FILE INFORMATION
File Name c645375b433d71973d2a27c8f687d809.apkAPP INFORMATION
App Name InsecureShopSIGNER CERTIFICATE
Binary is signed
v1 signature: False
v2 signature: False
v3 signature: False
v4 signature: False
X.509 Subject: C=Unknown, ST=Unknown, L=Unknown, O=Unknown, OU=Unknown, CN=Unknown
Signature Algorithm: rsassa_pkcs1v15
Valid From: 2023-04-03 14:42:00+00:00
Valid To: 2050-08-19 14:42:00+00:00
Issuer: C=Unknown, ST=Unknown, L=Unknown, O=Unknown, OU=Unknown, CN=Unknown
Serial Number: 0x6b4392da0b5a5f1d
Hash Algorithm: sha384
md5: 52fe929b26a461308a570434e18c1990
sha1: c39e3c77fc75d538794e270a0b50f8da9b66d439
sha256: 5a8b5ee4e3a31c3d36d23dbde2507ee1835a5a854df8cc3cadd309beaba65aa7
sha512: 6920b76839bb4205d83f00830ceee13777f5fbdf0c01f4394aaa066988fa0572181de7542e2664f6665a785cac1adca7df99d76694086668e58aba68765e544a
Found 1 unique certificatesAPPLICATION PERMISSIONS
ANDROID API
BROWSABLE ACTIVITIES
| ACTIVITY | INTENT |
|---|---|
| com.insecureshop.WebViewActivity |
Schemes:
insecureshop://,
Hosts: com.insecureshop, |
NETWORK SECURITY
| NO | SCOPE | SEVERITY | DESCRIPTION |
|---|
CERTIFICATE ANALYSIS
| TITLE | SEVERITY | DESCRIPTION |
|---|---|---|
| Signed Application | info | Application is signed with a code signing certificate |
MANIFEST ANALYSIS
| NO | ISSUE | SEVERITY | DESCRIPTION | OPTIONS |
|---|---|---|---|---|
| 1 |
App can be installed on a vulnerable upatched Android version Android 4.1-4.1.2, [minSdk=16] |
high | This application can be installed on an older version of android that has multiple unfixed vulnerabilities. These devices won't receive reasonable security updates from Google. Support an Android version => 10, API 29 to receive reasonable security updates. | |
| 2 |
Clear text traffic is Enabled For App [android:usesCleartextTraffic=true] |
high | The app intends to use cleartext network traffic, such as cleartext HTTP, FTP stacks, DownloadManager, and MediaPlayer. The default value for apps that target API level 27 or lower is "true". Apps that target API level 28 or higher default to "false". The key reason for avoiding cleartext traffic is the lack of confidentiality, authenticity, and protections against tampering; a network attacker can eavesdrop on transmitted data and also modify it without being detected. | |
| 3 |
Application Data can be Backed up [android:allowBackup=true] |
warning | This flag allows anyone to backup your application data via adb. It allows users who have enabled USB debugging to copy application data off of the device. | |
| 4 |
Activity (com.insecureshop.ChooserActivity) is not Protected. An intent-filter exists. |
warning | An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. | |
| 5 |
Activity (com.insecureshop.AboutUsActivity) is not Protected. [android:exported=true] |
warning | An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. | |
| 6 |
Activity (com.insecureshop.WebViewActivity) is not Protected. An intent-filter exists. |
warning | An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. | |
| 7 |
Activity (com.insecureshop.WebView2Activity) is not Protected. An intent-filter exists. |
warning | An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. | |
| 8 |
Activity (com.insecureshop.ResultActivity) is not Protected. [android:exported=true] |
warning | An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. | |
| 9 |
Content Provider (com.insecureshop.contentProvider.InsecureShopProvider) is not Protected. [android:exported=true] |
warning | A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. | |
| 10 |
Service (net.gotev.uploadservice.UploadService) is not Protected. [android:exported=true] |
warning | A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. |
CODE ANALYSIS
SHARED LIBRARY BINARY ANALYSIS
| NO | SHARED OBJECT | NX | STACK CANARY | RELRO | RPATH | RUNPATH | FORTIFY | SYMBOLS STRIPPED |
|---|
NIAP ANALYSIS v1.3
| NO | IDENTIFIER | REQUIREMENT | FEATURE | DESCRIPTION |
|---|
FILE ANALYSIS
| NO | ISSUE | FILES |
|---|
APKiD ANALYSIS
| DEX | DETECTIONS | ||||||
|---|---|---|---|---|---|---|---|
| classes.dex |
|
QUARK ANALYSIS
| POTENTIAL MALICIOUS BEHAVIOUR | EVIDENCE |
|---|
ABUSED PERMISSIONS
Malware Permissions are the top permissions that are widely abused by known malware.
Other Common Permissions are permissions that are commonly abused by known malware.
SERVER LOCATIONS
This app may communicate with the following OFAC sanctioned list of countries.
| DOMAIN | COUNTRY/REGION |
|---|
DOMAIN MALWARE CHECK
| DOMAIN | STATUS | GEOLOCATION |
|---|---|---|
| images.pexels.com |
ok |
IP: 104.18.67.220 Country: United States of America Region: California City: San Francisco Latitude: 37.775700 Longitude: -122.395203 View: Google Map |
| www.insecureshop.com |
ok |
No Geolocation information available. |
| www.insecureshopapp.com |
ok |
IP: 34.149.87.45 Country: United States of America Region: Texas City: Houston Latitude: 29.941401 Longitude: -95.344498 View: Google Map |
| stackoverflow.com |
ok |
IP: 104.18.32.7 Country: United States of America Region: Texas City: Dallas Latitude: 32.783058 Longitude: -96.806671 View: Google Map |
URLS
| URL | FILE |
|---|---|
|
data:image |
com/bumptech/glide/load/model/DataUrlLoader.java |
|
file:///android_asset/ |
com/bumptech/glide/load/model/AssetUriLoader.java |
|
https://www.insecureshopapp.com |
com/insecureshop/PrivateActivity.java |
|
https://www.insecureshopapp.com |
com/insecureshop/ProductDetail.java |
|
https://www.insecureshop.com/ |
com/insecureshop/SendingDataViaActionActivity.java |
|
https://images.pexels.com/photos/7974/pexels-photo.jpg https://www.insecureshopapp.com https://images.pexels.com/photos/984619/pexels-photo-984619.jpeg https://images.pexels.com/photos/343720/pexels-photo-343720.jpeg https://images.pexels.com/photos/277390/pexels-photo-277390.jpeg https://images.pexels.com/photos/225157/pexels-photo-225157.jpeg https://images.pexels.com/photos/264819/pexels-photo-264819.jpeg https://images.pexels.com/photos/532803/pexels-photo-532803.jpeg https://images.pexels.com/photos/789812/pexels-photo-789812.jpeg |
com/insecureshop/util/Util.java |
|
https://www.insecureshopapp.com/ |
com/insecureshop/broadcast/ProductDetailBroadCast.java |
|
http://stackoverflow.com/a/4410331 |
net/gotev/uploadservice/NameValue.java |
FIREBASE DATABASE
EMAILS
TRACKERS
| TRACKER NAME | CATEGORIES | URL |
|---|
POSSIBLE HARDCODED SECRETS
STRINGS
From APK Resource
From Code
From Shared Objects
ACTIVITIES
Showing all 10 activities
com.insecureshop.ChooserActivity
com.insecureshop.AboutUsActivity
com.insecureshop.CartListActivity
com.insecureshop.ProductListActivity
com.insecureshop.LoginActivity
com.insecureshop.WebViewActivity
com.insecureshop.WebView2Activity
com.insecureshop.PrivateActivity
com.insecureshop.SendingDataViaActionActivity
com.insecureshop.ResultActivity
SERVICES
Showing all 1 services
net.gotev.uploadservice.UploadService
RECEIVERS
PROVIDERS
Showing all 2 providers
com.insecureshop.contentProvider.InsecureShopProvider
androidx.core.content.FileProvider
LIBRARIES
FILES