Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I've been given an APK file, and before re-distributing to the "market" I want to make sure the given android app does not contain the malware. How can I do that ?

Business use case is similar like : I am a "market provider" or :"reseller" to which developers will submit the developed apps. To guard my reputation : I want to ensure that before I put the application in "my market", the app. is virus/malware free!

Is there any third party service, which can be used to identify if the app. contains a malware ? If not how I create this service/verification program to check the same ?

Thanks in advance. -JE

share|improve this question

closed as off-topic by TildalWave, Adnan, Xander, Rory Alsop Jan 2 at 15:01

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer 1

It depends on budget and contract with your provider how far you will be able to go. You can try and use automated scanners like apkscan.

Another possibility, which will be a lot more thorough (and a lot more expensive), is to hire specialized security companies who can either perform a source code review of the application (and you will have to compile the APK yourself from the reviewed source code). If your provider does not want to give you the source code then you could request your security consultants to reverse engineer and review the provided APK. (but there might be difficulties here as well)

share|improve this answer
1  
More Android malware analysis scanners: Anubis: Analysis of APK and APK Analyzer –  Ivan Chau Jan 2 at 9:12
    
Thanks Lucas and Ivan. @Ivan : is there possibility of sending my APK using API calls instead of going to webpage and uploading it manually ? –  java_enthu Jan 2 at 9:41
    
Also you can use Yara resources.infosecinstitute.com/malware-analysis-clamav-yara –  dgn Jan 2 at 11:22

Not the answer you're looking for? Browse other questions tagged or ask your own question.