Posts

Showing posts with the label cicio

(Almost) a FUD: another "Porn App", this time Italian

Image
I like FUDs, because they must show creativity either in packing or in the code. Anyhow, they are almost always interesting to analyze. Recently I came across a "porn" app targeting Italy (md5:  0995aceaeb8e338aff542ab3f1d8dab4 ). When you run it it displays an ansa.it website, which I guess is a kind of Italian news site. But what it does in the background is really interesting. Quick look First off the app is still in the making and let me tell you the author devotes 5 hours a day to make it work! He (or she) is really trying to make it both FUD and powerful and I have to tell you that it starts to shape up with some nifty features. There are still a lot of blanks, which maybe will be filled in in the future. Look at this beautiful icon (remember that it is supposed to be a porn app): Second up, the strings. They are encrypted using DES encryption in a famous Adobe mode  with "Some Key" key. All of the strings seem to be encrypted, even the ones popul...