Errors

Reason
could not process APK: EOF

General

  • Target

    kwai-android-generic-gifmakerrelease-12.5.30.36946_x64_12c903.apk

  • Size

    117.6MB

  • MD5

    6112879c63aaee652b43214a5312c903

  • SHA1

    6442764da4e8ab14d24ee5e0595ae70a98740406

  • SHA256

    3e7957dd470b72687bd6ffd0c9e825fa3af9adaa3efbde53a48bf53977282247

  • SHA512

    40aa949749c540d8afc7d537ab7bc19d297f85a11cdc0605bcb9e9d910f4cacd0014ac7696c9515b1b5e8efb6e21d285fa69d7aaac29cf1019d67abb1f9ca434

  • SSDEEP

    3145728:tYnv0cRWi9MQKIzGK4HsEwD7GIV5rm66A6OVJ:qv/Ii9MQBGKsYD7GIV5KNA6WJ

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 7 IoCs
  • Requests dangerous framework permissions 15 IoCs

Files

  • kwai-android-generic-gifmakerrelease-12.5.30.36946_x64_12c903.apk
    .apk android arch:arm64

    Password: infected

    com.smile.gifmaker

    com.yxcorp.gifshow.HomeActivity


  • comment_detail-master.zip
    .apk android

    Password: infected

    com.smile.gifmaker

    com.yxcorp.gifshow.comment.emotion.detail.EmotionDetailActivity


  • commercial_search-master.zip
    .apk android

    Password: infected

    com.smile.gifmaker


  • hot_spot_plugin-master.zip
    .apk android

    Password: infected

    com.smile.gifmaker


  • im_plugin-master.zip
    .apk android

    Password: infected

    com.smile.gifmaker

    com.yxcorp.gifshow.message.imchat.acivity.IMChatActivityTablet


  • intimate_bridge-master.zip
    .apk android

    Password: infected

    com.smile.gifmaker


  • intimate_plugin-master.zip
    .apk android

    Password: infected

    com.smile.gifmaker

    com.yxcorp.gifshow.intimate.IntimateRouterActivity


  • live_revenue_audience_plugin-master.zip
    .apk android

    Password: infected

    com.smile.gifmaker


  • message_slide_plugin-master.zip
    .apk android

    Password: infected

    com.smile.gifmaker

    com.yxcorp.gifshow.message.slide.collection.MessageSlideCollectionActivity


  • nearby_header-master.zip
    .apk android

    com.smile.gifmaker


Android Permissions

kwai-android-generic-gifmakerrelease-12.5.30.36946_x64_12c903.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.VIBRATE

android.permission.READ_CONTACTS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.USE_CREDENTIALS

android.permission.BLUETOOTH

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.REORDER_TASKS

com.kwai.wallpaper.permission

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_MEDIA_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.NFC

com.android.alarm.permission.SET_ALARM

android.permission.QUERY_ALL_PACKAGES

com.oplus.ocs.permission.third

com.smile.gifmaker.permission.KW_SDK_BROADCAST

miui.permission.READ_STEPS

android.permission.ACTIVITY_RECOGNITION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_CALENDAR

com.android.launcher2.permission.INSTALL_SHORTCUT

com.android.launcher3.permission.INSTALL_SHORTCUT

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS