Errors

Reason
invalid header size: 1478555930

General

  • Target

    yes-ua_androidappsapk.co.apk

  • Size

    44.4MB

  • MD5

    0df1a2e46be6d7b592ddfab1467f8050

  • SHA1

    917b686d0f522f0976e9301cf84b74180010cdd1

  • SHA256

    fe5e3defa0ca578d3b8fbf5c957dbe4a6132afd9966eb6ca77ad06d5c236044c

  • SHA512

    30ab3797c139e480f76b3b13c05025698b4f9823db0fbcd25c0d58a0c63dce4a1cb88e1d32d8cf8823962d678bd207d9de6118e98bcd7d2acbbddc16d79cc2de

  • SSDEEP

    786432:nQ429pSo3bhpwFMPQdp4iX4/qu47kYymUKWU82Ek0WWHAS70ngbngUj1nbpEEP6T:uXSUbrxP6WiKqu4ygiTZr70nenTj1npM

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 5 IoCs

Files

  • yes-ua_androidappsapk.co.apk
    .apk android arch:arm64 arch:arm arch:mips arch:x86 arch:x64

    com.uaf.YESUA

    com.uaf.YESUA.MainActivity


  • 0.js
  • 1.js
  • 10.js
  • 11.js
  • 12.js
  • 13.js
  • 14.js
  • 15.js
  • 16.js
  • 17.js
  • 18.js
  • 19.js
  • 2.js
  • 20.js
  • 21.js
  • 22.js
  • 23.js
  • 24.js
  • 25.js
  • 25th_Logo_Splash.jpg
  • 26.js
  • 27.js
  • 28.js
  • 29.js
  • 2904a2719a4dc7974d4b.worker.js
  • 3.js
  • 31.js
  • 4.js
  • 5.js
  • 6.js
  • 7.js
  • 8.js
  • 9.js
  • AppVersionPlugin.js
  • CallNumber.js
  • Camera.js
  • CameraConstants.js
  • CameraPopoverHandle.js
  • CameraPopoverOptions.js
  • Connection.js
  • DirectoryEntry.js
  • DirectoryReader.js
  • Entry.js
  • File.js
  • FileEntry.js
  • FileError.js
  • FilePath.js
  • FilePicker.js
  • FileReader.js
  • FileSystem.js
  • FileTransfer.js
  • FileTransferError.js
  • FileUploadOptions.js
  • FileUploadResult.js
  • FileWriter.js
  • FingerprintAuth.js
  • FirebaseDynamicLinks.js
  • Flags.js
  • FontAwesome.otf
  • GTM-M2BT4XR.json
  • LICENSE
  • LocalFileSystem.js
  • MEDIA_EN_213
  • MEDIA_EN_HOME_LOGO.SVG
  • MEDIA_ZH_HK_213
  • MEDIA_ZH_HK_HOME_LOGO.SVG
  • Metadata.js
  • PositionError.js
  • ProgressEvent.js
  • README.md
  • SQLitePlugin.js
  • SocialSharing.js
  • TouchID.js
  • UALogo.png
  • UafPdfViewer.js
  • advanced-http.js
  • android.png
  • angular.json
  • app.js
  • auth.http
  • badge.js
  • bonus-point.http
  • branchAddress.json
  • btn_acc_operation.svg
  • btn_acc_setting.svg
  • btn_increase_credit.svg
  • btn_increase_credit2.svg
  • btn_loan_confirm.svg
  • btn_pre_approval.svg
  • btn_transfer.svg
  • btn_transfer2.svg
  • captcha.http
  • classes0.dex.dat
  • clipboard-paste-button.svg
  • close.png
  • common.http
  • cookie-handler.js
  • cordova.js
  • cordova_plugins.js
  • crashlytics-build.properties
  • deeplink.js
  • device.js
  • dp.arm-v7.so.dat
  • dp.arm-v8.so.dat
  • dp.mp3
  • dp.x86.so.dat
  • dp.x86_64.so.dat
  • droidsans.ttf
  • droidsans.woff
  • en.json
  • enlanguage.json
  • enlanguage.json.bak
  • exec.js
  • face.png
  • facebook-native.js
  • favicon.ico
  • fcm.http
  • fileChooser.js
  • fileSystemPaths.js
  • fileSystems-roots.js
  • fileSystems.js
  • firebase.js
  • fontawesome-webfont.eot
  • fontawesome-webfont.svg
  • fontawesome-webfont.ttf
  • fontawesome-webfont.woff
  • fontawesome-webfont.woff2
  • footer2.png
  • geo-ip-translate.http
  • geolocation.js
  • gradient.png
  • headversion.json
  • headversion.json.bak
  • helpers.js
  • icons.svg
  • inappbrowser.js
  • index.d.ts
  • index.html
  • index.js
  • index.metadata.json
  • ionicons.woff
  • ionicons.woff2
  • isChrome.js
  • karma-main.js
  • karma.conf.js
  • keyboard.js
  • lightbox-config.service.d.ts
  • lightbox-config.service.js
  • lightbox-config.service.metadata.json
  • lightbox-event.service.d.ts
  • lightbox-event.service.js
  • lightbox-event.service.metadata.json
  • lightbox-overlay.component.d.ts
  • lightbox-overlay.component.js
  • lightbox-overlay.component.metadata.json
  • lightbox-overlay.component.ngfactory.d.ts
  • lightbox-overlay.component.ngfactory.js
  • lightbox-overlay.component.spec.d.ts
  • lightbox-overlay.component.spec.js
  • lightbox.component.d.ts
  • lightbox.component.js
  • lightbox.component.metadata.json
  • lightbox.component.ngfactory.d.ts
  • lightbox.component.ngfactory.js
  • lightbox.component.spec.d.ts
  • lightbox.component.spec.js
  • lightbox.css
  • lightbox.module.d.ts
  • lightbox.module.js
  • lightbox.module.metadata.json
  • lightbox.module.ngfactory.d.ts
  • lightbox.module.ngfactory.js
  • lightbox.service.d.ts
  • lightbox.service.js
  • lightbox.service.metadata.json
  • loading.gif
  • loan-account.http
  • loan-applciation.http
  • loan-confirm.html
  • loan-confirmation.http
  • local-notification.js
  • local-storage-store.js
  • lodash.js
  • logo3.png
  • main.css
  • main.js
  • manifest.json
  • market.js
  • mediajson.json
  • mediajson.json.bak
  • mediaversion.json
  • mediaversion.json.bak
  • menu_btn_bonus_pts.svg
  • menu_btn_contact.svg
  • menu_btn_friends.svg
  • menu_btn_services.svg
  • menu_btn_submit_doc.svg
  • messages.js
  • mobile-cms-message.http
  • monthlybill.svg
  • nativeapiprovider.js
  • nav_bar_logo.svg
  • nav_bar_logo_w_border.svg
  • network.js
  • next.png
  • other.png
  • package.json
  • pdf-icon.png
  • pin-small.png
  • platform.js
  • plugins.FileOpener2.js
  • polyfills.js
  • pre-approval.html
  • pre-approval.http
  • prev.png
  • promise.js
  • promptbasednativeapi.js
  • qrcode.png
  • requestFileSystem.js
  • resolveLocalFileSystemURI.js
  • resources.xml
  • sample.pdf
  • securestorage.js
  • selectorplugin.js
  • service-worker.js
  • settings.js
  • smart-app-banner.css
  • smart-app-banner.js
  • splashscreen.js
  • statusbar.js
  • sw-toolbox.js
  • sysconfig.http
  • sysconfig.json
  • sysconfig.json.bak
  • sysconfig.json.new
  • tncversion.json
  • touch.png
  • touchid.gif
  • tsconfig-demo.json
  • tsconfig.json
  • tslint.json
  • tutorial-mediaversion.json
  • ua_finance_logo.png
  • uaf-font.eot
  • uaf-font.svg
  • uaf-font.ttf
  • uaf-font.woff
  • umd-tough-cookie.js
  • user.http
  • util.js
  • vendor.js
  • yarn.lock
  • zh_hk.json
  • zh_hklanguage.json
  • zh_hklanguage.json.bak

Android Permissions

yes-ua_androidappsapk.co.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.CALL_PHONE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE