jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]pf[.]f0a66c0d5cad7ebe4e9802e4deffee66

Reason

error processing APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0a66c0d5cad7ebe4e9802e4deffee66
Size 1.3MB
Sample261012-3pd61acw2m
SHA256 b797ccbd88d40770492af0501abb6c1cf5086ea30604edb6137cdcea5248953c
MD5 f0a66c0d5cad7ebe4e9802e4deffee66
SHA1 e3d7f3c8a6813e5a461e2a92562f1c524a1e4da0
SHA512 97268ab95aad5c54a6cfb6832215b3a93b96d1a41b4b6fe072947dd861187c7070c00507044ccda8c7757bb0187b49b818d5385420e291ceab56fca2ef153a74
SSDEEP 24576:swJ225SzLcMr2TJhKpvycQ+rIV1xHDK5VpZ/yTiUiIAA0naBN/pTSSyPYRk4ek1M:swJzSzLbvycI8yTDfSn2N/xJ+4y
TLSH
T1FB5533CBAB24268DE1016EF9545801BB35308F92E148FA997F54F08DF87EC678F54C6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0a66c0d5cad7ebe4e9802e4deffee66

Unsigned APK 2 IoCs

Checks for missing APK codesign signature.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0a66c0d5cad7ebe4e9802e4deffee66
unpack001/FZ200DL

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0a66c0d5cad7ebe4e9802e4deffee66

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0a66c0d5cad7ebe4e9802e4deffee66

.apk 1.3MB
FZ200DL

.apk 99KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0a66c0d5cad7ebe4e9802e4deffee66

SHA256 b797ccbd88d40770492af0501abb6c1cf5086ea30604edb6137cdcea5248953c
MD5 f0a66c0d5cad7ebe4e9802e4deffee66
SHA1 e3d7f3c8a6813e5a461e2a92562f1c524a1e4da0
SHA512 97268ab95aad5c54a6cfb6832215b3a93b96d1a41b4b6fe072947dd861187c7070c00507044ccda8c7757bb0187b49b818d5385420e291ceab56fca2ef153a74
SSDEEP 24576:swJ225SzLcMr2TJhKpvycQ+rIV1xHDK5VpZ/yTiUiIAA0naBN/pTSSyPYRk4ek1M:swJzSzLbvycI8yTDfSn2N/xJ+4y
TLSH
T1FB5533CBAB24268DE1016EF9545801BB35308F92E148FA997F54F08DF87EC678F54C6A
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Unsigned APK

Checks for missing APK codesign signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

1e7e0a27e3ddfc819dbd362a657cc93e22c3853e

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Unknown,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

Chains

Jan 1, 0001

FZ200DL

SHA256 273a7d353d03e6b9ce0ae360f6ad88e7633e99f772fc7e99e7e3e6e77a4c5089
MD5 afef395e8e85b9f61120d701c38a964e
SHA1 b56c1cab547260a926afa2862d24ae86be239c64
SHA512 c6ae263bdf08cf647363421c4f8fb4acfc8a476bc7b8b53e5712e8fddf5ca99729fcd5a6b16930d39831d819e7edad9bad483fb0cb5b2f8354580c68881e53a6
SSDEEP 3072:O/B4zeG2wfnmGHcA9k3vJVrek9mW7cjdfsHxQJx:2SSG2wfnmGQxok0ccmH4
TLSH
T1DAA31260BE6A7994F12946F70E4446AA99C0CD33F8791DE92139D087EDDB24AF713C8C
MD5 SHA1 SHA512 SSDEEP TLSH

android

Unsigned APK

Checks for missing APK codesign signature.

com.door.pay.sdk

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0a66c0d5cad7ebe4e9802e4deffee66

File Signature issue

FZ200DL

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService

Sharing

Errors

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0a66c0d5cad7ebe4e9802e4deffee66

File Signature issue

FZ200DL

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService