18.apk 0% Antivirus software(0/32) found malware! - VirSCAN.org - Free Multi-Engine Online Virus Scanner v1.02, Supports 47 AntiVirus Engines!

Main Menu

API

uploader for windows(test)

Powered By

File information

File Name :18.apk (File not down)

File Size :128931 byte

File Type :Zip archive data

MD5:522fee5564493717e1e3504ee0b81613

SHA1:b7c94b3ace5fa635f0de161eb8b3e6a04a0edaf2

SHA256:12f6f60d8be60ce8308dd6eef2a180abfc37ad45ab2da2aca4574e8299ff809b

SSDEEP:3072:5e+rHHNUDOvp3jUmCcEWMIm1OSBrBbiLLruFz3ejAFKpc/:5e4NUDmThEWMLbrBboKLekFwc/

扫描结果
权限
文件行为分析

Scanner results

Scanner results:0%Antivirus software(0/32)found malware!

Behavior analysis report: Habo file analysis

Time: 2015-10-16 14:43:09 (CST)

Scanner	Engine Ver	Sig Ver	Sig Date	Scan result	Time
antiy	AVL SDK 3.0		1970-01-01	Found nothing	5
asquared	9.0.0.4324	9.0.0.4324	2014-07-03	Found nothing	1
avast	150725-1	4.7.4	2015-07-25	Found nothing	0
avg	2109/8133	10.0.1405	2014-11-26	Found nothing	0
baidu	2.0.1.0	4.1.3.52192	2.0.1.0	Found nothing	5
baidusd	1.0	1.0	2014-04-02	Found nothing	1
bitdefender	7.58469	7.90123	2014-12-25	Found nothing	0
clamav	19861	0.97.5	2014-12-31	Found nothing	0
drweb	5.0.2.3300	5.0.1.1	2014-12-31	Found nothing	0
fortinet	23.345, 23.345	5.1.158	2014-12-08	Found nothing	0
fprot	4.6.2.117	6.5.1.5418	2014-12-31	Found nothing	0
fsecure	2014-04-02-01	9.13	2014-04-02	Found nothing	0
gdata	25.3894	25.3894	2015-10-16	Found nothing	9
ikarus	1.06.01	V1.32.31.0	2014-12-08	Found nothing	0
jiangmin	16.0.100	1.0.0.0	2015-07-25	Found nothing	60
kaspersky	5.5.33	5.5.33	2014-04-01	Found nothing	0
kingsoft	2.1	2.1	2013-09-22	Found nothing	4
mcafee	7638	5400.1158	2014-11-30	Found nothing	0
nod32	0920	3.0.21	2014-12-23	Found nothing	0
panda	9.05.01	9.05.01	2015-07-26	Found nothing	4
pcc	11.380.07	9.500-1005	2014-12-31	Found nothing	0
qh360	1.0.1	1.0.1	1.0.1	Found nothing	2
qqphone	1.0.0.0	1.0.0.0	2014-12-09	Found nothing	0
quickheal	14.00	14.00	2015-07-25	Found nothing	2
rising	25.76.04.01	25.76.04.01	2015-07-24	Found nothing	1
sophos	5.08	3.55.0	2014-12-01	Found nothing	0
symantec	20141230.001	1.3.0.24	2014-12-30	Found nothing	0
tachyon	9.9.9	9.9.9	2013-12-27	Found nothing	4
thehacker	6.8.0.5	6.8.0.5	2015-07-23	Found nothing	2
tws	17.47.17308	1.0.2.2108	2014-12-08	Found nothing	7
vba	3.12.26.3	3.12.26.3	2014-12-31	Found nothing	0
virusbuster	15.0.985.0	5.5.2.13	2014-12-05	Found nothing	0

■Heuristic/Suspicious ■Exact

NOTICE: Results are not 100% accurate and can be reported as a false positive by some scannerswhen and if malware is found. Please judge these results for yourself.

Last Scanned File List

File Name (File Size)	Scan results (Suspicious degree)
00Scan_OST_File7.4(425462 )	Found Trojan[Downloader]/MSOffice.Agent (6%)
00ScanMyReg注册表清理优化工具注册版V3.0中文绿色版(1123472 )	Found GrayWare/Autoit.ShellCode.a (8%)
00ScanMyReg2.214(420713 )	Found DeepScan:Generic.Mira.CF26E316 (22%)
00S***ePictureAs10.6(256521 )	Found Trojan.Ransom.GandCrab.Gen.2 (30%)
00Satellite_TV_for_PC_Titanium_Edition2014.11(7394342 )	Found a.gray.Nebula.a (2%)
a.exe(73802 )	Found Trojan.Swrort.A (52%)
00Safelock1.4.2(1719296 )	Found GrayWare/Win32.Presenoker (10%)
00Safe_XP1.5.7.14(319501 )	Found Gen:Variant.Ransom.GandCrab.1524 (28%)
00SafeITDocument免费版(706820 )	Found Gen:Variant.Razy.44344 (34%)
00Safari_Password_Decryptor3.0(6515 )	Found nothing
00SYSGeeker_AnyWinGo4.7.2_官方版(152343 )	Found Gen:Trojan.Heur.VP2.ki3fauXX8kfi (24%)
00SYBASE数据库恢复软件1.0.1(1265930 )	Found RiskWare[RiskTool]/Win32.BitMiner (12%)
00SX-Helper2.0(29038 )	Found nothing
hid.dll(466944 )	Found Malware.Heuristic (6%)
00SWiJ_SideWinder2.4.1(3848044 )	Found Android/Trojan.Generic.HjIASOkA (2%)
00SWF_To_Video_SDK2.00.792(248982 )	Found Trojan/Win32.Mansabo (12%)
00SVPtube1.2.5(479741 )	Found DeepScan:Generic.Mira.CF26E316 (24%)
00SUMo2.0.0.49_Beta(214718 )	Found JS:Autolike-Q (24%)
MainFile-v13.6.9.exe(1773323 )	Found Trojan.Generic.amval (6%)
MyChrome.exe(1212416 )	Found nothing

权限列表
许可名称	信息
android.permission.INTERNET	连接网络（2G或3G）
android.permission.WRITE_SETTINGS	读写系统设置项
android.permission.READ_PHONE_STATE	读取电话状态
android.permission.ACCESS_NETWORK_STATE	读取网络状态（2G或3G）
android.permission.ACCESS_COARSE_LOCATION	获取粗略的位置（通过wifi、基站）
android.permission.ACCESS_WIFI_STATE	读取wifi网络状态
android.permission.WRITE_EXTERNAL_STORAGE	写外部存储器（如：SD卡）

文件信息

安全评分 :

基本信息
MD5:522fee5564493717e1e3504ee0b81613
包名:andke.net.rebooter
最低运行环境:Android 2.1.x
版权:Gker.net

关键行为
行为描述:	写权限映射文件
详情信息:	CiceroSharedMemDefaultS-*
行为描述:	设置特殊文件夹属性
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
	C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
	C:\Documents and Settings\Administrator\Local Settings\History
	C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
	C:\Documents and Settings\Administrator\Cookies

进程行为
行为描述:	枚举进程
详情信息:	N/A

文件行为
行为描述:	写权限映射文件
详情信息:	CiceroSharedMemDefaultS-*
行为描述:	设置特殊文件夹属性
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
	C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
	C:\Documents and Settings\Administrator\Local Settings\History
	C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
	C:\Documents and Settings\Administrator\Cookies
行为描述:	查找文件
详情信息:	FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\%temp%\QQWry.dat
	FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\%temp%\CoralWry.dat

网络行为
行为描述:	连接指定站点
详情信息:	InternetConnectA: ServerName = pv.sohu.com, PORT = 80
行为描述:	读取网络文件
详情信息:	hFile = 0x00000674, BytesToRead =2048, BytesRead = 2048.
行为描述:	打开HTTP请求
详情信息:	HttpOpenRequestA: pv.sohu.com:80/cityjson?ie=gb2312, hConnect = 0x00000670

其他行为
行为描述:	创建互斥体
详情信息:	CTF.LBES.MutexDefaultS-*
	CTF.Compart.MutexDefaultS-*
	CTF.Asm.MutexDefaultS-*
	CTF.Layouts.MutexDefaultS-*
	CTF.TMD.MutexDefaultS-*
	CTF.TimListCache.FMPDefaultS-MUTEX.DefaultS-
行为描述:	获取TickCount值
详情信息:	TickCount = 485921, SleepMilliseconds = 250.
	TickCount = 485937, SleepMilliseconds = 250.
	TickCount = 485953, SleepMilliseconds = 250.

动态列表行为
行为描述:	调用哈希算法
详情信息:	MD5
行为描述:	读取文件
详情信息:	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:68
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:59
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:68
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:68
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:68
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:61
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:59
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:61
	path:/data/app/andke.net.rebooter-1.apk length:68
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:62
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:62
	path:/data/app/andke.net.rebooter-1.apk length:62
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:62
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:62
	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:60
	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:62
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:62
	path:/data/app/andke.net.rebooter-1.apk length:68
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:58
	path:/data/app/andke.net.rebooter-1.apk length:68
	path:/data/app/andke.net.rebooter-1.apk length:68
	path:/data/app/andke.net.rebooter-1.apk length:61
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:62
	path:/data/app/andke.net.rebooter-1.apk length:66
	path:/data/app/andke.net.rebooter-1.apk length:62
	path:/data/app/andke.net.rebooter-1.apk length:64
	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:62
	path:/data/app/andke.net.rebooter-1.apk length:63
	path:/data/app/andke.net.rebooter-1.apk length:61
	path:/data/app/andke.net.rebooter-1.apk length:67
	path:/data/app/andke.net.rebooter-1.apk length:61
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:65
	path:/data/app/andke.net.rebooter-1.apk length:68
	path:/data/app/andke.net.rebooter-1.apk length:68
	path:/data/app/andke.net.rebooter-1.apk length:69
	path:/data/app/andke.net.rebooter-1.apk length:5
行为描述:	读取系统设置
详情信息:	[u'android.app.ContextImpl$ApplicationContentResolver@41544c28', u'airplane_mode_on']
行为描述:	窗口信息
详情信息:	{"text": "Rebooter v1.5", "class": "android.widget.TextView"}
	{"text": "Shutdown", "class": "android.widget.Button"}
	{"text": "Reboot", "class": "android.widget.Button"}
	{"text": "Turn on AirPlane", "class": "android.widget.Button"}
	{"text": "Reboot Recovery", "class": "android.widget.Button"}
	{"text": "Reboot Bootloader", "class": "android.widget.Button"}
	{"text": "Exit", "class": "android.widget.Button"}
	{"text": "by Andke.net, press menu for more", "class": "android.widget.TextView"}
行为描述:	添加View
详情信息:	[u'com.android.internal.policy.impl.PhoneWindow$DecorView@41545e40', u'WM.LayoutParams{(0,0)(wrapxwrap) sim=#120 ty=1 fl=#1800002 pfl=0x8 fmt=-3 wanim=0x1030002}', u'android.view.CompatibilityInfoHolder@414b86a8']
行为描述:	初始化Intent
详情信息:	[u'android.os.Parcel@414b5fd8']
行为描述:	获取网络状态信息[*]
详情信息:	NetworkInfo: type: WIFI[], state: CONNECTED/CONNECTED, reason: (unspecified), extra: freewifi, roaming: false, failover: false, isAvailable: true
行为描述:	获取设备ID
详情信息:	357143040944263

Activities
活动名	类型
.Rebooter	android.intent.action.MAIN
.Rebooter	android.intent.category.LAUNCHER

危险函数
函数名称	信息
getRuntime	获取命令行环境
java/lang/Runtime;->exec	执行字符串命令
java/net/URL;->openConnection	连接URL
java/net/HttpURLConnection;->connect	连接URL
android/app/NotificationManager;->notify	信息通知栏
HttpClient;->execute	请求远程服务器
TelephonyManager;->getDeviceId	搜集用户手机IMEI码、电话号码、系统版本号等信息
TelephonyManager;->getSimSerialNumber	获取SIM序列号
TelephonyManager;->getLine1Number	获取手机号
LocationManager;->getLastKnownLocation	获取地址位置

启动方式
名称	信息
andke.net.rec.AndkeReceiver	应用安装时启动服务
andke.net.rec.AndkeReceiver	应用卸载时启动服务
andke.net.rec.AndkeReceiver	网络连接改变时启动服务
andke.net.rec.AndkeReceiver	屏幕解锁启动服务

权限列表
许可名称	信息
android.permission.INTERNET	连接网络（2G或3G）
android.permission.WRITE_SETTINGS	读写系统设置项
android.permission.READ_PHONE_STATE	读取电话状态
android.permission.ACCESS_NETWORK_STATE	读取网络状态（2G或3G）
android.permission.ACCESS_COARSE_LOCATION	获取粗略的位置（通过wifi、基站）
android.permission.ACCESS_WIFI_STATE	读取wifi网络状态
android.permission.WRITE_EXTERNAL_STORAGE	写外部存储器（如：SD卡）

服务列表
名称
andke.net.rec.AndkeService

文件列表
文件名	校验码
res/drawable/btn_close_focused.png	0x55a3c801
res/drawable/btn_close_normal.png	0x7e06a708
res/drawable/btn_close_pressed.png	0xc3803d4a
res/drawable/btn_close_selector.xml	0x6d5120d2
res/drawable/btn_focused.png	0x3df7d95e
res/drawable/btn_normal.png	0x81951534
res/drawable/btn_pressed.png	0x3a01ed28
res/drawable/btn_selector.xml	0xff7d4d7e
res/drawable/icon.png	0xd51308ac
res/drawable/icon_dialog.png	0x940babcb
res/drawable/icon_setting.png	0x33e0ac7c
res/drawable/umeng_update_button_cancel_bg_focused.xml	0xec2fe409
res/drawable/umeng_update_button_cancel_bg_normal.xml	0xec7f7152
res/drawable/umeng_update_button_cancel_bg_selector.xml	0x4441cfe5
res/drawable/umeng_update_button_cancel_bg_tap.xml	0x74f2500
res/drawable/umeng_update_button_ok_bg_focused.xml	0x3f32fe76
res/drawable/umeng_update_button_ok_bg_normal.xml	0x88fce1f9
res/drawable/umeng_update_button_ok_bg_selector.xml	0xbca05f08
res/drawable/umeng_update_button_ok_bg_tap.xml	0x1f7e756e
res/drawable/umeng_update_dialog_bg.xml	0x565551a3
res/layout/main.xml	0xe436f0af
res/layout/umeng_update_dialog.xml	0xffbf448b
res/menu/menu.xml	0x659e5f7f
res/raw/rebooter	0x5c6d853f
res/xml/preferences.xml	0x71735101
AndroidManifest.xml	0xb8a8e1a0
resources.arsc	0x62365dbf
classes.dex	0x474c57dc
META-INF/MANIFEST.MF	0xb21190d3
META-INF/CERT.SF	0x19074915
META-INF/CERT.RSA	0xec33288d

运行截图

File information

上传文件