jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]AndroidOS[.]Frelect[.]a[.]3178c8b3c1ea5b65c04222687d19ab31

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Frelect.a.3178c8b3c1ea5b65c04222687d19ab31
Size 1.3MB
Sample261015-ddg13sew4t
SHA256 4f31396a2271eabee673cba7dbfdf214a720cd29d22e26a9316f28d436e306a0
MD5 3178c8b3c1ea5b65c04222687d19ab31
SHA1 fc48f272e64d2897d5b30fd855704c67fbfb3a0e
SHA512 534b12e3969a7b34ddbbaf148c07449829049e443cfeb62290f905593e7d1acf92479e4c1f32df17c4aa856aecebd4eb4d2936d21664934d94e86e6a199ac136
SSDEEP 24576:TKqXLLKy5SCqaxmqBob0nxl6ONyzlNRZjFtpKkLzqwleBHaKlaioils9J:GqXqysCqcb4pNZjFWkGQumos9J
TLSH
T149550282E647CF63C8C22239A5174E05F221CD98CF799B53760CA5343BE759C9E29FA1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Frelect.a.3178c8b3c1ea5b65c04222687d19ab31

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Frelect.a.3178c8b3c1ea5b65c04222687d19ab31

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Frelect.a.3178c8b3c1ea5b65c04222687d19ab31

.apk 1.3MB

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Frelect.a.3178c8b3c1ea5b65c04222687d19ab31

SHA256 4f31396a2271eabee673cba7dbfdf214a720cd29d22e26a9316f28d436e306a0
MD5 3178c8b3c1ea5b65c04222687d19ab31
SHA1 fc48f272e64d2897d5b30fd855704c67fbfb3a0e
SHA512 534b12e3969a7b34ddbbaf148c07449829049e443cfeb62290f905593e7d1acf92479e4c1f32df17c4aa856aecebd4eb4d2936d21664934d94e86e6a199ac136
SSDEEP 24576:TKqXLLKy5SCqaxmqBob0nxl6ONyzlNRZjFtpKkLzqwleBHaKlaioils9J:GqXqysCqcb4pNZjFWkGQumos9J
TLSH
T149550282E647CF63C8C22239A5174E05F221CD98CF799B53760CA5343BE759C9E29FA1
MD5 SHA1 SHA512 SSDEEP TLSH

android

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

36820ac03fba119f1644e6e126562f350a3b203e

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=guimeng,OU=guimeng,O=guimeng,L=guimeng,ST=guimeng,C=guimeng

Chains

Jan 1, 0001

com.forever.smart.cover

Android Permissions

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Frelect.a.3178c8b3c1ea5b65c04222687d19ab31

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.vending.CHECK_LICENSE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Frelect.a.3178c8b3c1ea5b65c04222687d19ab31

File Signature issue

smart.cover.Inzeong_goo

smart.cover.Main

smart.cover.Info

smart.cover.Inzeong_fail

smart.cover.Inzeong_network

ToggleWidgetConfig

smart.cover.Toggle

smart.cover.ToggleByStatus

com.android.framwork.etac

yw.lvxg.my

smart.cover.SmartCover_S

smart.cover.SmartCover_S2

smart.cover.ScreenOnOff_S

com.android.framwork.etse

yw.lvxg.amhxh

smart.cover.Rcv

smart.cover.Bcr

smart.cover.SmartCover_R

smart.cover.SmartCover_R2

ToggleWidget

qgp.ndedqgp.nded.ngv

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Frelect.a.3178c8b3c1ea5b65c04222687d19ab31

File Signature issue

smart.cover.Inzeong_goo

smart.cover.Main

smart.cover.Info

smart.cover.Inzeong_fail

smart.cover.Inzeong_network

ToggleWidgetConfig

smart.cover.Toggle

smart.cover.ToggleByStatus

com.android.framwork.etac

yw.lvxg.my

smart.cover.SmartCover_S

smart.cover.SmartCover_S2

smart.cover.ScreenOnOff_S

com.android.framwork.etse

yw.lvxg.amhxh

smart.cover.Rcv

smart.cover.Bcr

smart.cover.SmartCover_R

smart.cover.SmartCover_R2

ToggleWidget

qgp.ndedqgp.nded.ngv

Android Permissions

jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Frelect.a.3178c8b3c1ea5b65c04222687d19ab31