jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]pf[.]76658f4711ba72a878de9b3b1c82f594

Reason

error processing APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.76658f4711ba72a878de9b3b1c82f594
Size 1.4MB
Sample261012-285bvsbz7k
SHA256 c9afa2e1ccdc6e270d16de6f3dafd7de7c2c56f468fea462ad67d54189e0a13e
MD5 76658f4711ba72a878de9b3b1c82f594
SHA1 8446e06681a8243f0db59078a0ee66677fb52d6a
SHA512 4b5b46721d4050d0c5ed99f9a1cadf4c32fb5730295a9c5443edcf890bce24cad88c2a1829c2814631616fb0180f4c9ac7614263db0862083851835950da7196
SSDEEP 24576:TJ225SzvZ/yTiUiIAehCmcuUV2/X3oC5xq+iqCk/usj+eunaBN/ZNblDsy9v:TJzSzVyTDfhkQSUxfQWu++eun2N/Zdlp
TLSH
T1EF652301FBC94D5CF1B36A397A31209264B1ADE45A40A78B2D61F09CEC739C78F48F66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.76658f4711ba72a878de9b3b1c82f594

Unsigned APK 2 IoCs

Checks for missing APK codesign signature.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.76658f4711ba72a878de9b3b1c82f594
unpack001/FZ200DL

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.76658f4711ba72a878de9b3b1c82f594

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.76658f4711ba72a878de9b3b1c82f594

.apk 1.4MB
FZ200DL

.apk 99KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.76658f4711ba72a878de9b3b1c82f594

SHA256 c9afa2e1ccdc6e270d16de6f3dafd7de7c2c56f468fea462ad67d54189e0a13e
MD5 76658f4711ba72a878de9b3b1c82f594
SHA1 8446e06681a8243f0db59078a0ee66677fb52d6a
SHA512 4b5b46721d4050d0c5ed99f9a1cadf4c32fb5730295a9c5443edcf890bce24cad88c2a1829c2814631616fb0180f4c9ac7614263db0862083851835950da7196
SSDEEP 24576:TJ225SzvZ/yTiUiIAehCmcuUV2/X3oC5xq+iqCk/usj+eunaBN/ZNblDsy9v:TJzSzVyTDfhkQSUxfQWu++eun2N/Zdlp
TLSH
T1EF652301FBC94D5CF1B36A397A31209264B1ADE45A40A78B2D61F09CEC739C78F48F66
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Unsigned APK

Checks for missing APK codesign signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

5e0a75342b78d3fd258673436088263ebf5221cd

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Unknown,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

Chains

Jan 1, 0001

FZ200DL

SHA256 273a7d353d03e6b9ce0ae360f6ad88e7633e99f772fc7e99e7e3e6e77a4c5089
MD5 afef395e8e85b9f61120d701c38a964e
SHA1 b56c1cab547260a926afa2862d24ae86be239c64
SHA512 c6ae263bdf08cf647363421c4f8fb4acfc8a476bc7b8b53e5712e8fddf5ca99729fcd5a6b16930d39831d819e7edad9bad483fb0cb5b2f8354580c68881e53a6
SSDEEP 3072:O/B4zeG2wfnmGHcA9k3vJVrek9mW7cjdfsHxQJx:2SSG2wfnmGQxok0ccmH4
TLSH
T1DAA31260BE6A7994F12946F70E4446AA99C0CD33F8791DE92139D087EDDB24AF713C8C
MD5 SHA1 SHA512 SSDEEP TLSH

android

Unsigned APK

Checks for missing APK codesign signature.

com.door.pay.sdk

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.76658f4711ba72a878de9b3b1c82f594

File Signature issue

FZ200DL

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService

Sharing

Errors

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.76658f4711ba72a878de9b3b1c82f594

File Signature issue

FZ200DL

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService