jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]pf[.]8a3c8d2f691025ea8883465dd1e3b4b7

Reason

error processing APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8a3c8d2f691025ea8883465dd1e3b4b7
Size 2.1MB
Sample261012-3bv8csb14j
SHA256 197d6a0c4a5661cef58b47bdce5e4f2b4d08f30bace916a539f4fde61c50eeaa
MD5 8a3c8d2f691025ea8883465dd1e3b4b7
SHA1 ca4dd641f2ec31393800d235f53c0b17712ddc14
SHA512 9a3b6333f40d5e56e7588585cda636fca27ebc628bf1dce0730a40fd8f1569cc6c245c4289be628449eab130b234c8023d9f83b0c63cc4ccb26c13b6bda83528
SSDEEP 49152:qpmBEdD/VyCYZ4w5iNDTn2N/wevn2N/GxYT/I1tnIPnAiH:qM2pzw5GTnyn0Tw1tnI/Aa
TLSH
T1F4A52317EB84A6C4C4B6DF70D6B1C13620B28C70A709B5E70E05F278AA77BC5D779988
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8a3c8d2f691025ea8883465dd1e3b4b7

Unsigned APK 2 IoCs

Checks for missing APK codesign signature.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8a3c8d2f691025ea8883465dd1e3b4b7
unpack001/BDTX140

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8a3c8d2f691025ea8883465dd1e3b4b7

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8a3c8d2f691025ea8883465dd1e3b4b7

.apk 2.1MB
BDTX140

.apk 97KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8a3c8d2f691025ea8883465dd1e3b4b7

SHA256 197d6a0c4a5661cef58b47bdce5e4f2b4d08f30bace916a539f4fde61c50eeaa
MD5 8a3c8d2f691025ea8883465dd1e3b4b7
SHA1 ca4dd641f2ec31393800d235f53c0b17712ddc14
SHA512 9a3b6333f40d5e56e7588585cda636fca27ebc628bf1dce0730a40fd8f1569cc6c245c4289be628449eab130b234c8023d9f83b0c63cc4ccb26c13b6bda83528
SSDEEP 49152:qpmBEdD/VyCYZ4w5iNDTn2N/wevn2N/GxYT/I1tnIPnAiH:qM2pzw5GTnyn0Tw1tnI/Aa
TLSH
T1F4A52317EB84A6C4C4B6DF70D6B1C13620B28C70A709B5E70E05F278AA77BC5D779988
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Unsigned APK

Checks for missing APK codesign signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

c0da579acd6c31a8e161863fcb0ded1fefb8de09

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=nilwvv,OU=qcxyut,O=shvans,L=qm,ST=hf,C=wd

Chains

Jan 1, 0001

BDTX140

SHA256 d5d1be3b6c8c03db2c1b21d1d2c8baa9bcb935e76bf52aef74943fd61e4c00ba
MD5 417458e694c152659fbc53595a68c7e7
SHA1 6c03360971aa291eca4ee32e7ab92c31bdfa850b
SHA512 f953131e4722c1d518b6aa535eb1f955e4a65912148502f3728e27d7eaf41feb92b854fee8527d3d603f06b673bbc90a3e1dac48f2f2ef188acb4b990439e1fd
SSDEEP 1536:JTcXO2SqdvlWJfWmRuh5XH20enZk+99iDntPjzIga8tBiJon+jFsiaxNbltULYaZ:cdgWmUh5XH2/nn2tn+jF67bkY0
TLSH
T1E6A302479BF6C608C1B7903BDAFA250FA5B1F915078E3F960C4F96B1BBD9E906144C21
MD5 SHA1 SHA512 SSDEEP TLSH

android

Unsigned APK

Checks for missing APK codesign signature.

com.door.pay.sdk

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8a3c8d2f691025ea8883465dd1e3b4b7

File Signature issue

BDTX140

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService

Sharing

Errors

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8a3c8d2f691025ea8883465dd1e3b4b7

File Signature issue

BDTX140

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService