4 files changed, 52 insertions, 0 deletions

diff --git a/karton/android/__init__.py b/karton/android/__init__.py
new file mode 100644
index 0000000..7bb1402
--- /dev/null
+++ b/karton/android/__init__.py
@@ -0,0 +1,3 @@
+from .android import Android
+
+__all__ = ["Android"]
diff --git a/karton/android/__main__.py b/karton/android/__main__.py
new file mode 100644
index 0000000..f873ab7
--- /dev/null
+++ b/karton/android/__main__.py
@@ -0,0 +1,3 @@
+from .android import Android
+
+Android.main()
diff --git a/karton/android/__version__.py b/karton/android/__version__.py
new file mode 100644
index 0000000..f102a9c
--- /dev/null
+++ b/karton/android/__version__.py
@@ -0,0 +1 @@
+__version__ = "0.0.1"
diff --git a/karton/android/android.py b/karton/android/android.py
new file mode 100644
index 0000000..be4a11a
--- /dev/null
+++ b/karton/android/android.py
@@ -0,0 +1,45 @@
+import sys
+
+import androguard
+from karton.core import Karton, Task
+
+from .__version__ import __version__
+
+class Android(Karton):
+    """
+    Augment apk files with various information.
+    """
+
+    identity = "karton.android"
+    version = __version__
+    filters = [
+        {"type": "sample", "extension": "apk"},
+    ]
+
+    def process(self, task: Task) -> None:
+        sample = task.get_resource("sample")
+
+        a = androguard.core.bytecodes.apk.APK(sample)
+        if not a.is_valid_APK():
+            self.log.info("Not a valid APK file.")
+            return
+
+        metadata = {
+           'package': a.package,
+           'sample': sample,
+           'activities': a.get_activites(),
+           'main_activity': a.get_main_activity(),
+           'permissions': a.get_permissions(),
+        }
+
+        if a.is_signed() or a.is_signed_v3():
+            metadata['certificate'] = a.get_certificates()[0].sha1_fingerprint.replace(" ", "")
+
+        self.send_task(
+            Task(
+                headers={"type": "sample", "stage": "analyzed"},
+                payload=metadata)
+            )
+
+if __name__ == "__main__":
+    Android().loop()