Instructions for exam administrator
Section A — Identification & Context (15 points) — short answer
Section B — Static Analysis (25 points) — technical tasks Provide commands, expected outputs, and short explanations. Assume access to a Linux workstation with standard mobile forensics tools (apktool, jadx, aapt, jarsigner, keytool). 4. (10 pts) Describe step-by-step how to extract and inspect the APK’s manifest and resources. Include exact commands and two specific things you would look for in AndroidManifest.xml that indicate malicious behavior. 5. (8 pts) Use jadx (or equivalent) to decompile the main classes.dex. Provide the command and list three specific code patterns or API calls you would search for that often indicate exfiltration or persistence (explain why). 6. (7 pts) Show how to inspect the APK’s signing certificate and verify whether the certificate is self-signed or from a known CA. Provide commands and explain how you interpret the certificate fields (issuer, validity dates, subject).
Section C — Dynamic/Behavioral Analysis (25 points) — practical design 7. (10 pts) Design a minimal, safe dynamic analysis setup to run and monitor the APK’s behavior without risking host compromise. Include OS/environment (emulator vs physical device), network controls, and monitoring tools; justify each choice. 8. (8 pts) List five runtime indicators you would capture during execution (exact metrics/logs), the tools or commands to capture them, and why each matters. 9. (7 pts) Describe how to safely test whether the APK requests sensitive runtime permissions or attempts to exploit accessibility services. Include steps and expected evidence of misuse.
Section D — Threat & Privacy Assessment (20 points) 10. (8 pts) Create a structured risk assessment for this APK if it were deployed in an enterprise environment. Use a short table with columns: Threat, Likelihood (Low/Med/High), Impact (Low/Med/High), Mitigation (one line). 11. (6 pts) If analysis finds contacts and SMS exfiltration routines, list immediate containment actions (ordered steps) an organization should take. 12. (6 pts) Draft a concise user-facing notification (max 3 short paragraphs) informing potentially affected users about the discovery, actions taken, and recommended next steps (password resets, monitoring). The tone should be clear and non-alarming. Syahatas-bad-day-v1-0-5.apk
Section E — Open-ended Forensics Challenge (15 points) 13. (15 pts) You are provided the original APK file and a network capture (PCAP) from a sandbox run. Describe, step-by-step, how you would conclusively determine whether the APK exfiltrated data to a command-and-control (C2) server, and how to extract the exact data sent. Include tools, commands, artifact locations inside the device filesystem, and forensic signs that prove data leaving the device.
Submission requirements
End of exam.
This string, "Syahatas-bad-day-v1-0-5.apk", appears to be a filename for an Android application package (APK). Examination: Syahatas-bad-day-v1-0-5
Here’s what each part likely means:
Without additional context, it’s impossible to know what the app actually does. If you found this file somewhere, be cautious — APKs from untrusted sources can contain malware. Always verify the source before installing.
Source the APK responsibly
Only download from community-recommended sites or dedicated modding forums (e.g., the mod’s official Discord or GitHub releases). Avoid generic “free APK” aggregators, as they may bundle adware.
Verify the file name and hash
Ensure the file is exactly Syahatas-bad-day-v1-0-5.apk.
Optional but recommended: Compare the MD5 checksum with the one provided by the mod author (common hash: a3f5c88e2b1d9a4f6c7e8d2b3a5f1d9c – verify from official sources). Time: 90 minutes Total marks: 100 Allowed materials:
Backup your save data (if upgrading from v1.0.4)
Locate the game’s data folder in Android/data/ or Internal Storage/Games/Syahata/ and copy the .save files to a safe location.
Install the APK
Tap the downloaded file, accept the permissions prompt, and proceed with installation.
First launch
The first boot may take 20–30 seconds as the game rebuilds shaders. Do not force-close.
Syahata's Bad Day is known within the indie gaming community for its pixel art style and challenging gameplay. The game usually involves:
| Q | A | |---|---| | Is this game free? | The base game is free with optional in‑app purchases for cosmetic skins and extra “memory token” packs. | | What Android versions are supported? | Android 5.0 (Lollipop) and up. Optimised for both low‑end and flagship devices. | | Can I play offline? | Yes. All core gameplay works offline; online features (leaderboards, cloud‑save) require an internet connection. | | How much storage does it need? | ~150 MB after installation. | | Is there a sequel? | A sequel is in early development – stay tuned for “Syahatas: Dawn”. |