dexcalibur icon indicating copy to clipboard operation
dexcalibur copied to clipboard

Cannot open project for malicious sample / Unable to generate UID error

Open cryptax opened this issue 3 years ago • 0 comments

I am unable to open project for malicious sample 08362_Video_Oynatıcı.apk (sha256: 5b9049c392eaf83b12b98419f14ece1b00042592b003a17e4e6f0fb466281368). Dexcalibur throws errors "Manifest parsing error : an service has not name", and "Unable to generate UID" and finally "openProject failed".

This is the log of Dexcalibur:

ERROR] [SERVICE] Manifest parsing error : an service has not name
[ERROR] [SERVICE] Manifest parsing error : an service has not name
[ERROR] [SERVICE] Manifest parsing error : an service has not name
[ERROR] [SERVICE] Manifest parsing error : an service has not name
[ERROR] [ACTIVITY] Manifest parsing error : an service has not name
[ERROR] [ACTIVITY] Manifest parsing error : an service has not name
Error: [ACTIVITY] Unable to generate UID
    at AndroidActivity.generateUID (/home/axelle/.npm-global/lib/node_modules/dexcalibur/src/AndroidAppComponents.js:831:37)
    at AndroidActivity.getUID (/home/axelle/.npm-global/lib/node_modules/dexcalibur/src/AndroidAppComponents.js:839:18)
    at IntentFilter.generateUID (/home/axelle/.npm-global/lib/node_modules/dexcalibur/src/AndroidAppComponents.js:219:28)
    at AndroidActivity.addIntentFilters (/home/axelle/.npm-global/lib/node_modules/dexcalibur/src/AndroidAppComponents.js:883:16)
    at Function.fromXml (/home/axelle/.npm-global/lib/node_modules/dexcalibur/src/AndroidAppComponents.js:947:29)
    at Function.fromXml (/home/axelle/.npm-global/lib/node_modules/dexcalibur/src/AndroidAppComponents.js:1616:61)
    at Function.fromXml (/home/axelle/.npm-global/lib/node_modules/dexcalibur/src/AndroidAppComponents.js:1762:63)
    at AndroidAppAnalyzer.importManifest (/home/axelle/.npm-global/lib/node_modules/dexcalibur/src/AndroidAppAnalyzer.js:114:35)
    at processTicksAndRejections (internal/process/task_queues.js:97:5)
    at async DexcaliburProject.fullscan (/home/axelle/.npm-global/lib/node_modules/dexcalibur/src/DexcaliburProject.js:740:23)
[ERROR] ENGINE openProject() failed

To reproduce / to understand

  • Dexcalibur 0.7.10
  • Linux Mint 20.2
  • Node JS v12.22.8
  • Android emulator 9 x86_64
  • Sample: virustotal link

cryptax avatar Jan 07 '22 10:01 cryptax