APKiD - Android Application Identifier for Packers, Protectors, Obfuscators and Oddities
APKiD gives you information about how an APK was made. It identifies many compilers, packers, obfuscators, and other weird stuff. It's PEiD for Android.
For more information on what this tool can be used for, check out our HITCON 2016 presentation: Android Compiler Fingerprinting.
Installation:
The yara-python clone and compile steps here are temporarily necessary because we must point directly to our modified version of a yara branch which includes our DEX Yara module. This step is nessecary until (if?) the original maintainers of yara merge our module into the master branch. When this happens, we will undate the instructions here. After the yara-python fork is compiled, you can use pip to the most currently published APKiD package.
发表于 2016-8-19 16:35
