{"id":354,"date":"2015-07-08T11:21:25","date_gmt":"2015-07-08T19:21:25","guid":{"rendered":"http:\/\/www.pnfsoftware.com\/blog\/?p=354"},"modified":"2018-12-19T13:38:36","modified_gmt":"2018-12-19T21:38:36","slug":"android-oat-elf-jeb2-plugin","status":"publish","type":"post","link":"https:\/\/www.pnfsoftware.com\/blog\/android-oat-elf-jeb2-plugin\/","title":{"rendered":"Android Dalvik, inside OAT, inside ELF"},"content":{"rendered":"<p>As a follow up to our last blog on <a href=\"https:\/\/www.pnfsoftware.com\/blog\/2015\/07\/02\/jeb2-plugins\/\">Adobe PDF and Microsoft XLS\u00a0plugins for JEB2<\/a>, here is another example of deep analysis support in the case of nested artifacts, as is the case for Android pre-compiled native apps.<\/p>\n<p>Those apps are run using ART, the newest\u00a0Android Runtime. They are native Linux ELF .so files, embedding a custom Android OAT file, which in turns contains one or more Dalvik DEX bytecode files. See the pictures below for an example:<\/p>\n<p><a href=\"http:\/\/www.pnfsoftware.com\/blog\/wp-content\/uploads\/2015\/07\/jeb2-elf-oat-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-355\" src=\"http:\/\/www.pnfsoftware.com\/blog\/wp-content\/uploads\/2015\/07\/jeb2-elf-oat-1-300x190.png\" alt=\"jeb2-elf-oat-1\" width=\"300\" height=\"190\" srcset=\"https:\/\/www.pnfsoftware.com\/blog\/wp-content\/uploads\/2015\/07\/jeb2-elf-oat-1-300x190.png 300w, https:\/\/www.pnfsoftware.com\/blog\/wp-content\/uploads\/2015\/07\/jeb2-elf-oat-1-1024x650.png 1024w, https:\/\/www.pnfsoftware.com\/blog\/wp-content\/uploads\/2015\/07\/jeb2-elf-oat-1-624x396.png 624w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a> <a href=\"http:\/\/www.pnfsoftware.com\/blog\/wp-content\/uploads\/2015\/07\/jeb2-elf-oat-2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-356\" src=\"http:\/\/www.pnfsoftware.com\/blog\/wp-content\/uploads\/2015\/07\/jeb2-elf-oat-2-300x190.png\" alt=\"jeb2-elf-oat-2\" width=\"300\" height=\"190\" srcset=\"https:\/\/www.pnfsoftware.com\/blog\/wp-content\/uploads\/2015\/07\/jeb2-elf-oat-2-300x190.png 300w, https:\/\/www.pnfsoftware.com\/blog\/wp-content\/uploads\/2015\/07\/jeb2-elf-oat-2-1024x650.png 1024w, https:\/\/www.pnfsoftware.com\/blog\/wp-content\/uploads\/2015\/07\/jeb2-elf-oat-2-624x396.png 624w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>The ELF and OAT plugins will be open sourced.<\/p>\n<p>Stay tuned for more news within the next few days!<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As a follow up to our last blog on Adobe PDF and Microsoft XLS\u00a0plugins for JEB2, here is another example of deep analysis support in the case of nested artifacts, as is the case for Android pre-compiled native apps. Those apps are run using ART, the newest\u00a0Android Runtime. They are native Linux ELF .so files, &hellip; <a href=\"https:\/\/www.pnfsoftware.com\/blog\/android-oat-elf-jeb2-plugin\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Android Dalvik, inside OAT, inside ELF<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15,8],"tags":[],"class_list":["post-354","post","type-post","status-publish","format-standard","hentry","category-android","category-jeb2"],"_links":{"self":[{"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/posts\/354","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/comments?post=354"}],"version-history":[{"count":0,"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/posts\/354\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/media?parent=354"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/categories?post=354"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/tags?post=354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}