jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]pf[.]5bfd45f944339eaae1729e929b84fed2

Reason

error processing APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.5bfd45f944339eaae1729e929b84fed2
Size 1.4MB
Sample261012-24tpkaby6m
SHA256 8aab64dc047c14f376fbc0da014ef4c62d5ea24a3d6e12136c17ed4ab490f64a
MD5 5bfd45f944339eaae1729e929b84fed2
SHA1 2851775e763780aae95600bc328e7ca99e447b55
SHA512 45657eb4f89f44e2f992827f1c575f44f91ea52a84740472feac9c0ae9af5ea6356d89e45c82d0e8cc46575892dc6630936f8fb1d170da695e2addbfc8702407
SSDEEP 24576:5J225SzQhCmcuUV2/X3oC5xq+iqCk/AZ/yTiUiIAKsj4eunaBN/ZNblDsy19:5JzSzQkQSUxfQWIyTDfv+4eun2N/ZdlX
TLSH
T1B1652301ABD94C5CF1B36E357931219668B1ADE45A40E38B2E61F09CEC73AC74F48F66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.5bfd45f944339eaae1729e929b84fed2

Unsigned APK 2 IoCs

Checks for missing APK codesign signature.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.5bfd45f944339eaae1729e929b84fed2
unpack001/FZ200DL

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.5bfd45f944339eaae1729e929b84fed2

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.5bfd45f944339eaae1729e929b84fed2

.apk 1.4MB
FZ200DL

.apk 99KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.5bfd45f944339eaae1729e929b84fed2

SHA256 8aab64dc047c14f376fbc0da014ef4c62d5ea24a3d6e12136c17ed4ab490f64a
MD5 5bfd45f944339eaae1729e929b84fed2
SHA1 2851775e763780aae95600bc328e7ca99e447b55
SHA512 45657eb4f89f44e2f992827f1c575f44f91ea52a84740472feac9c0ae9af5ea6356d89e45c82d0e8cc46575892dc6630936f8fb1d170da695e2addbfc8702407
SSDEEP 24576:5J225SzQhCmcuUV2/X3oC5xq+iqCk/AZ/yTiUiIAKsj4eunaBN/ZNblDsy19:5JzSzQkQSUxfQWIyTDfv+4eun2N/ZdlX
TLSH
T1B1652301ABD94C5CF1B36E357931219668B1ADE45A40E38B2E61F09CEC73AC74F48F66
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Unsigned APK

Checks for missing APK codesign signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

749168eaaaabc8b4631529a40d6720f76910ff95

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Unknown,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

Chains

Jan 1, 0001

FZ200DL

SHA256 273a7d353d03e6b9ce0ae360f6ad88e7633e99f772fc7e99e7e3e6e77a4c5089
MD5 afef395e8e85b9f61120d701c38a964e
SHA1 b56c1cab547260a926afa2862d24ae86be239c64
SHA512 c6ae263bdf08cf647363421c4f8fb4acfc8a476bc7b8b53e5712e8fddf5ca99729fcd5a6b16930d39831d819e7edad9bad483fb0cb5b2f8354580c68881e53a6
SSDEEP 3072:O/B4zeG2wfnmGHcA9k3vJVrek9mW7cjdfsHxQJx:2SSG2wfnmGQxok0ccmH4
TLSH
T1DAA31260BE6A7994F12946F70E4446AA99C0CD33F8791DE92139D087EDDB24AF713C8C
MD5 SHA1 SHA512 SSDEEP TLSH

android

Unsigned APK

Checks for missing APK codesign signature.

com.door.pay.sdk

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.5bfd45f944339eaae1729e929b84fed2

File Signature issue

FZ200DL

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService

Sharing

Errors

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.5bfd45f944339eaae1729e929b84fed2

File Signature issue

FZ200DL

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService