Where's the native code? (In Android)
In this video we look at what is native code in terms of Android and the Android OS. How can we recognize it in an APK if it's being used?
Timestamps:
0:00 Intro
0:44 What is Native Code?
1:15 Processor Architectures
1:46 Opening Sample
2:14 Where do we look?
3:05 Shared Objects
4:15 Searching for Native Code Refs
5:40 Where does it get called?
7:30 Cross Refs
8:39 Recap
---
Software Links Mentioned in Video:
JADX: https://github.com/skylot/jadx
---
Malware Examined in the video (XLoader):
sha256:02c08ec2675abe6e09691419dd1a281194879c6e393de1cdfb150b864378d921
MalwareBazaar Link:
https://bazaar.abuse.ch/sample/02c08e...
---
laurieWIRED Twitter:
/ lauriewired
laurieWIRED Website:
http://lauriewired.com
laurieWIRED HN:
https://news.ycombinator.com/user?id=...
laurieWIRED Reddit:
/ lauriewired