Magic-Mirror/androguard
1
0
Fork 0
mirror of https://github.com/androguard/androguard.git synced 2024-11-26 22:40:33 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

FIX? Ignore? multi disk ZIP error

Browse Source 
Unless we have better solution for multi part zip, it would be better ignoring and pretending it is single zip file.
Found that some malwares use this trick to interrupt automated analysis like below sample.
https://www.virustotal.com/gui/file/2b9eb34b2d86e9119ada81f2c641086225c420d3439a3ca22e2a903ce8c2c937
This commit is contained in:
ryu-s-r 2022-12-15 20:44:59 +09:00 committed by GitHub
parent 832104db3e
commit 1f99c46229
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
androguard/core/apk/__init__.py
View File

@ -1721,9 +1721,9 @@ class APK:
# These things should not happen for APKs
if this_disk != 0:
raise BrokenAPKError("Not sure what to do with multi disk ZIP!")
log.warning("Not sure what to do with multi disk ZIP!")
if disk_central != 0:
raise BrokenAPKError("Not sure what to do with multi disk ZIP!")
log.warning("Not sure what to do with multi disk ZIP!")
break
f.seek(-4, io.SEEK_CUR)