ThreatExpert Report

Technical Details:

File System Modifications

The following files were created in the system:

Filename(s)

File Size

File Hash

%Temp%\AndroidManifest.xml

1,904 bytes

MD5: 0x15555A20BBDBB8E586CC6BDB3A098AFA
SHA-1: 0x959162E5BD643FCBB66BD5DE1F51F8400DC27DC1

%Temp%\assets\exploid.c

9,908 bytes

MD5: 0x66A3196A9A354BB1D7C4392E1C5DAFA3
SHA-1: 0x39EBB728313CA9F1DFD5F48475042E4CBB966920

%Temp%\classes.dex

25,628 bytes

MD5: 0x01C21554E60244431C13F203E18B4B89
SHA-1: 0x38D5A31A4DE997F1591B7C82B63E884F7AA52DD0

%Temp%\META-INF\CERT.RSA

776 bytes

MD5: 0x737095B81AAE879510C49DF9F758FAE6
SHA-1: 0x6B89945E40198B41514A9579E2156A0A5A8F2F3B

%Temp%\META-INF\CERT.SF

1,234 bytes

MD5: 0xF7047CFA5E48F3564BECB019A7381A60
SHA-1: 0xEA95FF7B448C13A32CA14BA805D07DDECECE1F79

%Temp%\META-INF\MANIFEST.MF

1,181 bytes

MD5: 0x725BBF12EDE54F4B1B7526492D11CC6D
SHA-1: 0xAB4E405A79754F9EAB26B148558354279F2097EB

%Temp%\res\drawable\icon.png

2,898 bytes

MD5: 0x21110479748629BA59C9367CCA17C045
SHA-1: 0xCB64EABC3C30CA47CB5C509405BFFDF4283BD08D

%Temp%\res\layout\main.xml

1,960 bytes

MD5: 0xDD349869FB40ED2B8E95B7FEEA0F98BC
SHA-1: 0xC1BE14FA40FE11A1C069F2A259946192E61A288A

%Temp%\res\raw\exploid

12,128 bytes

MD5: 0x4388FB694A9157179A244DAAD8C8D0EB
SHA-1: 0xA0037E46115624B1D0F82A4251267118D136E416

%Temp%\res\raw\inst_kit

685 bytes

MD5: 0xE1DDD6AE95D8D1A84721377088548A8C
SHA-1: 0x63F52A04A79212926658CC6D2357EDB305634E6F

%Temp%\res\raw\su

76,232 bytes

MD5: 0x85652FD3755AA6F6136823311643D8CE
SHA-1: 0x31F26AC3F671A904B47E0D328D0B77E7D779D24F

%Temp%\res\raw\superuser_cd
%Temp%\res\raw\superuser_ef

158,741 bytes

MD5: 0x0D85998B1A206AC6FAE9B2C6DFEB5E66
SHA-1: 0xE818C94C1DDD82012502B95E6A98C5A5D42E5671

%Temp%\res\raw\su_cd

26,256 bytes

MD5: 0x0AE93CA7BC600CD2379D5FE9FA71D0A0
SHA-1: 0x65FEF8F484E99503E4BB1808CDC6DF1D7FE3C662

%Temp%\res\raw\su_ef

26,264 bytes

MD5: 0xEB1D831E9D3BE6CA90A9E47EE5935E04
SHA-1: 0xDC61569CBF232B06F256910AEBC584BC171CC5D7

%Temp%\res\raw\tattoo_hack_g6561203

19,278 bytes

MD5: 0xF0A3181688352C812ACDE7E280FD1A81
SHA-1: 0xDBC512EDEE9DF7731EF45667BAA81B122A39DFAB

%Temp%\res\raw\tattoo_hack_gf922713

19,010 bytes

MD5: 0xBB5767B01700DC20B09E29B41C363615
SHA-1: 0x87472A73688C38B4C6A0D5DB34C60813D42D32F2

%Temp%\res\raw\uninst_kit

1,073 bytes

MD5: 0x350A50720BE3FE46831C507EF3BC7BCD
SHA-1: 0xEBF407C1741A885D5CB8038A9A0B6A91EADDC21B

%Temp%\resources.arsc

5,896 bytes

MD5: 0x73A6844547CF0E2D9FD53354169C9107
SHA-1: 0xA062666C6F63D16D242345FD6BF4FCADC909B987

[file and pathname of the sample #1]

330,428 bytes

MD5: 0x51FD17C2DF1A264A5CF8DFADD0C53216
SHA-1: 0x56A88427DD34391D1390A3865AA4696B73164D3C

Note:

%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).

The following directories were created:

%Temp%\assets
%Temp%\META-INF
%Temp%\res
%Temp%\res\drawable
%Temp%\res\layout
%Temp%\res\raw

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.

Submission Summary:

Technical Details: