Edit tour

Linux Analysis Report
95sOS6Fo3w.elf

Overview

General Information

Sample name:	95sOS6Fo3w.elf renamed because original name is a hash value
Original sample name:	4a021ffecf0bcad9c4878b9b4190b9b0.elf
Analysis ID:	1432266
MD5:	4a021ffecf0bcad9c4878b9b4190b9b0
SHA1:	bab4086394e006909e0b082fd631b501fb9d44fe
SHA256:	5f725fb0b351b2d17bcfbe821f594e29a8a5aa65640322ec70c2d94e9038e46f
Tags:	32elfmiraipowerpc
Infos:

Detection

Mirai

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected Mirai

Contains symbols with names commonly found in malware

Detected TCP or UDP traffic on non-standard ports

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432266
Start date and time:	2024-04-26 18:57:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	95sOS6Fo3w.elf renamed because original name is a hash value
Original Sample Name:	4a021ffecf0bcad9c4878b9b4190b9b0.elf
Detection:	MAL
Classification:	mal68.troj.linELF@0/1@0/0

Runtime Messages

Command:	/tmp/95sOS6Fo3w.elf
PID:	5563
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

95sOS6Fo3w.elf (PID: 5563, Parent: 5477, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/95sOS6Fo3w.elf

95sOS6Fo3w.elf New Fork (PID: 5565, Parent: 5563)

95sOS6Fo3w.elf New Fork (PID: 5567, Parent: 5563)

95sOS6Fo3w.elf New Fork (PID: 5569, Parent: 5567)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
95sOS6Fo3w.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
5563.1.00007f6bcc001000.00007f6bcc016000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5569.1.00007f6bcc001000.00007f6bcc016000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 95sOS6Fo3w.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: 95sOS6Fo3w.elf	Virustotal: Detection: 33%			Perma Link
Source: 95sOS6Fo3w.elf	ReversingLabs: Detection: 39%

Source: global traffic

TCP traffic: 192.168.2.14:43696 -> 93.123.85.49:1337

Source: /tmp/95sOS6Fo3w.elf (PID: 5563)

Socket: 127.0.0.1::24232

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.49

System Summary

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_get_opt_str
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_method_greeth
Source: ELF static info symbol of initial sample	Name: attack_method_greip
Source: ELF static info symbol of initial sample	Name: attack_method_handshake
Source: ELF static info symbol of initial sample	Name: attack_method_http
Source: ELF static info symbol of initial sample	Name: attack_method_tcpack

Source: /tmp/95sOS6Fo3w.elf (PID: 5565)	SIGKILL sent: pid: 5569, result: successful	Jump to behavior
Source: /tmp/95sOS6Fo3w.elf (PID: 5565)	SIGKILL sent: pid: 5581, result: successful	Jump to behavior
Source: /tmp/95sOS6Fo3w.elf (PID: 5565)	SIGKILL sent: pid: 5582, result: successful	Jump to behavior
Source: /tmp/95sOS6Fo3w.elf (PID: 5565)	SIGKILL sent: pid: 5583, result: successful	Jump to behavior
Source: /tmp/95sOS6Fo3w.elf (PID: 5565)	SIGKILL sent: pid: 5584, result: successful	Jump to behavior
Source: /tmp/95sOS6Fo3w.elf (PID: 5565)	SIGKILL sent: pid: 5652, result: successful	Jump to behavior
Source: /tmp/95sOS6Fo3w.elf (PID: 5565)	SIGKILL sent: pid: 5679, result: successful	Jump to behavior
Source: /tmp/95sOS6Fo3w.elf (PID: 5565)	SIGKILL sent: pid: 5684, result: successful	Jump to behavior
Source: /tmp/95sOS6Fo3w.elf (PID: 5565)	SIGKILL sent: pid: 5686, result: successful	Jump to behavior

Source: classification engine

Classification label: mal68.troj.linELF@0/1@0/0

Source: /tmp/95sOS6Fo3w.elf (PID: 5563)

Queries kernel information via 'uname':

Jump to behavior

Source: 95sOS6Fo3w.elf, 5563.1.00005620401d7000.00005620402c7000.rw-.sdmp, 95sOS6Fo3w.elf, 5569.1.00005620401d7000.00005620402c7000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc1
Source: 95sOS6Fo3w.elf, 5569.1.00005620401d7000.00005620402c7000.rw-.sdmp	Binary or memory string: #/etc/qemu-binfmt/ppc/proc/5565e/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe
Source: 95sOS6Fo3w.elf, 5563.1.00005620401d7000.00005620402c7000.rw-.sdmp, 95sOS6Fo3w.elf, 5569.1.00005620401d7000.00005620402c7000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: 95sOS6Fo3w.elf, 5563.1.00007fffb4bf8000.00007fffb4c19000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.uVUCYR
Source: 95sOS6Fo3w.elf, 5563.1.00007fffb4bf8000.00007fffb4c19000.rw-.sdmp, 95sOS6Fo3w.elf, 5569.1.00007fffb4bf8000.00007fffb4c19000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc
Source: 95sOS6Fo3w.elf, 5563.1.00007fffb4bf8000.00007fffb4c19000.rw-.sdmp, 95sOS6Fo3w.elf, 5569.1.00007fffb4bf8000.00007fffb4c19000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-ppc/tmp/95sOS6Fo3w.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/95sOS6Fo3w.elf
Source: 95sOS6Fo3w.elf, 5563.1.00007fffb4bf8000.00007fffb4c19000.rw-.sdmp	Binary or memory string: Hx= V)dC= V/tmp/qemu-open.uVUCYR\
Source: 95sOS6Fo3w.elf, 5569.1.00005620401d7000.00005620402c7000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc/proc/5565e/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe/exe

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 95sOS6Fo3w.elf, type: SAMPLE
Source: Yara match	File source: 5563.1.00007f6bcc001000.00007f6bcc016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5569.1.00007f6bcc001000.00007f6bcc016000.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 95sOS6Fo3w.elf, type: SAMPLE
Source: Yara match	File source: 5563.1.00007f6bcc001000.00007f6bcc016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5569.1.00007f6bcc001000.00007f6bcc016000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
95sOS6Fo3w.elf	33%	Virustotal		Browse
95sOS6Fo3w.elf	39%	ReversingLabs	Linux.Trojan.Gafgyt
95sOS6Fo3w.elf	100%	Avira	EXP/ELF.Gafgyt.Z.H

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
93.123.85.49	unknown	Bulgaria		43561	NET1-ASBG	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
93.123.85.49	7485bZ2fug.elf	Get hash	malicious	Mirai	Browse
	J8jOJ7v2Ia.elf	Get hash	malicious	Mirai	Browse
	PEpo0zJJNd.elf	Get hash	malicious	Mirai	Browse
	T8sNy3k1cO.elf	Get hash	malicious	Mirai	Browse
	vz8qgkjO5C.elf	Get hash	malicious	Mirai	Browse
	2lW3G5j0iO.elf	Get hash	malicious	Mirai	Browse
	OLsYt9TnuN.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
NET1-ASBG	mG0CUyFnyP.elf	Get hash	malicious	Gafgyt	Browse	94.156.79.48
	RsrhTw5KFy.elf	Get hash	malicious	Gafgyt	Browse	94.156.79.48
	5JWSChksKD.elf	Get hash	malicious	Gafgyt	Browse	94.156.79.48
	0ll10IxBC6.elf	Get hash	malicious	Gafgyt	Browse	94.156.79.48
	7485bZ2fug.elf	Get hash	malicious	Mirai	Browse	93.123.85.49
	O67YVCzJU1.elf	Get hash	malicious	Gafgyt	Browse	94.156.79.48
	BXj2uizaOx.elf	Get hash	malicious	Gafgyt	Browse	94.156.79.48
	J8jOJ7v2Ia.elf	Get hash	malicious	Mirai	Browse	93.123.85.49
	PEpo0zJJNd.elf	Get hash	malicious	Mirai	Browse	93.123.85.49
	4l1WmmaR1d.elf	Get hash	malicious	Gafgyt	Browse	94.156.79.48

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.uVUCYR (deleted)

Download File

Process:	/tmp/95sOS6Fo3w.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	3.4877215681821223
Encrypted:	false
SSDEEP:	6:MkgDFYBODWgp7VoV/NaDFYBODWB4SV/+M4/VfKoO/VNfiY/VH:Mp4Oz7VwA4OkVmMfl
MD5:	B50B7EA4FD9A31D8FFD14BA020EDFF1B
SHA1:	4C9FC2F2F0EC25A69F4A6B771FC8B8ED7C5ECC6E
SHA-256:	8214D8FD39AEE5D3E978B0B06044CF894E1E0B0A4B02058C769B9A37E27D5F7D
SHA-512:	0E66014EEC126B3A47394BF19E565D8DAE397C1B7C09EA2AE3CF43F3A9E03B51F786E27CD862DA914CB351AFB411B4CCEDAF9AFD1C508F306220D845CBE5E5E1
Malicious:	false
Reputation:	low
Preview:	10000000-10015000 r-xp 00000000 fd:00 531606 /tmp/95sOS6Fo3w.elf.10025000-10026000 rwxp 00015000 fd:00 531606 /tmp/95sOS6Fo3w.elf.10026000-10029000 rwxp 00000000 00:00 0 .10029000-1002a000 rw-p 00000000 00:00 0 .ff7fe000-ff7ff000 ---p 00000000 00:00 0 .ff7ff000-fffff000 rw-p 00000000 00:00 0 [stack].

Static File Info

General

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.1672534350305055
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	95sOS6Fo3w.elf
File size:	110'706 bytes
MD5:	4a021ffecf0bcad9c4878b9b4190b9b0
SHA1:	bab4086394e006909e0b082fd631b501fb9d44fe
SHA256:	5f725fb0b351b2d17bcfbe821f594e29a8a5aa65640322ec70c2d94e9038e46f
SHA512:	d3b75f84654cac4f57af111fdb9c10be9b2d0b7df7d99f3e45a9a1ea1ce3ad91665c94a078465d82241c10e42770a1d279d9c805a5fb69ec372693105ffc1603
SSDEEP:	1536:j31z+Re6iXjrAL+BqA6mJt5ZdeW5yN8n3vStwqyRI2h9iJhaK89Rio:jJ+8ZnALkDJt5ZddcN8fry4i6Ks7
TLSH:	B4B34A1233290B57D06B8DF01DEF57F083E6EC9219B67648A51EBF940673BB11486F8A
File Content Preview:	.ELF...........................4..]......4. ...(......................H...H...............P...P...P.......=D..............PT..PT..PT................dt.Q.............................!..\|......$H...H.'1...$8!. \|...N.. .!..\|.......?.........R...../...@..`= .

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x10000218
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	89540
Section Header Size:	40
Number of Section Headers:	19
Header String Table Index:	16

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x100000b4	0xb4	0x24	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100000d8	0xd8	0x12788	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x10012860	0x12860	0x20	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x10012880	0x12880	0x2028	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x10025000	0x15000	0x54	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x10025054	0x15054	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x10025054	0x15054	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x1002505c	0x1505c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x10025064	0x15064	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x10025068	0x15068	0x1cc	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x10025234	0x15234	0x10	0x4	0x7	WAX	0	0	4
.sdata	PROGBITS	0x10025244	0x15244	0x40	0x0	0x3	WA	0	0	4
.sbss	NOBITS	0x10025284	0x15284	0x78	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x100252fc	0x15284	0x3a48	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x15284	0xac2	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x15d46	0x7e	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x160bc	0x2cf0	0x10	0x0		18	253	4
.strtab	STRTAB	0x0	0x18dac	0x22c6	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000000	0x10000000	0x148a8	0x148a8	6.2817	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x15000	0x10025000	0x10025000	0x284	0x3d44	3.9830	0x7	RWE	0x10000	.eh_frame .tbss .ctors .dtors .jcr .data .got .sdata .sbss .bss
TLS	0x15054	0x10025054	0x10025054	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x100000b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100000d8	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x10012860	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x10012880	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x10025000	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x10025054	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x10025054	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x1002505c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x10025064	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x10025068	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x10025234	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x10025244	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x10025284	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x100252fc	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
C.21.5400	.symtab	0x10012d58	1024	OBJECT	<unknown>	DEFAULT	4
C.3.5322	.symtab	0x100144ec	12	OBJECT	<unknown>	DEFAULT	4
C.3.6052	.symtab	0x1001347c	12	OBJECT	<unknown>	DEFAULT	4
C.3.6106	.symtab	0x10014810	12	OBJECT	<unknown>	DEFAULT	4
C.4.5416	.symtab	0x10013464	24	OBJECT	<unknown>	DEFAULT	4
C.4.6053	.symtab	0x10013488	12	OBJECT	<unknown>	DEFAULT	4
C.6.6061	.symtab	0x10013494	12	OBJECT	<unknown>	DEFAULT	4
C.7.5462	.symtab	0x100144f8	12	OBJECT	<unknown>	DEFAULT	4
LOCAL_ADDR	.symtab	0x1002528c	4	OBJECT	<unknown>	DEFAULT	13
_Exit	.symtab	0x1000f11c	92	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x10025238	0	OBJECT	<unknown>	HIDDEN	11
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_SDA_BASE_	.symtab	0x1002d244	0	NOTYPE	<unknown>	DEFAULT	12
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x10025058	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x10025054	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x1002527c	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x10014510	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x10025060	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x1002505c	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x10025000	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x10025050	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x1002527c	4	OBJECT	<unknown>	HIDDEN	12
__GI___close	.symtab	0x1000e8e0	116	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x1000e8ec	16	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x10025280	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location	.symtab	0x10009d84	20	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x10009444	116	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1001152c	312	FUNC	<unknown>	HIDDEN	2
__GI___fputc_unlocked	.symtab	0x1000b414	292	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x1000baa0	48	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x1000e8e0	116	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x100094b8	236	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x1000e954	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x1000ea5c	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x1000e9d8	132	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x1000e954	132	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x1000e960	16	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x1000ea5c	132	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x1000ea68	16	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x1000ec5c	144	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x1000ed4c	100	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x1000e9d8	132	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x1000e9e4	16	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x1000bad0	284	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x1000f11c	92	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1000d6d0	248	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x1000be94	120	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x1000dce8	12	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x1000bf0c	52	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1001212c	52	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x1000e8e0	116	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x100099b0	212	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x1000f9a0	80	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1000f9f0	84	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x1000f66c	820	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x1000bf74	120	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x1000deb4	136	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x1000fb6c	640	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x100094b8	236	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x10011244	744	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x10010e04	304	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1001152c	312	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x10010f34	244	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x10011664	196	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1000fdec	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1000e340	824	FUNC	<unknown>	HIDDEN	2
__GI_fputc_unlocked	.symtab	0x1000b414	292	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x1000b538	92	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x100122ec	16	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x100122fc	404	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1000f178	124	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x1000b594	192	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1001152c	312	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1000f2a4	56	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1000f2dc	16	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1000f2ec	16	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1000f2fc	16	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x1000f30c	28	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x1000e678	56	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x1000f328	52	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x1000bfec	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x1000f35c	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x1000be2c	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x10011c9c	208	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x1000db1c	236	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x10009360	228	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1000bbec	44	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x100095b4	52	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x1000c054	52	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x10012784	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x10011728	264	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x1000b654	156	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x1000b6f0	164	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x10011830	52	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x10011864	244	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x1000b794	144	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1000f36c	52	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1000f3a0	52	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x1000f3d4	52	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1000f43c	112	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x1000e954	132	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x10009b3c	208	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x100095e8	52	FUNC	<unknown>	HIDDEN	2
__GI_printf	.symtab	0x10009ee4	144	FUNC	<unknown>	HIDDEN	2
__GI_putc_unlocked	.symtab	0x1000b414	292	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1000e6b0	148	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x1000d7cc	104	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x1000d99c	140	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x1000ea5c	132	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x10009cc4	192	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x1000f5a8	196	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x10009650	52	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x1000c0bc	128	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x1000c170	144	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1000f4ac	116	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x100096b8	136	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x1000c234	128	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x1000c2e8	144	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x10009740	52	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x1000c378	52	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x1000dc08	224	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x10011d6c	36	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1000f520	120	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x1000e744	292	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x1000c3ac	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x1000da28	244	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x10009774	124	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x10011958	256	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x10011a58	248	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x10011b50	52	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x10011b50	52	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x10011b84	96	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x1000b824	160	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x1000b8c4	236	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x10011be4	112	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x10011c54	72	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x1000b9b0	240	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1000dcf4	8	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x1000e084	624	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x1000bc18	156	FUNC	<unknown>	HIDDEN	2
__GI_tcsetattr	.symtab	0x1000bcb4	376	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x100097f0	16	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x1000f598	16	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x1000a17c	284	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1000fa44	92	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1000fab0	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1000faa0	16	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x1000e9d8	132	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x10025064	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x10025064	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x100252c8	4	OBJECT	<unknown>	HIDDEN	13
__atexit_lock	.symtab	0x1002521c	24	OBJECT	<unknown>	DEFAULT	10
__bss_start	.symtab	0x10025284	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x1000ecec	96	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x1000e8e0	116	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x1000e8ec	16	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x10025280	4	OBJECT	<unknown>	DEFAULT	12
__curbrk	.symtab	0x100252f8	4	OBJECT	<unknown>	DEFAULT	13
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x100127f4	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100000d8	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x10025068	0	OBJECT	<unknown>	HIDDEN	10
__environ	.symtab	0x100252c0	4	OBJECT	<unknown>	DEFAULT	13
__errno_location	.symtab	0x10009d84	20	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x100252ac	4	OBJECT	<unknown>	HIDDEN	13
__fcntl_nocancel	.symtab	0x10009444	116	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1001152c	312	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__fork	.symtab	0x1000e340	824	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x100252b0	4	OBJECT	<unknown>	HIDDEN	13
__fork_handlers	.symtab	0x100252b4	4	OBJECT	<unknown>	HIDDEN	13
__fork_lock	.symtab	0x100252b8	4	OBJECT	<unknown>	HIDDEN	13
__fputc_unlocked	.symtab	0x1000b414	292	FUNC	<unknown>	DEFAULT	2
__getdents	.symtab	0x1000f1f4	176	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x10012194	344	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x1000f30c	28	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x1000e678	56	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x1000baa0	48	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__libc_accept	.symtab	0x1000be94	120	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x1000e8e0	116	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x1000bf74	120	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x1000eae0	124	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x1000eb5c	172	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	6
__libc_fcntl	.symtab	0x100094b8	236	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1000e340	824	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	6
__libc_nanosleep	.symtab	0x1000f43c	112	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x1000e954	132	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x1000ea5c	132	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x1000c0bc	128	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x1000c170	144	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x100096b8	136	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x1000c234	128	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x1000c2e8	144	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x10011e1c	464	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x10011d6c	36	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x100252bc	4	OBJECT	<unknown>	DEFAULT	13
__libc_write	.symtab	0x1000e9d8	132	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x1000e868	120	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x1000d2b8	460	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x1000c3e0	112	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x10025140	24	OBJECT	<unknown>	DEFAULT	10
__malloc_state	.symtab	0x100289cc	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x1000d200	184	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x1000e954	132	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x1000e960	16	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x100252c4	4	OBJECT	<unknown>	DEFAULT	13
__preinit_array_end	.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x10025274	4	OBJECT	<unknown>	DEFAULT	12
__progname_full	.symtab	0x10025278	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal	.symtab	0x10011fec	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x1000ec10	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x1000ec08	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x1000ec08	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x1000ec08	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x1000ec08	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x1000ea5c	132	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x1000ea68	16	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__rtld_fini	.symtab	0x100252cc	4	OBJECT	<unknown>	HIDDEN	13
__sigjmp_save	.symtab	0x1001272c	88	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x10012080	172	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x1002525c	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ	.symtab	0x10012490	120	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1000fdf8	264	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x10012508	212	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x100102e8	364	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x100125dc	72	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x100126d4	88	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x10012624	176	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x10010454	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1000a130	76	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x10025260	4	OBJECT	<unknown>	DEFAULT	12
__sys_accept	.symtab	0x1000be60	52	FUNC	<unknown>	DEFAULT	2
__sys_connect	.symtab	0x1000bf40	52	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x1000c088	52	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x1000c13c	52	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x1000c200	52	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x1000c2b4	52	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x1000f0f8	28	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x1000f408	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x10012160	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x10009684	52	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x1000ec5c	144	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x1000ed4c	100	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x1000edb0	840	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x10025270	4	OBJECT	<unknown>	HIDDEN	12
__write	.symtab	0x1000e9d8	132	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x1000e9e4	16	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x1000bad0	284	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x100098e4	204	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x10009800	228	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x10028340	10	OBJECT	<unknown>	DEFAULT	14
_charpad	.symtab	0x1000a298	100	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x1002897c	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x100289a4	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x1002526c	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init	.symtab	0x10011ff8	28	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x10012014	108	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x100252f0	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x100252f4	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_dtv_gaps	.symtab	0x100252e4	1	OBJECT	<unknown>	DEFAULT	13
_dl_tls_dtv_slotinfo_list	.symtab	0x100252e0	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_generation	.symtab	0x100252e8	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_max_dtv_idx	.symtab	0x100252d8	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_setup	.symtab	0x10011dcc	80	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x100252d4	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_nelem	.symtab	0x100252ec	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_size	.symtab	0x100252dc	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_used	.symtab	0x100252d0	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x10025284	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x10028d44	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x1000f11c	92	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x10012860	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x10026340	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x1000a2fc	152	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1001070c	1784	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x100000b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x10010558	128	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x1000aa8c	188	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x1000ae44	1488	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x1000ab48	92	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x1000aba4	608	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x1000ae04	64	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1000ec24	56	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x1000ec18	12	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x1000f114	8	FUNC	<unknown>	DEFAULT	2
_start	.symtab	0x10000218	72	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1000ff00	1000	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x10009f74	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x10025264	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock	.symtab	0x10026328	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x10011028	540	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x100252a8	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_del_lock	.symtab	0x10026334	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x100252a4	4	OBJECT	<unknown>	DEFAULT	13
_stdio_streams	.symtab	0x10025074	204	OBJECT	<unknown>	DEFAULT	10
_stdio_term	.symtab	0x10009ff4	316	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x10025268	4	OBJECT	<unknown>	DEFAULT	12
_stdlib_strto_l	.symtab	0x1000dcfc	440	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x100105d8	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x10013560	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x10010614	248	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x1000a394	1784	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1000d6d0	248	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
accept	.symtab	0x1000be94	120	FUNC	<unknown>	DEFAULT	2
accept.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x1000dce8	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x1000dce8	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_get_opt_int	.symtab	0x100006e8	132	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0x10000668	128	FUNC	<unknown>	DEFAULT	2
attack_get_opt_str	.symtab	0x10000260	72	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0x1000076c	984	FUNC	<unknown>	DEFAULT	2
attack_method_greeth	.symtab	0x10003778	1588	FUNC	<unknown>	DEFAULT	2
attack_method_greip	.symtab	0x100031c8	1456	FUNC	<unknown>	DEFAULT	2
attack_method_handshake	.symtab	0x100054e8	1736	FUNC	<unknown>	DEFAULT	2
attack_method_http	.symtab	0x10000b44	7556	FUNC	<unknown>	DEFAULT	2
attack_method_tcpack	.symtab	0x10003dac	1668	FUNC	<unknown>	DEFAULT	2
attack_method_tcpgsyn	.symtab	0x10004430	1592	FUNC	<unknown>	DEFAULT	2
attack_method_tcpstomp	.symtab	0x10005bb0	1684	FUNC	<unknown>	DEFAULT	2
attack_method_tcpsyn	.symtab	0x10004a68	1592	FUNC	<unknown>	DEFAULT	2
attack_method_udp	.symtab	0x10002cac	1308	FUNC	<unknown>	DEFAULT	2
attack_method_udphex	.symtab	0x100050a0	784	FUNC	<unknown>	DEFAULT	2
attack_method_udpvse	.symtab	0x100028c8	996	FUNC	<unknown>	DEFAULT	2
attack_parse	.symtab	0x100003bc	684	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0x100002a8	276	FUNC	<unknown>	DEFAULT	2
attacks.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x1002834c	4	OBJECT	<unknown>	DEFAULT	14
bind	.symtab	0x1000bf0c	52	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1001212c	52	FUNC	<unknown>	DEFAULT	2
call___do_global_ctors_aux	.symtab	0x10012844	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x10000170	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x100001fc	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x1000cd60	264	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
check_proc	.symtab	0x10006e4c	664	FUNC	<unknown>	DEFAULT	2
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0x10006244	100	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0x100062a8	188	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x10009d98	56	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x1000e8e0	116	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x100099b0	212	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.5580	.symtab	0x100252fc	0	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x1000bf74	120	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ensure_single_instance	.symtab	0x100074d8	480	FUNC	<unknown>	DEFAULT	2
environ	.symtab	0x100252c0	4	OBJECT	<unknown>	DEFAULT	13
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	6
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exe_access	.symtab	0x10006944	228	FUNC	<unknown>	DEFAULT	2
exit	.symtab	0x1000deb4	136	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x10014838	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x1000fb6c	640	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x100094b8	236	FUNC	<unknown>	DEFAULT	2
fd_ctrl	.symtab	0x10025244	4	OBJECT	<unknown>	DEFAULT	12
fd_serv	.symtab	0x10025248	4	OBJECT	<unknown>	DEFAULT	12
fd_to_DIR	.symtab	0x10009a84	184	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x10009c0c	184	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x10011244	744	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x10010e04	304	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1001152c	312	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x10010f34	244	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x10011664	196	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x10014820	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x1000fdec	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x1000e340	824	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputc_unlocked	.symtab	0x1000b414	292	FUNC	<unknown>	DEFAULT	2
fputc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x1000b538	92	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x1000018c	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x1000d484	524	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x100122ec	16	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x100122ec	16	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x100122fc	404	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x1000f178	124	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x1000b594	192	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x10010e04	304	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x1001152c	312	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x1000f2a4	56	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x1000f2dc	16	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1000f2ec	16	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x1000f2fc	16	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x1000f30c	28	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x1000e678	56	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x100095a4	16	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x1000f328	52	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x1000bfec	52	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x1000c020	52	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x1000f35c	16	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	6
head	.symtab	0x10025290	4	OBJECT	<unknown>	DEFAULT	13
index	.symtab	0x10011958	256	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x1000be2c	52	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x10011c9c	208	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
init_static_tls	.symtab	0x10011d90	60	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x1000d8b0	132	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x1000db1c	236	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x10009360	228	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x1000bbec	44	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x100095b4	52	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_realpath	.symtab	0x10025318	4096	OBJECT	<unknown>	DEFAULT	14
killer_shoot_list	.symtab	0x10006364	496	FUNC	<unknown>	DEFAULT	2
killer_start	.symtab	0x10006554	1008	FUNC	<unknown>	DEFAULT	2
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x1000c054	52	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
local_bind.4870	.symtab	0x10025070	1	OBJECT	<unknown>	DEFAULT	10
locker.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
locker_find	.symtab	0x10006a28	1060	FUNC	<unknown>	DEFAULT	2
locker_getpids	.symtab	0x100072ec	224	FUNC	<unknown>	DEFAULT	2
locker_init	.symtab	0x100073cc	268	FUNC	<unknown>	DEFAULT	2
locker_insert	.symtab	0x100070e4	520	FUNC	<unknown>	DEFAULT	2
lseek64	.symtab	0x10012784	112	FUNC	<unknown>	DEFAULT	2
main	.symtab	0x100076b8	2592	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc	.symtab	0x1000c450	2320	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x1000d690	64	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x10011728	264	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x1000b654	156	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x1000b6f0	164	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x10011830	52	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x10011864	244	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x1000b794	144	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
methods	.symtab	0x10025288	4	OBJECT	<unknown>	DEFAULT	13
methods_len	.symtab	0x10025284	1	OBJECT	<unknown>	DEFAULT	13
mmap	.symtab	0x1000f36c	52	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x1000f3a0	52	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x1000f3d4	52	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x10025158	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x10025170	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x1000f43c	112	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
nprocessors_onln	.symtab	0x1000df3c	328	FUNC	<unknown>	DEFAULT	2
object.5595	.symtab	0x10025300	0	OBJECT	<unknown>	DEFAULT	14
open	.symtab	0x1000e954	132	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x10009b3c	208	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
own_realpath	.symtab	0x100252a0	4	OBJECT	<unknown>	DEFAULT	13
p.5578	.symtab	0x1002506c	0	OBJECT	<unknown>	DEFAULT	10
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pending_connection	.symtab	0x10025298	1	OBJECT	<unknown>	DEFAULT	13
pipe	.symtab	0x100095e8	52	FUNC	<unknown>	DEFAULT	2
pipe.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prctl	.symtab	0x1000961c	52	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6256	.symtab	0x100134a8	12	OBJECT	<unknown>	DEFAULT	4
printf	.symtab	0x10009ee4	144	FUNC	<unknown>	DEFAULT	2
printf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
program_invocation_name	.symtab	0x10025278	4	OBJECT	<unknown>	DEFAULT	12
program_invocation_short_name	.symtab	0x10025274	4	OBJECT	<unknown>	DEFAULT	12
putc_unlocked	.symtab	0x1000b414	292	FUNC	<unknown>	DEFAULT	2
puts	.symtab	0x10009dd0	276	FUNC	<unknown>	DEFAULT	2
puts.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
qual_chars.6264	.symtab	0x100134f0	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x1000e6b0	148	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x1000d7c8	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_alpha_str	.symtab	0x10008198	364	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x10008128	112	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x100080d8	80	FUNC	<unknown>	DEFAULT	2
rand_str	.symtab	0x10008304	256	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x1000d7cc	104	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x100140bc	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x1000d99c	140	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x1002519c	128	OBJECT	<unknown>	DEFAULT	10
read	.symtab	0x1000ea5c	132	FUNC	<unknown>	DEFAULT	2
readdir	.symtab	0x10009cc4	192	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x1000f5a8	196	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readlink	.symtab	0x10009650	52	FUNC	<unknown>	DEFAULT	2
readlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x1000ce68	920	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x1000c0bc	128	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvfrom	.symtab	0x1000c170	144	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rindex	.symtab	0x10011be4	112	FUNC	<unknown>	DEFAULT	2
root	.symtab	0x10025294	4	OBJECT	<unknown>	DEFAULT	13
sbrk	.symtab	0x1000f4ac	116	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x100096b8	136	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x1000c234	128	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x1000c2e8	144	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x10009740	52	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x1000c378	52	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x1000d834	124	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x1000dc08	224	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x10011d6c	36	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigjmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x1000f520	120	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x1000e744	292	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x1000c3ac	52	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
spec_and_mask.6263	.symtab	0x1001351e	16	OBJECT	<unknown>	DEFAULT	4
spec_base.6255	.symtab	0x100134a0	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.6260	.symtab	0x10013530	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.6259	.symtab	0x10013548	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.6262	.symtab	0x1001350e	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.6261	.symtab	0x10013504	9	OBJECT	<unknown>	DEFAULT	4
srand	.symtab	0x1000d934	104	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x1000d934	104	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x1000da28	244	FUNC	<unknown>	DEFAULT	2
srv_addr	.symtab	0x1002888c	16	OBJECT	<unknown>	DEFAULT	14
stat	.symtab	0x10009774	124	FUNC	<unknown>	DEFAULT	2
stat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
static_dtv	.symtab	0x10028658	512	OBJECT	<unknown>	DEFAULT	14
static_map	.symtab	0x10028858	52	OBJECT	<unknown>	DEFAULT	14
static_slotinfo	.symtab	0x10028350	776	OBJECT	<unknown>	DEFAULT	14
stderr	.symtab	0x10025258	4	OBJECT	<unknown>	DEFAULT	12
stdin	.symtab	0x10025250	4	OBJECT	<unknown>	DEFAULT	12
stdout	.symtab	0x10025254	4	OBJECT	<unknown>	DEFAULT	12
strchr	.symtab	0x10011958	256	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x10011a58	248	FUNC	<unknown>	DEFAULT	2
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x10011b50	52	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x10011b50	52	FUNC	<unknown>	DEFAULT	2
strcspn	.symtab	0x10011b84	96	FUNC	<unknown>	DEFAULT	2
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x1000bad0	284	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x1000b824	160	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x1000b8c4	236	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x10011be4	112	FUNC	<unknown>	DEFAULT	2
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x10011c54	72	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x1000b9b0	240	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x1000dcf4	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x1000e084	624	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table	.symtab	0x1002889c	224	OBJECT	<unknown>	DEFAULT	14
table.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table_init	.symtab	0x10008544	1128	FUNC	<unknown>	DEFAULT	2
table_key	.symtab	0x1002524c	4	OBJECT	<unknown>	DEFAULT	12
table_lock_val	.symtab	0x1000842c	140	FUNC	<unknown>	DEFAULT	2
table_retrieve_val	.symtab	0x10008404	40	FUNC	<unknown>	DEFAULT	2
table_unlock_val	.symtab	0x100084b8	140	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x1000bc18	156	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x100053b0	312	FUNC	<unknown>	DEFAULT	2
tcsetattr	.symtab	0x1000bcb4	376	FUNC	<unknown>	DEFAULT	2
tcsetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x100097f0	16	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
times	.symtab	0x1000f598	16	FUNC	<unknown>	DEFAULT	2
times.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
type_codes	.symtab	0x100134cc	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x100134e4	12	OBJECT	<unknown>	DEFAULT	4
unknown.1370	.symtab	0x10013550	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x10025188	20	OBJECT	<unknown>	DEFAULT	10
usleep	.symtab	0x1000e2f4	76	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util_atoi	.symtab	0x10008b3c	308	FUNC	<unknown>	DEFAULT	2
util_itoa	.symtab	0x10008f60	256	FUNC	<unknown>	DEFAULT	2
util_local_addr	.symtab	0x10008c70	172	FUNC	<unknown>	DEFAULT	2
util_memcpy	.symtab	0x10008a98	36	FUNC	<unknown>	DEFAULT	2
util_memsearch	.symtab	0x10008ae0	92	FUNC	<unknown>	DEFAULT	2
util_memset	.symtab	0x100089ac	28	FUNC	<unknown>	DEFAULT	2
util_readlink	.symtab	0x10009060	768	FUNC	<unknown>	DEFAULT	2
util_startswith	.symtab	0x100089c8	48	FUNC	<unknown>	DEFAULT	2
util_strcat	.symtab	0x10008a64	52	FUNC	<unknown>	DEFAULT	2
util_strcmp	.symtab	0x10008e5c	128	FUNC	<unknown>	DEFAULT	2
util_strcpy	.symtab	0x10008a20	68	FUNC	<unknown>	DEFAULT	2
util_strdup	.symtab	0x10008d1c	148	FUNC	<unknown>	DEFAULT	2
util_stristr	.symtab	0x10008db0	172	FUNC	<unknown>	DEFAULT	2
util_strlen	.symtab	0x100089f8	40	FUNC	<unknown>	DEFAULT	2
util_strncmp	.symtab	0x10008edc	132	FUNC	<unknown>	DEFAULT	2
util_zero	.symtab	0x10008abc	36	FUNC	<unknown>	DEFAULT	2
vfprintf	.symtab	0x1000a17c	284	FUNC	<unknown>	DEFAULT	2
vfprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
w	.symtab	0x10026318	4	OBJECT	<unknown>	DEFAULT	14
watchdog_pid	.symtab	0x1002529c	4	OBJECT	<unknown>	DEFAULT	13
wcrtomb	.symtab	0x1000fa44	92	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x1000fab0	188	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x1000faa0	16	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x1000e9d8	132	FUNC	<unknown>	DEFAULT	2
x	.symtab	0x1002631c	4	OBJECT	<unknown>	DEFAULT	14
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
y	.symtab	0x10026320	4	OBJECT	<unknown>	DEFAULT	14
z	.symtab	0x10026324	4	OBJECT	<unknown>	DEFAULT	14

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 18:58:23.525764942 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 18:58:23.769408941 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 18:58:23.769539118 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 18:58:23.769795895 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 18:58:24.017790079 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 18:58:24.017889977 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 18:58:24.261253119 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 18:58:35.807431936 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 18:58:36.051038980 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 18:58:36.051090956 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 18:58:36.051297903 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 18:58:51.391046047 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 18:58:51.391388893 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 18:59:06.638933897 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 18:59:06.639115095 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 18:59:21.889364958 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 18:59:21.889570951 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 18:59:37.135009050 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 18:59:37.135204077 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 18:59:47.820018053 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 18:59:48.063853025 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 18:59:48.064011097 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 19:00:03.343167067 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 19:00:03.343425989 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 19:00:18.586947918 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 19:00:18.587122917 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 19:00:33.830944061 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 19:00:33.831119061 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 19:00:49.075197935 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 19:00:49.075376034 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 19:00:59.830001116 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 19:01:00.074296951 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 19:01:00.074495077 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 19:01:15.519310951 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 19:01:15.519474983 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 19:01:30.767127991 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 19:01:30.767436028 CEST	43696	1337	192.168.2.14	93.123.85.49
Apr 26, 2024 19:01:46.030755997 CEST	1337	43696	93.123.85.49	192.168.2.14
Apr 26, 2024 19:01:46.030955076 CEST	43696	1337	192.168.2.14	93.123.85.49

System Behavior

Analysis Process: 95sOS6Fo3w.elf PID: 5563, Parent PID: 5477

General

Start time (UTC):	16:58:22
Start date (UTC):	26/04/2024
Path:	/tmp/95sOS6Fo3w.elf
Arguments:	/tmp/95sOS6Fo3w.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: 95sOS6Fo3w.elf PID: 5565, Parent PID: 5563

General

Start time (UTC):	16:58:23
Start date (UTC):	26/04/2024
Path:	/tmp/95sOS6Fo3w.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: 95sOS6Fo3w.elf PID: 5567, Parent PID: 5563

General

Start time (UTC):	16:58:23
Start date (UTC):	26/04/2024
Path:	/tmp/95sOS6Fo3w.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: 95sOS6Fo3w.elf PID: 5569, Parent PID: 5567

General

Start time (UTC):	16:58:23
Start date (UTC):	26/04/2024
Path:	/tmp/95sOS6Fo3w.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report 95sOS6Fo3w.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.uVUCYR (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: 95sOS6Fo3w.elf PID: 5563, Parent PID: 5477

General

Chronological Activities

Analysis Process: 95sOS6Fo3w.elf PID: 5565, Parent PID: 5563

General

Chronological Activities

Analysis Process: 95sOS6Fo3w.elf PID: 5567, Parent PID: 5563

General

Chronological Activities

Analysis Process: 95sOS6Fo3w.elf PID: 5569, Parent PID: 5567

General

Chronological Activities

Linux Analysis Report
95sOS6Fo3w.elf