1. A method of detecting a tampered application, the method comprising: acquiring a package of an application; extracting and installing a first execution code from the acquired package of the application; extracting a second execution code from the package of the application when an execution command of the application is received after the first execution code is installed; and performing a preset operation when the second execution code differs from the first execution code.