Because the APK is protected to prevent leechers from cracking it.
Just a false positive. The APK does not ask for permissions like reading your files, read your SMS, read your calls etc, nothing to be worried about.
And you are welcomed to upload apk file to virustotal.com to check.