1. A method for detecting a malicious file in a mobile terminal, the method comprising: providing a processor and a memory, the memory having stored thereon: determining whether a file to be examined is an executable file; when the file is an executable file, examining whether the file is a malicious file that can cause unapproved communication based on a predetermined examination condition, wherein examining whether the file is malicious includes: determining whether the file uses a call connection API; determining whether the file uses a GUI creation API; and determining that the file is malicious, when the file uses the call connection API but does not use the GUI creation API; and outputting the result of examining whether the file is the malicious file.