzgAUw
TLSH
T162A633839358A466D0BAC536C3F98F9F65A99C085707EB330149F47C94BFDC4AE48AC9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

0338af6deaa1384bb1ddb4c6608a0eb363111c1c

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

Chains

Jan 1, 0001

com.yiwan.sgjs

com.morgoo.droidplugin.stub.ShortcutProxyActivity

com.morgoo.droidplugin.stub.ActivityStub$StandardP00

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP00

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP00

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP00

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP00

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP00

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP00

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP00

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$StandardP01

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP01

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP01

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP01

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP01

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP01

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP01

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP01

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$StandardP02

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP02

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP02

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP02

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP02

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP02

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP02

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP02

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$StandardP03

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP03

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP03

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP03

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP03

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP03

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP03

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP03

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$StandardP04

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP04

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP04

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP04

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP04

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP04

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP04

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP04

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$StandardP05

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP05

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP05

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP05

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP05

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP05

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP05

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP05

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$StandardP06

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP06

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP06

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP06

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP06

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP06

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP06

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP06

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$StandardP07

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP07

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP07

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP07

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP07

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP07

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP07

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP07

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$StandardP08

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP08

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP08

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP08

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP08

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP08

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP08

android.intent.action.MAIN

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP08

android.intent.action.MAIN

com.yiwan.main.MainActivity

com.google.android.gms.ads.AdActivity

com.yiwan.AdActivity

android.intent.action.MAIN

flash.apk

SHA256 76847ff9254eea8044f46a054b0cb8b338559ac8c77543b444d1b3b475d37e4c
MD5 eab156b0fa36ee0f18487fd6e0286148
SHA1 6d928eabc5cffbc68df19be121da5f2f22614c26
SHA512 09205d1bac1abf4a56889bdc52c3e51b05542c2b3bb98a15286531011a0c5776f8d08ddc1988b7c4c469932f4e914ecf0201d216564aa879efa65b139e5f3f23
SSDEEP 98304:uHgADnNemeVxd3FpqKiDVpnGv6yo4P3t9KKvDb0MgATorO:upDnMfhHqKyFGCyvPvDzgAToa
TLSH
T1582633550E68F2E1E271D03AC9FDCF1E4560652D49035DAEA1CAF9B9F28BE84F7092D0
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

9dc3a0dbfb6769748f806f7fbaedb01d843e9ee8

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Jan 1, 0001

com.adobe.flashplayer

gamebox.apk

SHA256 913d4d664cd5872f03470505f751ed1e303531d1c667497d297923acc01409fd
MD5 fc76d2f2593de86bfb1e3f030b37e6fa
SHA1 e27026a53a51a0823c8d4eb6b70b4d6377f530f5
SHA512 b8a510ac6d45998e21be3d817df091123e21d73695b2059f1510491e6be818e299a80aa9b53d914f7d1160e9e920211acdfc79054360e989d366270b050a7df0
SSDEEP 49152:N2AtOK4P7HSB1IhZNQwfyeq552L6YBoru:N2iOK48+hZNu5EmYMu
TLSH
T16585E086E789B927C877C43A46B2976666448C504757E323214DB12C8FBFEC49E89FCC
MD5 SHA1 SHA512 SSDEEP TLSH

android

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

2a0be67d4309daa8daee2dd72b0236bd48b63029

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=郭,OU=游迅网,O=安卓,L=昆山,ST=江苏,C=中国

Chains

Jan 1, 0001

Android Permissions

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.cdf8119c8f4f606fdb83d35b56f45f9b

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_SUPERUSER

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_SETTINGS

Sharing

Errors

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.cdf8119c8f4f606fdb83d35b56f45f9b

File Signature issue

com.morgoo.droidplugin.stub.ShortcutProxyActivity

com.morgoo.droidplugin.stub.ActivityStub$StandardP00

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP00

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP00

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP00

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP00

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP00

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP00

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP00

com.morgoo.droidplugin.stub.ActivityStub$StandardP01

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP01

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP01

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP01

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP01

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP01

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP01

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP01

com.morgoo.droidplugin.stub.ActivityStub$StandardP02

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP02

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP02

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP02

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP02

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP02

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP02

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP02

com.morgoo.droidplugin.stub.ActivityStub$StandardP03

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP03

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP03

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP03

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP03

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP03

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP03

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP03

com.morgoo.droidplugin.stub.ActivityStub$StandardP04

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP04

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP04

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP04

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP04

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP04

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP04

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP04

com.morgoo.droidplugin.stub.ActivityStub$StandardP05

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP05

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP05

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP05

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP05

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP05

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP05

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP05

com.morgoo.droidplugin.stub.ActivityStub$StandardP06

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP06

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP06

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP06

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP06

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP06

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP06

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP06

com.morgoo.droidplugin.stub.ActivityStub$StandardP07

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP07

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP07

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP07

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP07

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP07

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP07

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTopP07

com.morgoo.droidplugin.stub.ActivityStub$StandardP08

com.morgoo.droidplugin.stub.ActivityStub$SingleInstanceP08

com.morgoo.droidplugin.stub.ActivityStub$SingleTaskP08

com.morgoo.droidplugin.stub.ActivityStub$SingleTopP08

com.morgoo.droidplugin.stub.ActivityStub$Dialog$StandardP08

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleInstanceP08

com.morgoo.droidplugin.stub.ActivityStub$Dialog$SingleTaskP08