Checks memory information

Checks memory information which indicate if the system is an emulator.

Registers a broadcast receiver at runtime (usually for listening for system events)

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

Acquires the wake lock

Checks if the internet connection is available

Reads information about phone network operator.

Schedules tasks to execute at a specified time

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.