VAHUNT Overview

VAHUNT is a tool to detect app-virtualization-based apps and identify app-virtualization-based malware.

Environment: python 2.7

Main Modules and How to run VAHUNT? 1.App-virtualization-based Engine Detection：Main() in VADetection.py 2.Loading Strategy Detection：Main() in VAMalDetection.py 3.Sample path and record files path are recorded in Config.py. 4.The APImap directory holds the API and permission correspondence documents. 5.The intermediate files during the detection are in APPcode, APPmanifest, dex, resdata directories.