Android APK Analyzer

What it does

The analyzer performs static triage on an APK and produces a report an investigator can act on. It inspects the file without executing it, so a suspect application never runs on the analyst's machine during the scan.

Results are a starting point, not a verdict. They're built to point an investigator toward the manifest entries, permissions, and code paths worth a closer, manual look.

Capabilities

• Static analysis engine Core analyzer parses and reports on the APK without decompiling it into a running process.
• YARA rule matching (optional) Add rule files under a rules folder to flag known patterns during a scan. Skipped automatically if yara-python isn't installed.
• Threat intel lookups (optional, off by default) VirusTotal and AbuseIPDB checks only run if VT_API_KEY or ABUSEIPDB_API_KEY are set as environment variables. Nothing is uploaded just by selecting a file.
• Windows GUI android_forensic_gui.py wraps the core analyzer in a desktop interface, built into a single EXE by the included PyInstaller spec.

Evidence handling

Static triage findings are leads, not conclusions — a clean scan doesn't rule out malicious behaviour, and every flagged item still needs manual review or, where warranted, dynamic testing in an isolated environment.

Building the EXE

The package ships as Python source. setup_and_build.bat handles the rest on a Windows machine.

1. Install Python

   Python 3.11 or newer, with "Add Python to PATH" checked during setup.

2. Keep all files together

   Extract the source package into one folder — the build script expects everything alongside it.

3. Run setup_and_build.bat

   It installs requests and cryptography first, then PyInstaller, then tries yara-python (scans still work without it).

4. Collect the EXE

   PyInstaller writes AndroidAPKAnalyzerV3.exe to the dist folder, and the script offers to add a desktop shortcut.

Requirements

Download

Prefer not to install anything? Use the in-browser scanner instead — same static triage, no build required.