I'm reverse engineering a very popular Android app.
They perform some type of signature verification on the APK, however they do it without:
- Instantiating a
- Calling native functions(there is a native library with signature verification code, however it has no
JNI_onLoadand the function is not called)
- Directly accessing the
- Utilizing SafetyNet
I have verified that the APK is performing signature verification and not any other type of tamper-detection by resigning the APK and not modifying any files.
The only thing I can think of is that the APK is using reflection to call a method whose signature is encrypted or encoded.