How to distinguish the app was repackaged or not?

34

description

I think the experiment might has some mistake, but in general, it works.

Transcript of How to distinguish the app was repackaged or not?

Page 1: How to distinguish the app was repackaged or not?
Page 2: How to distinguish the app was repackaged or not?
Page 3: How to distinguish the app was repackaged or not?
Page 4: How to distinguish the app was repackaged or not?
Page 5: How to distinguish the app was repackaged or not?
Page 6: How to distinguish the app was repackaged or not?

Sample No. Keystore Code Modified

1 keystore_file_1 Original code

2 keystore_file_2 No

3 keystore_file_2 Yes

Page 7: How to distinguish the app was repackaged or not?
Page 8: How to distinguish the app was repackaged or not?
Page 9: How to distinguish the app was repackaged or not?
Page 10: How to distinguish the app was repackaged or not?
Page 11: How to distinguish the app was repackaged or not?
Page 12: How to distinguish the app was repackaged or not?
Page 13: How to distinguish the app was repackaged or not?
Page 14: How to distinguish the app was repackaged or not?
Page 15: How to distinguish the app was repackaged or not?
Page 16: How to distinguish the app was repackaged or not?
Page 17: How to distinguish the app was repackaged or not?
Page 18: How to distinguish the app was repackaged or not?

3,360,586 – 3,360,376 = 210

Page 19: How to distinguish the app was repackaged or not?

3,334,868 – 3,334,658 = 210

Page 20: How to distinguish the app was repackaged or not?
Page 21: How to distinguish the app was repackaged or not?

The diff result of AndroidManifest.xml (sample1 and sample2).

Page 22: How to distinguish the app was repackaged or not?

The diff result of AndroidManifest.xml (sample1 and sample3).

Page 23: How to distinguish the app was repackaged or not?

The diff result of apktool.yml (sample1 and sample2).

Page 24: How to distinguish the app was repackaged or not?

The diff result of apktool.yml (sample1 and sample3).

Page 25: How to distinguish the app was repackaged or not?

Take a look at the smali code (sample1 and sample3).

Page 26: How to distinguish the app was repackaged or not?

Take a look at sample1 and sample3.

Page 27: How to distinguish the app was repackaged or not?

Take a look at sample1 and sample3.

Page 28: How to distinguish the app was repackaged or not?

Take a look at sample1 and sample3 (.apk).

Page 29: How to distinguish the app was repackaged or not?

Take a look at sample1 and sample3 (after extract).

Page 30: How to distinguish the app was repackaged or not?

Take a look at sample1 and sample3 (.dex file).

Page 31: How to distinguish the app was repackaged or not?

Let’s look back to our test sample:

Sample No. Keystore Code Modified

1 keystore_file_1 Original code

2 keystore_file_2 No

3 keystore_file_2 Yes

Page 32: How to distinguish the app was repackaged or not?

Let’s look back to our test samples and make some conclusion…

The different stuffs at each phase (based on sample1):

Page 33: How to distinguish the app was repackaged or not?
Page 34: How to distinguish the app was repackaged or not?