jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]pf[.]f58aac7ad098bf577a1a1bb64957032d

Reason

error processing APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f58aac7ad098bf577a1a1bb64957032d
Size 1.7MB
Sample261012-3p82dag19x
SHA256 fc0858298c9fab0258bcbd1155458491fdc33825fccea5af44c97cb990ac4c7a
MD5 f58aac7ad098bf577a1a1bb64957032d
SHA1 5d10373cfb309294aac0ecb7f80ed79120137346
SHA512 824722b5b4cddfb9f322307fd4dbf333622394086c464bd56ab1d643a5ee367c1443f96acf9ef099629db4112d5d72d0cdadca5da6ef6c93cd726c0423fe9a35
SSDEEP 49152:Qk2mZfbHW8Zt0BGZiQ1yTDTeun2N/xg3w3x/qe4B:n5fdFiQ1yTRn2x/9W
TLSH
T168853386F3425ED1DE8AD976983489BF53706D5C3D88A28B0C1977D4DD7CB820B8CA6C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f58aac7ad098bf577a1a1bb64957032d

Unsigned APK 2 IoCs

Checks for missing APK codesign signature.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f58aac7ad098bf577a1a1bb64957032d
unpack001/dERlZG

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f58aac7ad098bf577a1a1bb64957032d

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f58aac7ad098bf577a1a1bb64957032d

.apk 1.7MB
dERlZG

.apk 98KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f58aac7ad098bf577a1a1bb64957032d

SHA256 fc0858298c9fab0258bcbd1155458491fdc33825fccea5af44c97cb990ac4c7a
MD5 f58aac7ad098bf577a1a1bb64957032d
SHA1 5d10373cfb309294aac0ecb7f80ed79120137346
SHA512 824722b5b4cddfb9f322307fd4dbf333622394086c464bd56ab1d643a5ee367c1443f96acf9ef099629db4112d5d72d0cdadca5da6ef6c93cd726c0423fe9a35
SSDEEP 49152:Qk2mZfbHW8Zt0BGZiQ1yTDTeun2N/xg3w3x/qe4B:n5fdFiQ1yTRn2x/9W
TLSH
T168853386F3425ED1DE8AD976983489BF53706D5C3D88A28B0C1977D4DD7CB820B8CA6C
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Unsigned APK

Checks for missing APK codesign signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

6fca13092a21b003976f5bcb13a5d602a65fc37f

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Unknown,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

Chains

Jan 1, 0001

dERlZG

SHA256 70059ae56f8f2a613be7aec1c17ef1f1518922ebbab9f3852918cd44f20956b5
MD5 d109ad66893b0de714cedfdb9f4a8dbb
SHA1 cac2b8bb7473138104de29ab87d7c3cdda2a45d2
SHA512 fdedabece69784dcdaf0af44ccc77ebc983a6e4def5cca4f6a6c4b4618427a2967c70c27906ce4117b265ae672f69d4630e88f0bf3275851c7e13b1cf4ba1fd6
SSDEEP 3072:AjHAv7dAeoBQS5clmB2x9VVFZAkGwZue1mTf:+HAGeIQSEFzVEkGwZuumD
TLSH
T114A3129813591984EE7274B8BB15AF2CE163428CDCD0326F0FD5B1B48EB4E8D671E80E
MD5 SHA1 SHA512 SSDEEP TLSH

android

Unsigned APK

Checks for missing APK codesign signature.

com.door.pay.sdk

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f58aac7ad098bf577a1a1bb64957032d

File Signature issue

dERlZG

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService

Sharing

Errors

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f58aac7ad098bf577a1a1bb64957032d

File Signature issue

dERlZG

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService