rednaga / APKiD

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Other
2.01k stars 293 forks source link

[Error] yara.Error: internal error: 34 #331

Open anonimQwerty opened 1 year ago

anonimQwerty commented 1 year ago

[+] APKiD 2.1.1 :: from RedNaga :: rednaga.io Exception scanning anixart_8-1-2.apk: Traceback (most recent call last): File "C:\Users\admin\AppData\Local\Programs\Python\Python311\Lib\site-packages\apkid\apkid.py", line 123, in scan_file results: Dict[str, List[yara.Match]] = self.scan_file_obj(f, file_path) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\admin\AppData\Local\Programs\Python\Python311\Lib\site-packages\apkid\apkid.py", line 139, in scan_file_obj matches: List[yara.Matches] = self.rules.match(data=file.read(), timeout=self.options.timeout) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ yara.Error: internal error: 34

windows 11 21H2, python 3.11

apkunpacker commented 1 year ago

Same as https://github.com/rednaga/APKiD/issues/237

CalebFenton commented 1 year ago

Can you share the file? Hard to reproduce without it.

apkunpacker commented 1 year ago

Can you share the file? Hard to reproduce without it.

In my side it work fine , if its the same application.

$ apkid 'anixart.apk'
[+] APKiD 2.1.4 :: from RedNaga :: rednaga.io
[*] anixart.apk!classes.dex
 |-> anti_vm : Build.FINGERPRINT check, Build.MANUFACTURER check, Build.TAGS check
 |-> compiler : r8
[*] anixart.apk!classes2.dex
 |-> anti_debug : Debug.isDebuggerConnected() check
 |-> anti_vm : Build.MANUFACTURER check, SIM operator check, network operator name check
 |-> compiler : r8 without marker (suspicious)
[*] anixart.apk!classes3.dex
 |-> compiler : r8 without marker (suspicious)

from https://dl.anixart.tv/anixart.apk version 8.1.2(22101520) anixart.apk.zip