jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]pf[.]a88b7504cb74e69bcfda44a8141bf3e8

Reason

error processing APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.a88b7504cb74e69bcfda44a8141bf3e8
Size 1.7MB
Sample261012-3f1cwasxcv
SHA256 aa8a904d86658646be58b87fec43aece26e7e4012ec9a4f2d2d44dd71712fb54
MD5 a88b7504cb74e69bcfda44a8141bf3e8
SHA1 b380f156c1377a101e61c91182fd15f8c526c430
SHA512 1627fe88dd39b4ba0a2f9b2fbb5583042c0278f9f2eb7dc149f71f83c2912f8fd1658aa61c0fd888b5e65e11eeaccd17403c0c66aa854ddacb97049c67ab50d7
SSDEEP 49152:lGZiQ1yTDmk2mZfbHW8Zt0Neun2N/xg3w3x/qe4l:IiQ1yTR5fdkn2x/9O
TLSH
T1D6853382F3826ED1DE8AD976993449BF53705D5C3D88B28B0C197794DD7CB830B8CA68
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.a88b7504cb74e69bcfda44a8141bf3e8

Unsigned APK 2 IoCs

Checks for missing APK codesign signature.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.a88b7504cb74e69bcfda44a8141bf3e8
unpack001/dERlZG

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.a88b7504cb74e69bcfda44a8141bf3e8

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.a88b7504cb74e69bcfda44a8141bf3e8

.apk 1.7MB
dERlZG

.apk 98KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.a88b7504cb74e69bcfda44a8141bf3e8

SHA256 aa8a904d86658646be58b87fec43aece26e7e4012ec9a4f2d2d44dd71712fb54
MD5 a88b7504cb74e69bcfda44a8141bf3e8
SHA1 b380f156c1377a101e61c91182fd15f8c526c430
SHA512 1627fe88dd39b4ba0a2f9b2fbb5583042c0278f9f2eb7dc149f71f83c2912f8fd1658aa61c0fd888b5e65e11eeaccd17403c0c66aa854ddacb97049c67ab50d7
SSDEEP 49152:lGZiQ1yTDmk2mZfbHW8Zt0Neun2N/xg3w3x/qe4l:IiQ1yTR5fdkn2x/9O
TLSH
T1D6853382F3826ED1DE8AD976993449BF53705D5C3D88B28B0C197794DD7CB830B8CA68
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Unsigned APK

Checks for missing APK codesign signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b166a76083628a2ab0478aa388bc16213e5e6a86

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Unknown,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

Chains

Jan 1, 0001

dERlZG

SHA256 70059ae56f8f2a613be7aec1c17ef1f1518922ebbab9f3852918cd44f20956b5
MD5 d109ad66893b0de714cedfdb9f4a8dbb
SHA1 cac2b8bb7473138104de29ab87d7c3cdda2a45d2
SHA512 fdedabece69784dcdaf0af44ccc77ebc983a6e4def5cca4f6a6c4b4618427a2967c70c27906ce4117b265ae672f69d4630e88f0bf3275851c7e13b1cf4ba1fd6
SSDEEP 3072:AjHAv7dAeoBQS5clmB2x9VVFZAkGwZue1mTf:+HAGeIQSEFzVEkGwZuumD
TLSH
T114A3129813591984EE7274B8BB15AF2CE163428CDCD0326F0FD5B1B48EB4E8D671E80E
MD5 SHA1 SHA512 SSDEEP TLSH

android

Unsigned APK

Checks for missing APK codesign signature.

com.door.pay.sdk

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.a88b7504cb74e69bcfda44a8141bf3e8

File Signature issue

dERlZG

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService

Sharing

Errors

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.a88b7504cb74e69bcfda44a8141bf3e8

File Signature issue

dERlZG

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService