CalebFenton / simplify

Android virtual machine and deobfuscator
Other
4.41k stars 438 forks source link

Null input parameter for AESDecryptor #120

Open CalebFenton opened 5 years ago

CalebFenton commented 5 years ago

Provide link to specific APK, DEX, or file hash https://www.virustotal.com/gui/file/6ba481ab82f5c3c9a955efd1fa310f6c9c416caf4daeb2a87a23b95ab4c4c2f0/detection

Describe the bug Getting an unhandled exception for some code which looks simplifable.

To Reproduce

$ java -jar ~/repos/simplify/simplify/build/libs/simplify.jar -it 'o3pkg/u;-><init>' ~/Downloads/banky/urmomgeh.apk                                                    255 ↵
[1 / 1] Processing top level class Lo3pkg/u;
(1 / 1) Executing top level method: Lo3pkg/u;-><init>(Lo3pkg/aa;[B[B)V
15:32:55.113 ERROR NodeExecutor - ExecutionNode{signature=Lo3pkg/u;-><init>(Lo3pkg/aa;[B[B)V, op=throw r0, @=37} throws unhandled virtual exception
Aborting execution; exception: Unhandled virtual exception: type=Ljava/lang/Exception;, value=java.lang.Exception: one of the input parameters is null in AESDecryptor Constructor
Skipping optimization of Lo3pkg/u;-><init>(Lo3pkg/aa;[B[B)V; null execution graph

Attempted work-arounds I am the work-around.

Additional context This is actual malware. I think it's dexguard.