Skip to content

[DETECTION] compiler : unknown #373

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ReBensk opened this issue Oct 30, 2023 · 6 comments
Open

[DETECTION] compiler : unknown #373

ReBensk opened this issue Oct 30, 2023 · 6 comments
Labels

Comments

@ReBensk
Copy link
Contributor

ReBensk commented Oct 30, 2023

Samples:

Sample1.zip
Sample2.zip
Sample3.zip

APKiD current results...

[+] APKiD 2.1.5 :: from RedNaga :: rednaga.io
[*] /root/Desktop/Samples/Complier/Sample1.apk!classes.dex
 |-> compiler : unknown (please file detection issue!)
[*] /root/Desktop/Samples/Complier/Sample1.apk!assets/l2fb0a86f_a64.so
 |-> protector : Virbox
[*] /root/Desktop/Samples/Complier/Sample1.apk!assets/l2fb0a86f_a32.so
 |-> protector : Virbox
[*] /root/Desktop/Samples/Complier/Sample1.apk!assets/l2fb0a86f_x64.so
 |-> protector : Virbox
[*] /root/Desktop/Samples/Complier/Sample1.apk!assets/l2fb0a86f_x86.so
 |-> protector : Virbox
[*] /root/Desktop/Samples/Complier/Sample2.apk!assets/l45e7a802_a32.so
 |-> protector : Virbox
[*] /root/Desktop/Samples/Complier/Sample2.apk!assets/l45e7a802_a64.so
 |-> protector : Virbox
[*] /root/Desktop/Samples/Complier/Sample2.apk!assets/l45e7a802_x64.so
 |-> protector : Virbox
[*] /root/Desktop/Samples/Complier/Sample2.apk!assets/l45e7a802_x86.so
 |-> protector : Virbox
[*] /root/Desktop/Samples/Complier/Sample2.apk!classes.dex
 |-> compiler : unknown (please file detection issue!)
[*] /root/Desktop/Samples/Complier/Sample3.apk!classes.dex
 |-> compiler : unknown (please file detection issue!)
[*] /root/Desktop/Samples/Complier/Sample3.apk!assets/l676efb5b_a64.so
 |-> protector : Virbox
[*] /root/Desktop/Samples/Complier/Sample3.apk!assets/l676efb5b_a32.so
 |-> protector : Virbox
[*] /root/Desktop/Samples/Complier/Sample3.apk!assets/l676efb5b_x64.so
 |-> protector : Virbox
[*] /root/Desktop/Samples/Complier/Sample3.apk!assets/l676efb5b_x86.so
 |-> protector : Virbox
@ReBensk ReBensk added the detection-issue Bad detection or no detection label Oct 30, 2023
@enovella
Copy link
Collaborator

Edited the formating, please use backtips to format code.

Could you please describe the tickets further?

@ReBensk
Copy link
Contributor Author

ReBensk commented Oct 30, 2023

Additional Info:

  1. APKiD 2.1.5 doesn't detect as a known complier.
  2. I will create a separate ticket for packer detection.

@enovella
Copy link
Collaborator

enovella commented Nov 2, 2023

Edit the 1st comment with the right info

@enovella
Copy link
Collaborator

enovella commented Nov 2, 2023

The DEX compiler fingerprinting was tackled by @CalebFenton and I don't really know if he's interested in taking a look at it again. Personally, I have other goals with APKiD. I won't give priority to this in a long while. Feel free to dig deeper @ReBensk and share your thoughts about it.

@enovella
Copy link
Collaborator

@AbhiTheModder Any clue why these samples are unknown compiler-wise?

$ apkid .
[+] APKiD 2.1.5 :: from RedNaga :: rednaga.io
[*] ./Sample1.zip!Sample1.apk!classes.dex
 |-> compiler : unknown (please file detection issue!)
 |-> packer : Jiagu K
[*] ./Sample1.zip!Sample1.apk!assets/l2fb0a86f_a64.so
 |-> anti_hook : syscalls
 |-> protector : Virbox
[*] ./Sample1.zip!Sample1.apk!assets/l2fb0a86f_a32.so
 |-> protector : Virbox
[*] ./Sample1.zip!Sample1.apk!assets/l2fb0a86f_x64.so
 |-> protector : Virbox
[*] ./Sample1.zip!Sample1.apk!assets/l2fb0a86f_x86.so
 |-> protector : Virbox
[*] ./Sample2.zip!Sample2.apk!assets/l45e7a802_a32.so
 |-> protector : Virbox
[*] ./Sample2.zip!Sample2.apk!assets/l45e7a802_a64.so
 |-> anti_hook : syscalls
 |-> protector : Virbox
[*] ./Sample2.zip!Sample2.apk!assets/l45e7a802_x64.so
 |-> protector : Virbox
[*] ./Sample2.zip!Sample2.apk!assets/l45e7a802_x86.so
 |-> protector : Virbox
[*] ./Sample2.zip!Sample2.apk!classes.dex
 |-> compiler : unknown (please file detection issue!)
 |-> packer : Jiagu K
[*] ./Sample3.zip!Sample3.apk!classes.dex
 |-> compiler : unknown (please file detection issue!)
 |-> packer : Jiagu K
[*] ./Sample3.zip!Sample3.apk!assets/l676efb5b_a64.so
 |-> anti_hook : syscalls
 |-> protector : Virbox
[*] ./Sample3.zip!Sample3.apk!assets/l676efb5b_a32.so
 |-> protector : Virbox
[*] ./Sample3.zip!Sample3.apk!assets/l676efb5b_x64.so
 |-> protector : Virbox
[*] ./Sample3.zip!Sample3.apk!assets/l676efb5b_x86.so
 |-> protector : Virbox

@AbhiTheModder
Copy link
Contributor

AbhiTheModder commented Apr 20, 2025

@AbhiTheModder Any clue why these samples are unknown compiler-wise?

I was looking into this today as well. It lacks any markers, and the map list items are different from standard ones. I have no leads at the moment but will continue investigating and will update if I discover anything.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants