Antivirus scan for e7c4ad48e0c8707bb39f4242e279d61995cee3b78e02fbb352a483b7495ff3dc at 2018-10-04 16:35:58 UTC

Antivirus	Result	Update
Ad-Aware		20181004
AegisLab		20181004
AhnLab-V3		20181004
Alibaba		20180921
ALYac		20181004
Antiy-AVL		20181004
Arcabit		20181004
Avast		20181004
Avast-Mobile		20181004
AVG		20181004
Avira (no cloud)		20181004
AVware		20180925
Babable		20180918
Baidu		20180930
BitDefender		20181004
Bkav		None
CAT-QuickHeal		20181004
ClamAV		20181004
CMC		20181004
Comodo		20181004
CrowdStrike Falcon (ML)		20180723
Cybereason		20180225
Cylance		20181004
Cyren		20181004
DrWeb		20181004
eGambit		20181004
Emsisoft		20181004
Endgame		20180730
ESET-NOD32		20181004
F-Prot		20181004
F-Secure		20181004
Fortinet		20181004
GData		20181004
Sophos ML		20180717
Jiangmin		20181004
K7AntiVirus		20181004
K7GW		20181003
Kaspersky		20181004
Kingsoft		20181004
Malwarebytes		20181004
MAX		20181004
McAfee		20181004
McAfee-GW-Edition		20181004
Microsoft		20181004
eScan		20181004
NANO-Antivirus		20181004
Palo Alto Networks (Known Signatures)		20181004
Panda		20181004
Qihoo-360		20181004
Rising		20181004
SentinelOne (Static ML)		20180926
Sophos AV		20181004
SUPERAntiSpyware		20180907
Symantec		20181004
Symantec Mobile Insight		20181001
TACHYON		20181004
Tencent		20181004
TheHacker		20181001
TotalDefense		20181004
TrendMicro		20181004
TrendMicro-HouseCall		20181004
Trustlook		20181004
VBA32		20181004
ViRobot		20181004
Webroot		20181004
Yandex		20181004
Zillya		20181003
ZoneAlarm by Check Point		20180925
Zoner		20181004

The file being studied is Android related! APK Android file more specifically. The application's main package name is com.king.petrescuesaga. The internal version number of the application is 11541105. The displayed version string of the application is 1.154.11. The minimum Android API level for the application to run (MinSDKVersion) is 14. The target Android API level for the application to run (TargetSDKVersion) is 26.

Required permissions

android.permission.VIBRATE (control vibrator)

com.king.petrescuesaga.permission.C2D_MESSAGE (C2DM permission.)

com.google.android.c2dm.permission.RECEIVE (Unknown permission from android reference)

android.permission.ACCESS_WIFI_STATE (view Wi-Fi status)

android.permission.WAKE_LOCK (prevent phone from sleeping)

android.permission.ACCESS_NETWORK_STATE (view network status)

android.permission.INTERNET (full Internet access)

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE (Unknown permission from android reference)

android.permission.MODIFY_AUDIO_SETTINGS (change your audio settings)

com.android.vending.BILLING (Unknown permission from android reference)

android.permission.GET_ACCOUNTS (discover known accounts)

Activities

com.king.petrescuesaga.PetRescueSagaActivity

com.facebook.FacebookActivity

com.king.core.VideoPlayerActivity

Services

com.king.store.billing.BillingService

com.google.analytics.tracking.android.CampaignTrackingService

com.king.notification.GCMIntentJobService

com.king.notification.GCMIntentService

com.king.notification.AlarmService

com.king.notification.AlarmService.LargeIcon

com.king.notification.JobSchedulerService

Receivers

com.king.store.billing.BillingReceiver

com.king.core.ReferrerReceiver

com.amazon.device.iap.ResponseReceiver

com.king.notification.GCMBroadcastReceiver

com.king.analytics.AnalyticsReceiver

Providers

com.king.core.VideoPlayerAssetsProvider

Activity-related intent filters

com.king.petrescuesaga.PetRescueSagaActivity
actions: android.intent.action.MAIN, android.intent.action.VIEW
categories: android.intent.category.LAUNCHER, android.intent.category.DEFAULT, android.intent.category.BROWSABLE

com.king.core.VideoPlayerActivity
actions: android.intent.action.VIEW
categories: android.intent.category.EMBED

Receiver-related intent filters

com.king.analytics.AnalyticsReceiver
actions: com.king.analytics.BOOT_COMPLETED, com.king.analytics.REQUEST_VALUE, com.king.analytics.RECEIVE_VALUE

com.king.notification.GCMBroadcastReceiver
actions: com.google.android.c2dm.intent.RECEIVE, com.google.android.c2dm.intent.REGISTRATION
categories: com.king.petrescuesaga

com.king.core.ReferrerReceiver
actions: com.android.vending.INSTALL_REFERRER

com.king.store.billing.BillingReceiver
actions: com.android.vending.billing.IN_APP_NOTIFY, com.android.vending.billing.RESPONSE_CODE, com.android.vending.billing.PURCHASE_STATE_CHANGED

com.amazon.device.iap.ResponseReceiver
actions: com.amazon.inapp.purchasing.NOTIFY

Application certificate information

Subject
    DN: C:RO, CN:Cristian Bidea, L:Bucharest, O:king.com, ST:Romania, OU:Mobile
    C: RO
    CN: Cristian Bidea
    L: Bucharest
    O: king.com
    ST: Romania
    OU: Mobile
validto: 02:00 PM 05/30/2039
serialnumber: 4f0ee767
thumbprint: 9e93b3336c767c3aba6fcc4deada9f179ee4a05b
validfrom: 02:00 PM 01/12/2012
Issuer
    DN: C:RO, CN:Cristian Bidea, L:Bucharest, O:king.com, ST:Romania, OU:Mobile
    C: RO
    CN: Cristian Bidea
    L: Bucharest
    O: king.com
    ST: Romania
    OU: Mobile

Interesting strings

http://
http://play.google.com/store/apps/details?id=com.facebook.orca
http://plus.google.com/
http://schemas.android.com/apk/lib/com.google.android.gms.plus
http://schemas.android.com/apk/res/android
http://www.amazon.com/gp/mas/get-appstore/android/ref=mas_mx_mba_iap_dl
http://www.dom.com/path?
https://
https://.facebook.com
https://accounts.google.com
https://facebook.com
https://graph-video.%s
https://graph.%s
https://imasdk.googleapis.com/native/sdkloader/native_sdk_v3.html
https://imasdk.googleapis.com/native/sdkloader/native_sdk_v3_debug.html
https://login.live.com
https://login.yahoo.com
https://twitter.com
https://www.facebook.com
https://www.googleapis.com/auth/appstate
https://www.googleapis.com/auth/contacts.readonly
https://www.googleapis.com/auth/datastoremobile
https://www.googleapis.com/auth/drive.appdata
https://www.googleapis.com/auth/drive.file
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/games
https://www.googleapis.com/auth/games.firstparty
https://www.googleapis.com/auth/plus.login
https://www.googleapis.com/auth/plus.me
https://www.googleapis.com/auth/plus.moments.write
https://www.linkedin.com
https://www.paypal.com
https://z.moatads.com/

The file being studied is a compressed stream! Details about the compressed contents follow.

Interesting properties

The file under inspection contains at least one ELF file.

Contained files

This file is a compressed stream containing 1345 files.

[+] AndroidManifest.xml XML 13264 Bytes

[+] META-INF/CERT.RSA unknown 1339 Bytes

[+] META-INF/CERT.SF unknown 145278 Bytes

[+] META-INF/MANIFEST.MF unknown 145235 Bytes

[+] assets/res_output/P2Pticket_button.xml unknown 1646 Bytes

[+] assets/res_output/P2Ptickets.xml unknown 650 Bytes

[+] assets/res_output/animations.xml unknown 3129 Bytes

[+] assets/res_output/backgrounds.xml unknown 16521 Bytes

[+] assets/res_output/branch_and_changeset.dat unknown 45 Bytes

[+] assets/res_output/build_timestamp.dat unknown 18 Bytes

Compression metadata

Contained files

1345

Uncompressed size

102585582

Highest datetime

1980-00-00 00:00:00

Lowest datetime

1980-00-00 00:00:00

Contained files by extension

xml

437

zip

202

csv

103

png

jpg

fnt

css

ttf

pvr

ffa

dat

ffm

txt

inc

dex

crt

svg

RSA

eot

Contained files by type

unknown

503

XML

203

ZIP

202

PNG

JPG

DEX

ELF

JSON

HTML

File identification

MD5 100319b5f807e041e062afdb183bcc7c

SHA1 be0e02aacb4df66f592c3f02b363f3d0d6ccc9e2

SHA256 e7c4ad48e0c8707bb39f4242e279d61995cee3b78e02fbb352a483b7495ff3dc

ssdeep

1572864:Yalh5icLXNXr/smRubTXMkI9PQHQsdDK8GLNNornr8BfGBJ8PxYwVB5qnwEX8yvw:x579DsmRufMkI+1dDNGLzLfiKKwT5qwN

File size 81.8 MB ( 85811982 bytes )

File type Android

Magic literal

Zip archive data

TrID	Android Package (56.4%) Java Archive (15.5%) Opera Widget (15.0%) Mozilla Archive Format (gen) (7.5%) ZIP compressed archive (4.3%)

VirusTotal metadata

First submission 2018-09-19 15:15:55 UTC ( 5 months ago )

Last submission 2018-12-27 09:03:01 UTC ( 1 month, 3 weeks ago )

File names

pet-rescue-saga-1.154.11.apk
100319B5F807E041E062AFDB183BCC7C
995073_9a5326_com.king.petrescuesaga_1.154.11_11541105.apk
pet-rescue-saga.apk

SHA256:	e7c4ad48e0c8707bb39f4242e279d61995cee3b78e02fbb352a483b7495ff3dc
File name:	100319B5F807E041E062AFDB183BCC7C
Detection ratio:	0 / 60
Analysis date:	2018-10-04 16:35:58 UTC ( 4 months, 2 weeks ago ) View latest

Ciphered bundle

Required permissions

Activities

Services

Receivers

Providers

Activity-related intent filters

Receiver-related intent filters

Application certificate information

Interesting strings

Interesting properties

Contained files

Compression metadata

Contained files by extension

Contained files by type

File identification

VirusTotal metadata

Leave your comment...

Recover your password

Join VirusTotal Community

Sign in