General

  • Target

    apkprotectlite.zip

  • Size

    1.7MB

  • MD5

    2341d15329d440fb38244446644e3083

  • SHA1

    dc5230f528dba38d2ecfc6f2651af7f50ec0c0b3

  • SHA256

    d3b460c3f8ecd88d79d64c3c2dcb4bc8290bea90ae485a084da3ea1782a7f2bc

  • SHA512

    d9cd35b08369d8334e1718bc0d596c53f4f04660f4fb3c2604781b25d0aa67367baca4d2012c1df2952306d299e699456627b81fa1e5b8f39a054c18800538d2

  • SSDEEP

    49152:c5NJvwWll7aFuYNHO5xFSxlNlEuhEIKjQsMMbCZ:c5/vll7L1qPKIQQxdZ

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • apkprotectlite.zip
    .zip
  • Manual.pdf
    .pdf
    • http://www.apkprotect.com/.

  • apkcrypt.exe
    .exe windows:5 windows x86

    1d28a75b21850802052bcc60ca887ace


    Headers

    Imports

    Sections

  • libcrypt.dll
    .dll windows:5 windows x86

    f3dfc7a7c2d1c4fe079e872a3f38242b


    Headers

    Imports

    Sections

  • tools/AXMLPrinter.jar
    .jar
  • tools/SignAPK.jar
    .jar
  • tools/baksmali.jar
    .jar
  • tools/platform.pk8
  • tools/platform.x509.pem
  • tools/smali.jar
    .jar