jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]pf[.]99a09f6b6448df282b282c76c6a614d3

Reason

error processing APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.99a09f6b6448df282b282c76c6a614d3
Size 1.4MB
Sample261012-3el4vsfb85
SHA256 675dd5d36e2657ef6601d077b3d3c82fb749e67e48f6f9f1607800373bfaffce
MD5 99a09f6b6448df282b282c76c6a614d3
SHA1 5ee30acc1477fff92446c1b38082edf271576358
SHA512 ad3c2c4795f94e0a79b730dfe8504991e1ca02894f48a9f1090de8c14b8494ab83a79e3ab0d92253edc6019ee80d1373e6b7af3a205ee68cf9ebd4b8922bdaa3
SSDEEP 24576:dJ225Sz7hCmcuUV2/X3oC5xq+iqCk/AZ/yTiUiIAKsj3eunaBN/ZNblDsyDs:dJzSz7kQSUxfQWIyTDfv+3eun2N/ZdlY
TLSH
T1E8652301EBC94D5CF1B36A397A31209664B1ADE45A40A78B2D61F09CEC739C78F48F66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.99a09f6b6448df282b282c76c6a614d3

Unsigned APK 2 IoCs

Checks for missing APK codesign signature.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.99a09f6b6448df282b282c76c6a614d3
unpack001/FZ200DL

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.99a09f6b6448df282b282c76c6a614d3

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.99a09f6b6448df282b282c76c6a614d3

.apk 1.4MB
FZ200DL

.apk 99KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.99a09f6b6448df282b282c76c6a614d3

SHA256 675dd5d36e2657ef6601d077b3d3c82fb749e67e48f6f9f1607800373bfaffce
MD5 99a09f6b6448df282b282c76c6a614d3
SHA1 5ee30acc1477fff92446c1b38082edf271576358
SHA512 ad3c2c4795f94e0a79b730dfe8504991e1ca02894f48a9f1090de8c14b8494ab83a79e3ab0d92253edc6019ee80d1373e6b7af3a205ee68cf9ebd4b8922bdaa3
SSDEEP 24576:dJ225Sz7hCmcuUV2/X3oC5xq+iqCk/AZ/yTiUiIAKsj3eunaBN/ZNblDsyDs:dJzSz7kQSUxfQWIyTDfv+3eun2N/ZdlY
TLSH
T1E8652301EBC94D5CF1B36A397A31209664B1ADE45A40A78B2D61F09CEC739C78F48F66
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Unsigned APK

Checks for missing APK codesign signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

0db84b475ef427da66b4e67172ec7c62164ff036

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Unknown,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

Chains

Jan 1, 0001

FZ200DL

SHA256 273a7d353d03e6b9ce0ae360f6ad88e7633e99f772fc7e99e7e3e6e77a4c5089
MD5 afef395e8e85b9f61120d701c38a964e
SHA1 b56c1cab547260a926afa2862d24ae86be239c64
SHA512 c6ae263bdf08cf647363421c4f8fb4acfc8a476bc7b8b53e5712e8fddf5ca99729fcd5a6b16930d39831d819e7edad9bad483fb0cb5b2f8354580c68881e53a6
SSDEEP 3072:O/B4zeG2wfnmGHcA9k3vJVrek9mW7cjdfsHxQJx:2SSG2wfnmGQxok0ccmH4
TLSH
T1DAA31260BE6A7994F12946F70E4446AA99C0CD33F8791DE92139D087EDDB24AF713C8C
MD5 SHA1 SHA512 SSDEEP TLSH

android

Unsigned APK

Checks for missing APK codesign signature.

com.door.pay.sdk

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.99a09f6b6448df282b282c76c6a614d3

File Signature issue

FZ200DL

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService

Sharing

Errors

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.99a09f6b6448df282b282c76c6a614d3

File Signature issue

FZ200DL

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService