// REFERENCE

DEX (Android) signature

Signature (hex): 64 65 78 0A (dex\n) High risk

Android (Dalvik) bytecode starts with 64 65 78 0A (dex\n) followed by the version. It lives inside the APK (which is a ZIP); it's what you analyze when studying mobile malware.

Related tools

Work with this in:

Related

Signatures verifiable with CyberEscudo's magic-bytes identifier. Educational content.