Patent ID: 9619650
Date: 2017-04-11
CPC Classifications: G06F,H04L

Claim:
1. A method for identifying virus APK, comprising: presetting a virus database comprising virus characteristic codes, wherein the presetting the virus database further including: detecting that a designated file in a target Android installation package APK contains at least one of the virus characteristic codes; and if yes, determining that the target Android installation package APK is a virus APK; wherein the virus characteristic codes comprises: header information characteristic code, constant characteristic code, operand characteristic code, instruction characteristic code, instruction characteristic code sequence, and class name function name characteristic code; the operation instructions in the executable file comprise two portions: opcode and operand; wherein the header information characteristic code, constant characteristic code, operand characteristic code, and class name function name characteristic code are directly generated according to the header information, constant, operand, and class name function name including the virus information; and wherein the instruction characteristic code and the instruction characteristic code sequence are directly generated according to the operation instruction including the virus information, or generated according to the opcode and the character string or wildcard of the operand including the virus information.