{"action":"created","issue":{"url":"https://api.github.com/repos/iBotPeaches/Apktool/issues/964","labels_url":"https://api.github.com/repos/iBotPeaches/Apktool/issues/964/labels{/name}","comments_url":"https://api.github.com/repos/iBotPeaches/Apktool/issues/964/comments","events_url":"https://api.github.com/repos/iBotPeaches/Apktool/issues/964/events","html_url":"https://github.com/iBotPeaches/Apktool/issues/964","id":82468881,"number":964,"title":"Could not decode arsc file","user":{"login":"srasthofer","id":3647928,"avatar_url":"https://avatars.githubusercontent.com/u/3647928?v=3","gravatar_id":"","url":"https://api.github.com/users/srasthofer","html_url":"https://github.com/srasthofer","followers_url":"https://api.github.com/users/srasthofer/followers","following_url":"https://api.github.com/users/srasthofer/following{/other_user}","gists_url":"https://api.github.com/users/srasthofer/gists{/gist_id}","starred_url":"https://api.github.com/users/srasthofer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/srasthofer/subscriptions","organizations_url":"https://api.github.com/users/srasthofer/orgs","repos_url":"https://api.github.com/users/srasthofer/repos","events_url":"https://api.github.com/users/srasthofer/events{/privacy}","received_events_url":"https://api.github.com/users/srasthofer/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/iBotPeaches/Apktool/labels/Accepted","name":"Accepted","color":"009800"},{"url":"https://api.github.com/repos/iBotPeaches/Apktool/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-05-29T15:18:54Z","updated_at":"2015-06-03T12:00:52Z","closed_at":null,"body":"During the decompilation of a malicious apk, I get the following exception:\r\n\r\n```\r\njava -jar apktool_2.0.0rc5.jar d -o /OUTPUT/ /HippoSMS/5c70988fc9751f283b2f2b5733f9e7f2a54afa69.apk \r\nI: Using Apktool 2.0.0 on 5c70988fc9751f283b2f2b5733f9e7f2a54afa69.apk\r\nI: Loading resource table...\r\nException in thread \"main\" brut.androlib.AndrolibException: Could not decode arsc file\r\n\tat brut.androlib.res.decoder.ARSCDecoder.decode(ARSCDecoder.java:52)\r\n\tat brut.androlib.res.AndrolibResources.getResPackagesFromApk(AndrolibResources.java:538)\r\n\tat brut.androlib.res.AndrolibResources.loadMainPkg(AndrolibResources.java:63)\r\n\tat brut.androlib.res.AndrolibResources.getResTable(AndrolibResources.java:55)\r\n\tat brut.androlib.Androlib.getResTable(Androlib.java:64)\r\n\tat brut.androlib.ApkDecoder.setTargetSdkVersion(ApkDecoder.java:209)\r\n\tat brut.androlib.ApkDecoder.decode(ApkDecoder.java:92)\r\n\tat brut.apktool.Main.cmdDecode(Main.java:165)\r\n\tat brut.apktool.Main.main(Main.java:81)\r\nCaused by: java.io.IOException: Expected: 0x00000008, got: 0x00000002\r\n\tat brut.util.ExtDataInput.skipCheckShort(ExtDataInput.java:56)\r\n\tat brut.androlib.res.decoder.ARSCDecoder.readValue(ARSCDecoder.java:238)\r\n\tat brut.androlib.res.decoder.ARSCDecoder.readEntry(ARSCDecoder.java:201)\r\n\tat brut.androlib.res.decoder.ARSCDecoder.readConfig(ARSCDecoder.java:189)\r\n\tat brut.androlib.res.decoder.ARSCDecoder.readType(ARSCDecoder.java:157)\r\n\tat brut.androlib.res.decoder.ARSCDecoder.readPackage(ARSCDecoder.java:114)\r\n\tat brut.androlib.res.decoder.ARSCDecoder.readTable(ARSCDecoder.java:78)\r\n\tat brut.androlib.res.decoder.ARSCDecoder.decode(ARSCDecoder.java:47)\r\n\t... 8 more\r\n```\r\nHere would be the malicious apk: https://drive.google.com/file/d/0B7mw1J0o156uMS1nNFNiSnY5LUU/view?usp=sharing\r\nPW: infected\r\n\r\nThanks in advance."},"comment":{"url":"https://api.github.com/repos/iBotPeaches/Apktool/issues/comments/108341432","html_url":"https://github.com/iBotPeaches/Apktool/issues/964#issuecomment-108341432","issue_url":"https://api.github.com/repos/iBotPeaches/Apktool/issues/964","id":108341432,"user":{"login":"iBotPeaches","id":611784,"avatar_url":"https://avatars.githubusercontent.com/u/611784?v=3","gravatar_id":"","url":"https://api.github.com/users/iBotPeaches","html_url":"https://github.com/iBotPeaches","followers_url":"https://api.github.com/users/iBotPeaches/followers","following_url":"https://api.github.com/users/iBotPeaches/following{/other_user}","gists_url":"https://api.github.com/users/iBotPeaches/gists{/gist_id}","starred_url":"https://api.github.com/users/iBotPeaches/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iBotPeaches/subscriptions","organizations_url":"https://api.github.com/users/iBotPeaches/orgs","repos_url":"https://api.github.com/users/iBotPeaches/repos","events_url":"https://api.github.com/users/iBotPeaches/events{/privacy}","received_events_url":"https://api.github.com/users/iBotPeaches/received_events","type":"User","site_admin":false},"created_at":"2015-06-03T12:00:52Z","updated_at":"2015-06-03T12:00:52Z","body":"I duplicate. Must be some good trickery to break apktool that early in the decode. "}}