Copying Sonim signature to install apps

Phones Sonim
1

Says the below, but if it works for microg…

Modified APKs
Copying a signature to a modified APK will not work (i.e. it cannot possibly be valid even if the copying itself seems to work) and this is not a tool for doing anything of the sort.

Copying a signature will succeed even if the signature is not valid for the target APK – as long as the target APK is unsigned and not larger than the source APK it can be inserted successfully. But a signature that is not valid for the target APK will never verify.

2

Would it work for sonim that you could only install apps signed by then unless you have root and use a root installer?

3

I have no idea, first I ever heard of this concept.

Send a stock sonim APK, seems the larger the better. May or may not work.

I’m gonna have to read their docs when I’m on my pc

4

Not sure if i have one not on my sonim now @HalachiDev

1 Like
5

i am not pretty sure what the question is can you explain?

6

here’s a stock sonim apk though i highly doubt it would work

App Updater [7.20.29].apk (1.5 MB)

7

Can you send the stock sonim messaging?

9

Messaging.apk (5.1 MB)

10

Signature

messaging-sonim-sig.zip (162.6 KB)

@anonymousfliphones having issues applying the signature to other apks… Tried with g messages, maybe I didn’t unsign it correctly first.

Can someone tell me how to properly unsign an APK?

11

Now that you have the signature i wonder if its possible to resign on top of it with mt @chatzie

12

I’m so confused. I thought you can’t properly sign a app using a signature of another one as long you don’t have the private key

13

apksigcopier doesn’t sign, it copies.

14

but every apps signature needs to שטים with the hash which is obviously different for each app and therefore it won’t verify like you noted before. btw apktool m can also copy signatures I think

1 Like
15

Exactly. But it seems to have been done with microg and Google’s signature.

16

meaning?

17

Meaning it is not the same APK…

I’m not so knowledgeable on these things.

18

Doesn’t work for sonim

19

Someone with a sonim try installing this:

out.apk (4.9 MB)

Probably won’t work but try anyway. Copied signature from the sonim messaging app with apksigcopier.

This APK:

Viewing on mt manager :down_arrow:

Screenshot_20250831-151659_bin.mt.plus.canary
Screenshot_20250831-151659_bin.mt.plus.canary1202×2644 383 KB

It’s @TripleU dummy browser. Just needed any unsigned APK.

It may have failed verification, but same thing for the microg one from that repo I linked.

Screenshot_20250831-152051_bin.mt.plus.canary
Screenshot_20250831-152051_bin.mt.plus.canary1226×2557 371 KB

20

I doubt it will install but if it does then definitely

Need someone with a sonim to try it

21

From the 3800?