jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]pf[.]4185a36d8d313f1bc14f4309ed61ee66

Reason

error processing APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4185a36d8d313f1bc14f4309ed61ee66
Size 1.9MB
Sample261012-21xl2sys6p
SHA256 0413dfad93b40a7dba129c6add014b750b7d1c16c5c05c4520fd718e172fe45b
MD5 4185a36d8d313f1bc14f4309ed61ee66
SHA1 13e33e5f68f0b17394680cd0c6a693b53622cd01
SHA512 9ee1d625ea9dda51ad7028ef4e601220dedd2238e004c535abc93edd989d94ec2dbc22c4970f4a211a82d3cfd1dc283fa8c3b66770b35724821c6c8bd7552167
SSDEEP 49152:5Y1NGklyhW7CARQvYhMLKx82yxkZa4KhedhxfSZ0P:SqkkhW7BQwheKxEKkFeU6
TLSH
T17D95230767198D8AF19ABE714934E3637596CC70B38962235F0A7069CBB3D85E63DF80
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4185a36d8d313f1bc14f4309ed61ee66

Unsigned APK 2 IoCs

Checks for missing APK codesign signature.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4185a36d8d313f1bc14f4309ed61ee66
unpack001/FZ200DL

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4185a36d8d313f1bc14f4309ed61ee66

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4185a36d8d313f1bc14f4309ed61ee66

.apk 1.9MB
FZ200DL

.apk 99KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4185a36d8d313f1bc14f4309ed61ee66

SHA256 0413dfad93b40a7dba129c6add014b750b7d1c16c5c05c4520fd718e172fe45b
MD5 4185a36d8d313f1bc14f4309ed61ee66
SHA1 13e33e5f68f0b17394680cd0c6a693b53622cd01
SHA512 9ee1d625ea9dda51ad7028ef4e601220dedd2238e004c535abc93edd989d94ec2dbc22c4970f4a211a82d3cfd1dc283fa8c3b66770b35724821c6c8bd7552167
SSDEEP 49152:5Y1NGklyhW7CARQvYhMLKx82yxkZa4KhedhxfSZ0P:SqkkhW7BQwheKxEKkFeU6
TLSH
T17D95230767198D8AF19ABE714934E3637596CC70B38962235F0A7069CBB3D85E63DF80
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Unsigned APK

Checks for missing APK codesign signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b982c611118db34c75610098e16d0c894457c184

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=bgbszgrgvukt,OU=bgbszgrgvukt,O=bgbszgrgvukt,L=bgbszgrgvukt,ST=bgbszgrgvukt,C=57

Chains

Jan 1, 0001

FZ200DL

SHA256 2a3cb93d0ca14a1d0b0820c2a26df502a461fb2546ef4587524087c130553f10
MD5 e8fbf92c750dbd6fb316be82a6b7b7ae
SHA1 2a6ae9568698807cacc8cf4349556446c996b136
SHA512 7848191878b5b8ba2d5020c7be953e70ccc4d392d29e400a65a57cd3731604933125de1d81b3732d251b3450fd4766a814ccd01f3975beda2499a9ba585a26e0
SSDEEP 3072:O/UQ9RDR78j9tqyLm0NhjQOH4A2fra1m+91rc2LrJ2:2UQ9D78JoUpj/orah1rRU
TLSH
T17AA3124FB3F90A4EE853E9FA17A046B6F57185A0C71B8DBA822F18D3D1A7446D3112B1
MD5 SHA1 SHA512 SSDEEP TLSH

android

Unsigned APK

Checks for missing APK codesign signature.

com.door.pay.sdk

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4185a36d8d313f1bc14f4309ed61ee66

File Signature issue

FZ200DL

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService

Sharing

Errors

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4185a36d8d313f1bc14f4309ed61ee66

File Signature issue

FZ200DL

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService