{% block content %}

Static Analysis - {{name}}


FILE INFORMATION


Name: {{ name }}

Size : {{ size }}

MD5: {{ md5 }}

SHA1: {{ sha1 }}

SHA256: {{ sha256 }}


APP INFORMATION


Package Name: {{ packagename }}

Main Activity: {{ mainactivity }}

Target SDK: {{ targetsdk }}

Min SDK: {{ minsdk }}

Max SDK: {{ maxsdk }}

Android Version Name: {{ androvername }}

Android Version Code: {{ androver }}


CERTIFICATE


                              {{ certinfo | safe}}

{% if issued == "good" %} 
Certicate Status: Good
{% elif issued == "bad" %}
Certicate Status: Bad
Description:App Signed by 'Android Debug' Certificate.
Production ready applications should not be signed with 'Android Debug' Certificate.
{% elif issued == "missing" %}
Certicate Status: Certificate not found
{% elif issued == "bad hash" and sha256Digest is True %}
Certicate Status: Warning
Description:The app is signed with `SHA1withRSA`. SHA1 hash algorithm is known to have collision issues.
Note:The manifest indicates `SHA256withRSA` is in use. Be sure to manually confirm this issue.
{% elif issued == "bad hash" %}
Certicate Status: Bad
Description:The app is signed with `SHA1withRSA`. SHA1 hash algorithm is known to have collision issues.
{% endif %}
                            

PERMISSIONS


{% for perm,desc in permissions.items %} {% endfor %}
PERMISSION INFO DESCRIPTION
{{ perm }} ({{ desc.0 }}) {{ desc.1 }} {{ desc.2 }}

ANDROID LIBRARY BINARY ANALYSIS


{% for item in binary_analysis %} {% endfor %}
ISSUE SEVERITY DESCRIPTION FILES
{{item|key:"title" | safe}} {% if item|key:"stat" == "high" %} high {% elif item|key:"stat" == "info" %} info {% elif item|key:"stat" == "medium" %} medium {% endif %} {{item|key:"desc"}} {{item|key:"file"}}

{% if VT_RESULT %}

VirusTotal Report


{{ VT_RESULT.positives }} / {{ VT_RESULT.total }}  AVs found this file Malicious!

{% if VT_RESULT.positives %}
{% for av_name,av_result in VT_RESULT.scans.items %} {% if av_result.detected == True %} {% endif %} {% endfor %}
AV Detection
{{ av_name }} {{ av_result.result }}
{% endif %}
{% endif %}

DEX MALWARE ANALYSIS


{% if apkid|key:"apkid_version" %} {% else %}

APKiD not enabled.

{% endif %}
ANTI-VM COMPILER OBFUSCATOR PACKER DROPPER MANIPULATOR ANTI-ASSEMBLY ABNORMAL PATTERN
{% if apkid|key:"anti_vm" == "" %} No Anti-VM Code {% else %} Anti-VM Code Found
{% for cmp in apkid|key:"anti_vm" %} {{cmp}}
{% endfor %} {% endif %}
{% if apkid|key:"compiler" == "" %} Cannot Identify Compiler {% else %} Compiler Found
{% for cmp in apkid|key:"compiler" %} {{cmp}}
{% endfor %} {% endif %}
{% if apkid|key:"obfuscator" == "" %} No Obfuscator Found {% else %} Obfuscator Found
{% for cmp in apkid|key:"obfuscator" %} {{cmp}}
{% endfor %} {% endif %}
{% if apkid|key:"packer" == "" %} No Packer Found {% else %} Packer Found
{% for cmp in apkid|key:"packer" %} {{cmp}}
{% endfor %} {% endif %}
{% if apkid|key:"dropper" == "" %} No Dropper Found {% else %} Dropper Found
{% for cmp in apkid|key:"dropper" %} {{cmp}}
{% endfor %} {% endif %}
{% if apkid|key:"manipulator" == "" %} No Manipulator Found {% else %} Manipulator Found
{% for cmp in apkid|key:"manipulator" %} {{cmp}}
{% endfor %} {% endif %}
{% if apkid|key:"anti_disassembly" == "" %} No Anti-Disassembly Code {% else %} Anti-Disassembly Code Found
{% for cmp in apkid|key:"anti_disassembly" %} {{cmp}}
{% endfor %} {% endif %}
{% if apkid|key:"abnormal" == "" %} No Abnormal Pattern Found {% else %} Abnormal Pattern Found
{% for cmp in apkid|key:"abnormal" %} {{cmp}}
{% endfor %} {% endif %}
{% if apkid|key:"apkid_version" %} APKiD: {{ apkid|key:"apkid_version" }} {% endif %}

BROWSABLE ACTIVITIES


{% for activity,intent_details in browsable_activities.items %}
ACTIVITY INTENT
{{activity}} {% if intent_details|key:"schemes" %} Schemes: {% for scheme in intent_details|key:"schemes" %} {{scheme}}, {% endfor %}
{% endif %} {% if intent_details|key:"hosts" %} Hosts: {% for host in intent_details|key:"hosts" %} {{host}}, {% endfor %}
{% endif %} {% if intent_details|key:"ports" %} Ports: {% for port in intent_details|key:"ports" %} {{port}}, {% endfor %}
{% endif %} {% if intent_details|key:"mime_types" %} Mime Types: {% for mime in intent_details|key:"mime_types" %} {{mime}}, {% endfor %}
{% endif %} {% if intent_details|key:"paths" %} Paths: {% for path in intent_details|key:"paths" %} {{path}}, {% endfor %}
{% endif %} {% if intent_details|key:"path_prefixs" %} Path Prefixes: {% for prefix in intent_details|key:"path_prefixs" %} {{prefix}}, {% endfor %}
{% endif %} {% if intent_details|key:"path_patterns" %} Path Patterns: {% for pattern in intent_details|key:"path_patterns" %} {{pattern}}, {% endfor %}
{% endif %} {% endfor %}

MANIFEST ANALYSIS


{% for item in manifest %} {% endfor %}
ISSUE SEVERITY DESCRIPTION
{{item|key:"title" | safe}} {% if item|key:"stat" == "high" %} high {% elif item|key:"stat" == "info" %} info {% elif item|key:"stat" == "medium" %} medium {% endif %} {{item|key:"desc"}}

CODE ANALYSIS


{% for issue, details in findings.items %} {% endfor %}
ISSUE SEVERITY FILES
{{ issue }} {% if details|key:"level" == "high" %} high {% elif details|key:"level" == "good" %} secure {% elif details|key:"level" == "warning" %} warning {% elif details|key:"level" == "info" %} info {% endif %} {% for path in details|key:"path" %} {{ path }}
{% endfor %}

ANDROID API


{% for desc, details in api.items %} {% endfor %}
API FILES
{{ desc }} {% for path in details|key:"path" %} {{ path }}
{% endfor %}

URLS


{% if urls %} {% endif %} {% for urldict in urls %} {% endfor %}
URL File
{% for u in urldict|key:"urls" %} {{ u }}
{% endfor %}
{{urldict|key:"path"}}

MALWARE CHECK


{% if urls %} {% endif %} {% for domain, details in domains.items %} {% endfor %}
Domain Status
{{domain}} {% if details|key:"bad" == "yes" %} malware
URL: {{details|key:"domain_or_url"}}
IP: {{details|key:"ip"}}
Description: {{details|key:"desc"}}
{% else %} good
{% endif %}

EMAILS


{% if emails %} {% endif %} {% for email_dict in emails %} {% endfor %}
Email File
{% for u in email_dict|key:"emails" %} {{ e }}
{% endfor %}
{{email_dict|key:"path"}}

FILE ANALYSIS


{{ certz | safe}}
ISSUE FILES

STRINGS


{% for val in strings %} {{ val }}
{% endfor %}


ACTIVITIES


{% for act in activities %} {{ act}}
{% endfor %}


PROVIDERS


{% for prv in providers %} {{ prv}}
{% endfor %}


RECEIVERS


{% for rcv in receivers %} {{ rcv}}
{% endfor %}


SERVICES


{% for srv in services %} {{ srv}}
{% endfor %}


LIBRARIES


{% for lib in libraries %} {{ lib }}
{% endfor %}


FILES


{% for file in files %} {{ file}}
{% endfor %}



Report Generated by - MobSF | http://opensecurity.in

{% endblock %}