Antivirus scan for 2dd8d8b36489229410a490a7728ca0314e09b7e9ee0fe7883ba192d2f27e86c4 at 2016-05-07 16:46:22 UTC

Antivirus	Result	Update
Ad-Aware		20160507
AegisLab		20160507
AhnLab-V3		20160507
Alibaba		20160506
ALYac		20160507
Antiy-AVL		20160507
Arcabit		20160507
Avast		20160507
AVG		20160507
Avira (no cloud)		20160507
AVware		20160507
Baidu		20160506
Baidu-International		20160507
BitDefender		20160507
Bkav		20160506
CAT-QuickHeal		20160507
ClamAV		20160507
CMC		20160506
Comodo		20160507
Cyren		20160507
DrWeb		20160507
Emsisoft		20160503
ESET-NOD32		20160507
F-Prot		20160507
F-Secure		20160507
Fortinet		20160507
GData		20160507
Ikarus		20160507
Jiangmin		20160507
K7AntiVirus		20160507
K7GW		20160507
Kaspersky		20160507
Kingsoft		20160507
Malwarebytes		20160507
McAfee		20160507
McAfee-GW-Edition		20160507
Microsoft		20160507
eScan		20160507
NANO-Antivirus		20160507
nProtect		20160504
Panda		20160507
Qihoo-360		20160507
Rising		20160507
Sophos AV		20160507
SUPERAntiSpyware		20160507
Symantec		20160507
Tencent		20160507
TheHacker		20160505
TotalDefense		20160507
TrendMicro		20160507
TrendMicro-HouseCall		20160507
VBA32		20160505
VIPRE		20160507
ViRobot		20160507
Yandex		20160506
Zillya		20160507
Zoner		20160507

The file being studied is Android related! APK Android file more specifically. The application's main package name is com.skgames.trafficracer. The internal version number of the application is 191. The displayed version string of the application is 1.87. The minimum Android API level for the application to run (MinSDKVersion) is 10. The target Android API level for the application to run (TargetSDKVersion) is 19.

Required permissions

android.permission.ACCESS_WIFI_STATE (view Wi-Fi status)

android.permission.WAKE_LOCK (prevent phone from sleeping)

android.permission.ACCESS_NETWORK_STATE (view network status)

android.permission.INTERNET (full Internet access)

android.permission.WRITE_EXTERNAL_STORAGE (modify/delete SD card contents)

com.android.vending.BILLING (Unknown permission from android reference)

Activities

com.prime31.UnityPlayerProxyActivity

com.prime31.UnityPlayerActivity

com.prime31.UnityPlayerNativeActivity

com.google.android.gms.ads.AdActivity

com.chartboost.sdk.CBDialogActivity

com.chartboost.sdk.CBImpressionActivity

com.prime31.GoogleIABProxyActivity

com.vungle.sdk.VungleAdvert

com.heyzap.sdk.ads.HeyzapInterstitialActivity

com.heyzap.sdk.ads.HeyzapVideoActivity

com.everyplay.Everyplay.view.EveryplaySocialActivity

com.everyplay.Everyplay.view.EveryplayTextInputActivity

com.everyplay.Everyplay.view.videoplayer.EveryplayVideoPlayerActivity

com.everyplay.Everyplay.view.videoplayer.EveryplayVideoEditorActivity

com.everyplay.Everyplay.view.EveryplaySharingModalActivity

com.everyplay.Everyplay.view.browser.EveryplayBrowserActivity

com.everyplay.Everyplay.view.auth.EveryplayAuthActivity

com.everyplay.Everyplay.view.auth.EveryplayAddConnectionActivity

com.everyplay.Everyplay.communication.socialnetworks.EveryplayFacebook

Services

com.vungle.sdk.VungleIntentService

com.everyplay.Everyplay.communication.upload.EveryplayUploadService

Receivers

com.google.ads.InstallReceiver

com.heyzap.sdk.ads.PackageAddedReceiver

Activity-related intent filters

com.prime31.UnityPlayerProxyActivity
actions: android.intent.action.MAIN
categories: android.intent.category.LAUNCHER

Receiver-related intent filters

com.heyzap.sdk.ads.PackageAddedReceiver
actions: android.intent.action.PACKAGE_ADDED

com.google.ads.InstallReceiver
actions: com.android.vending.INSTALL_REFERRER

Application certificate information

Subject
    DN: C:TR, CN:Soner Kara, L:Ankara, O:skgames, ST:Kecioren, OU:skgames
    C: TR
    CN: Soner Kara
    L: Ankara
    O: skgames
    ST: Kecioren
    OU: skgames
validto: 03:04 PM 10/01/2063
serialnumber: 7c976d3c
thumbprint: 29b0bbcfb23d8c5cf8cdd2c21cb0815a1e690423
validfrom: 03:04 PM 10/13/2013
Issuer
    DN: C:TR, CN:Soner Kara, L:Ankara, O:skgames, ST:Kecioren, OU:skgames
    C: TR
    CN: Soner Kara
    L: Ankara
    O: skgames
    ST: Kecioren
    OU: skgames

Interesting strings

http://
http://acceptance.vungle.com
http://ads.heyzap.com
http://ads.heyzap.com/in_game_api/ads
http://ads.heyzap.com/in_game_api/sdk/
http://android.heyzap.com/mobile/track_sdk_event
http://api.vungle.com
http://googleads.g.doubleclick.net
http://hostname/?
http://localhost:3000
http://market.android.com/
http://media.admob.com/mraid/v1/mraid_app_banner.js
http://media.admob.com/mraid/v1/mraid_app_expanded_banner.js
http://media.admob.com/mraid/v1/mraid_app_interstitial.js
http://plus.google.com/
http://schemas.android.com/apk/lib/com.google.android.gms.plus
http://www.google-analytics.com/collect
http://www.google.com
https://
https://api.everyplay.com/
https://everyplay.com
https://everyplay.com/
https://everyplay.com/apiv2/auth/connect
https://everyplay.com/apiv2/auth/oauth/access_token
https://everyplay.com/privacy-policy
https://everyplay.com/terms-of-service
https://live.chartboost.com
https://m.everyplay.com
https://m.everyplay.com/newconnect
https://ssl.google-analytics.com/collect
https://www.chartboost.com
https://www.googleapis.com/auth/appstate
https://www.googleapis.com/auth/drive
https://www.googleapis.com/auth/drive.appdata
https://www.googleapis.com/auth/drive.file
https://www.googleapis.com/auth/games
https://www.googleapis.com/auth/games.firstparty
https://www.googleapis.com/auth/plus.login
https://www.googleapis.com/auth/plus.me
https://www.googletagmanager.com

The file being studied is a compressed stream! Details about the compressed contents follow.

Interesting properties

The studied file contains at least one Portable Executable.

The file under inspection contains at least one ELF file.

Contained files

This file is a compressed stream containing 737 files.

[+] assets/bin/Data/Managed/P31RestKit.dll Portable Executable 55296 Bytes

[+] assets/bin/Data/Managed/System.dll Portable Executable 1069568 Bytes

[+] assets/bin/Data/0210bc20e08214c6fb56cdcc475f3295 unknown 4432 Bytes

[+] assets/bin/Data/02769a4b05a5241ba9fde510197ccf68 unknown 4436 Bytes

[+] assets/bin/Data/03d8ecc3cb4b74c629361028cec928d3 unknown 4424 Bytes

[+] assets/bin/Data/0667536ccd23c495296f01be783d2d4d unknown 4392 Bytes

[+] assets/bin/Data/06b8d454581514d66a0c2066a14a1dd2 unknown 4256 Bytes

[+] assets/bin/Data/0714d3fc59a524990af9e779c005ac99 unknown 4308 Bytes

[+] assets/bin/Data/0749609dceb2a4efaafb5e78322f3702 unknown 4260 Bytes

[+] assets/bin/Data/07d5af4b0fb694bc799db968a0fd2635 unknown 4428 Bytes

Compression metadata

Contained files

737

Uncompressed size

97135544

Highest datetime

2014-06-24 01:00:52

Lowest datetime

2013-10-03 16:42:34

Contained files by extension

png

140

xml

dll

dex

RSA

Contained files by type

unknown

511

PNG

140

XML

Portable Executable

ELF

DEX

Compressed bundles

This file was also submitted to VirusTotal in the following compressed file bundles.

041eaf9dabe296084dcb06d9fca09f70e9f2628a2f67bb0b0abc307feff83a6e

File identification

MD5 71c5b2bbf44eef57793efc32ea99bd61

SHA1 2944a0c063de1d724c63d7dfa710fb142a0f356a

SHA256 2dd8d8b36489229410a490a7728ca0314e09b7e9ee0fe7883ba192d2f27e86c4

ssdeep

786432:OHJEqgI6bjYDZE2t5v6z2XiDGMnPP7qpfht71lA3SZu7kf8HeCR+05HIMUjK6e:OHJWXnV2t5vI7nPzmTBcg8+Q+QoDjg

File size 42.8 MB ( 44890424 bytes )

File type Android

Magic literal

Zip archive data, at least v2.0 to extract

TrID	Android Package (73.9%) Java Archive (20.4%) ZIP compressed archive (5.6%)

VirusTotal metadata

First submission 2014-06-24 03:03:30 UTC ( 4 years, 8 months ago )

Last submission 2016-07-15 13:10:55 UTC ( 2 years, 7 months ago )

File names

traffic-racer-1-87-en-android.apk
com.skgames.trafficracer_191.apk
com.skgames.trafficracer-1.87.apk
Traffic-Racer-1.187(www.FarsRoid.com).apk
Traffic-Racer-1.87_apktops.ir.apk
traffic-racer-1.87.apk
traffic-racer.apk
com.skgames.trafficracer_050956890.apk

Advanced heuristic and reputation engines

Symantec reputation Suspicious.Insight

SHA256:	2dd8d8b36489229410a490a7728ca0314e09b7e9ee0fe7883ba192d2f27e86c4
File name:	com.skgames.trafficracer-1.87.apk
Detection ratio:	0 / 57
Analysis date:	2016-05-07 16:46:22 UTC ( 2 years, 9 months ago ) View latest

Ciphered bundle

Required permissions

Activities

Services

Receivers

Activity-related intent filters

Receiver-related intent filters

Application certificate information

Interesting strings

Interesting properties

Contained files

Compression metadata

Contained files by extension

Contained files by type

Compressed bundles

File identification

VirusTotal metadata

Advanced heuristic and reputation engines

Leave your comment...

Recover your password

Join VirusTotal Community

Sign in