jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]pf[.]95ac69d7161e009e1d71eabc2c242280

Reason

error processing APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.95ac69d7161e009e1d71eabc2c242280
Size 1.7MB
Sample261012-3decmaswdx
SHA256 85d7f7e11a2ae719a99af3d3f61ade16f8fb2c80249dfe3b81b6688550bf3217
MD5 95ac69d7161e009e1d71eabc2c242280
SHA1 ae5b9101233d8b4439f24918774804a19e579c5f
SHA512 1531326cdb0555b53e53ee6e2a198a0d47ad09aac2e61c72944af54164b7340d971929b84cfad0b82fcd20409bb7ec3cf36af76262682aaa65497b03524b85ef
SSDEEP 49152:rk2mZfbHW8Zt0+GZiQ1yTDXZeun2N/xg3w3x/qe4z:w5fdGiQ1yTjvn2x/9i
TLSH
T12A853382F3425EE1DE86D976993449BF13B01D5C3D88A29B0C1A7794DD7DF820B8CA6C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.95ac69d7161e009e1d71eabc2c242280

Unsigned APK 2 IoCs

Checks for missing APK codesign signature.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.95ac69d7161e009e1d71eabc2c242280
unpack001/dERlZG

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.95ac69d7161e009e1d71eabc2c242280

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.95ac69d7161e009e1d71eabc2c242280

.apk 1.7MB
dERlZG

.apk 98KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.95ac69d7161e009e1d71eabc2c242280

SHA256 85d7f7e11a2ae719a99af3d3f61ade16f8fb2c80249dfe3b81b6688550bf3217
MD5 95ac69d7161e009e1d71eabc2c242280
SHA1 ae5b9101233d8b4439f24918774804a19e579c5f
SHA512 1531326cdb0555b53e53ee6e2a198a0d47ad09aac2e61c72944af54164b7340d971929b84cfad0b82fcd20409bb7ec3cf36af76262682aaa65497b03524b85ef
SSDEEP 49152:rk2mZfbHW8Zt0+GZiQ1yTDXZeun2N/xg3w3x/qe4z:w5fdGiQ1yTjvn2x/9i
TLSH
T12A853382F3425EE1DE86D976993449BF13B01D5C3D88A29B0C1A7794DD7DF820B8CA6C
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Unsigned APK

Checks for missing APK codesign signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

761e03f693685be26d1facb7396be314f1a38714

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Unknown,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

Chains

Jan 1, 0001

dERlZG

SHA256 70059ae56f8f2a613be7aec1c17ef1f1518922ebbab9f3852918cd44f20956b5
MD5 d109ad66893b0de714cedfdb9f4a8dbb
SHA1 cac2b8bb7473138104de29ab87d7c3cdda2a45d2
SHA512 fdedabece69784dcdaf0af44ccc77ebc983a6e4def5cca4f6a6c4b4618427a2967c70c27906ce4117b265ae672f69d4630e88f0bf3275851c7e13b1cf4ba1fd6
SSDEEP 3072:AjHAv7dAeoBQS5clmB2x9VVFZAkGwZue1mTf:+HAGeIQSEFzVEkGwZuumD
TLSH
T114A3129813591984EE7274B8BB15AF2CE163428CDCD0326F0FD5B1B48EB4E8D671E80E
MD5 SHA1 SHA512 SSDEEP TLSH

android

Unsigned APK

Checks for missing APK codesign signature.

com.door.pay.sdk

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.95ac69d7161e009e1d71eabc2c242280

File Signature issue

dERlZG

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService

Sharing

Errors

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.95ac69d7161e009e1d71eabc2c242280

File Signature issue

dERlZG

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService