1. A computer-implemented method for analyzing mobile applications for malware, the method comprising: receiving a mobile application from an application server; loading the mobile application into an emulated environment, the emulated environment simulating a mobile device; performing static analysis on the application to determine a plurality of simulated user inputs; loading a user interface exerciser configured to simulate the plurality of simulated user inputs in the mobile application and observing resulting behaviors of the simulated mobile device; classifying the behaviors as hard signals or soft signals and combining soft signals to calculate a probability of maliciousness; and classifying the mobile application as malicious or non-malicious based on the hard signals and the probability of maliciousness.