Quick+PDF+Scanner_1.6.0.xapk
- SHA256 588d7e4a3d75b522b15fc38d5ff517813c7fba2caa2f8f19fd93edd6136a3c95
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
com.pdflabs.pdfscanner.apk
Resource
android-x86-arm-20260325-en
android-9-x86
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
com.pdflabs.pdfscanner.apk
Resource
android-x64-20260325-en
android-10-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
com.pdflabs.pdfscanner.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
config.arm64_v8a.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
config.arm64_v8a.jar
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Quick+PDF+Scanner_1.6.0.xapk
- Size 37.2MB
- Sample260705-sdvdqsgx5p
- SHA256 588d7e4a3d75b522b15fc38d5ff517813c7fba2caa2f8f19fd93edd6136a3c95
- MD5 999fb07f6bba6b372663ccca1fe1ee1b
- SHA1 44c02f3dca412a2185a5735fdc6bb8a9d5a1afa4
- SHA512 777a9679109597d606fd5ecb7094eee83a62208408b6fbb96422bbea28c46a1d21f52efe7bf70256f7f4d809cb1231bfc6d15c02afbe960f1dc801022d20b6ce
- SSDEEP 786432:UMfxZYDquBDyDUSJ58Jdtlgpp19eHSyg1jy80Z8nipsA59O:UeYDZocpQ
- TLSH T1E587C01DE74CE83BDDC6B4FC8C4509A263277C845720D3962913B50DEEB37E44A69BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE - Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/config.arm64_v8a.apk - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/config.arm64_v8a.apk
File Explorer
-
Quick+PDF+Scanner_1.6.0.xapk.zip 37.2MB
-
com.pdflabs.pdfscanner.apk.apk 12.8MB
-
config.arm64_v8a.apk.jar 24.4MB
-
manifest.json293B
com.pdflabs.pdfscanner.apk
- SHA256 d9d5a8c86a0f620da36f9a14f04185cb5b966830141a5b6103b489d2a66e0f07
- MD5 409dd9c69e1334d6ce9af6714a18ffa3
- SHA1 de1e1111953fdcd112332e6d7e73903bdc34d4bd
- SHA512 1b0e121e5590fce6801441992a642f56f2db58365c3e14545b54e191baf2d7c50da111d1d07431c24af2e10914fdb8694f39486f083ed82637b66579493ae7be
- SSDEEP 393216:OfZMfhplvBt7ThIauqfXWHhzDIVD6bcAv6J+7C:KMfxZYDquBDyDUG
- TLSH T115D6239AE348913FD43B14324DBE636146575D07CC83AB43A628722C6ABB6C45F1EFD8
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
58067a2e3bee8db70048fccdb0745c6e3c2ef9156eada698744a57ed1d6d57428bfe1e6df4b6eabb26e1f0e3869c68b7e3649f686208b0b6e2ea98054c8d7f52
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
fe:5b:b8:37:48:29:34:f9:2c:c0:ca:48:77:f7:f9:fb:be:ce:0e:31
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jun 26, 2026 - Jun 26, 2056
com.pdflabs.pdfscanner
com.pdflabs.pdfscanner.MainActivity
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_TOPICS
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
android.permission.CHANGE_NETWORK_STATE
com.pdflabs.pdfscanner.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.android.vending.CHECK_LICENSE
com.pdflabs.pdfscanner.MainActivity
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.MAIN
com.pdflabs.pdfscanner.PDFImageActivity
com.google.android.gms.ads.AdActivity
com.google.android.gms.ads.OutOfContextTestingActivity
com.google.android.gms.ads.NotificationHandlerActivity
com.google.mlkit.vision.documentscanner.internal.GmsDocumentScanningDelegateActivity
com.google.mlkit.vision.codescanner.internal.GmsBarcodeScanningDelegateActivity
com.google.android.gms.common.api.GoogleApiActivity
com.pairip.licensecheck.LicenseActivity
com.google.android.gms.ads.AdService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
com.pdflabs.pdfscanner.data.local.LabsService
androidx.room.MultiInstanceInvalidationService
com.google.mlkit.common.internal.MlKitComponentDiscoveryService
com.pdflabs.pdfscanner.data.local.ABhiService
android.service.notification.NotificationListenerService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.pdflabs.pdfscanner.data.local.QukeService
android.media.MediaRouteProviderService
android.media.MediaRoute2ProviderService
android.media.browse.MediaBrowserService
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
androidx.core.content.FileProvider
com.google.android.gms.ads.MobileAdsInitProvider
com.pdflabs.pdfscanner.PDFQkProvider
com.samsung.android.intent.action.DEVICE_SEARCH
com.samsung.android.search.intent.ACTION_CONTENT_SEARCH
com.samsung.android.sdk.command.COMMAND_PROVIDER
androidx.startup.InitializationProvider
com.google.mlkit.common.internal.MlKitInitProvider
config.arm64_v8a.apk
- SHA256 c244b5eb46eaf07208aeb7121ee6505682df5d85daf12ee33e817b64c034eedb
- MD5 69e24ab7b179b824bc05dcd02cb67444
- SHA1 b9bece88376ccbf9d312bf15ebfebf30754b31dd
- SHA512 ec3a4f5dfce23d399004ccfe44a03aa2838a9e87b41f349b94f35e3c5da3c171216f478b376f868dbdc3ffec0ef6a0a9725397964f85242d2cdf366b6fdea629
- SSDEEP 786432:EJ58Jdtlgpp19eHSyg1jy80Z8nipsA59f:Scp9
- TLSH T17F479F1DE64CED36DDC6B4FC8C4509E3633B79846720D29A2913850DFE837E44A69BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
caaac9824af21da0feb91d6e0469a818c441ae82
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
fe:5b:b8:37:48:29:34:f9:2c:c0:ca:48:77:f7:f9:fb:be:ce:0e:31
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jun 26, 2026 - Jun 26, 2056
manifest.json
- SHA256 827af61cfedc6eed6645a8566247f16dfedd0a83dd1fbe4a4ff906d608da8ee7
- MD5 9f9bbb8c88c8d6645997342f7a7560d3
- SHA1 231e111ee378470ac1ec7c4f7a8b525f4078b1e5
- SHA512 b72308715f0a98551cadbea914ce8de9edf254ece459cfcacc6533ead5a98e7bc4f969f3f7a77529d5502df2f3ceec48e8b3a3ecd842c1020db5dc01d7c00aaf
- TLSH T12EE0C23108C94DBBA30D96C8C001548487DE15D3C9D13BC08FCDDF04033595A0083034
- MD5 SHA1 SHA512 TLSH