Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
tftp

Overview

General Information

Sample Name:tftp
Analysis ID:635352
MD5:b8724cd89cae5c44cc8d2b90b85a4f11
SHA1:ef35fa64fc9dbcf8bd31fffa0a49ce194a945654
SHA256:4a6d9163d3d9725bf5ecb8bc126a740e246b921ee675007665c147178c8784f7
Infos:

Detection

Score:68
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Snort IDS alert for network traffic
Opens /proc/net/* files useful for finding connected devices and routers
Sample contains symbols with suspicious names
Uses the "uname" system call to query kernel version information (possible evasion)
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might not execute correctly on this machine.
All HTTP servers contacted by the sample do not answer. The sample is likely an old dropper which does no longer work.
Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures.

General Information

Joe Sandbox Version:34.0.0 Boulder Opal
Analysis ID:635352
Start date and time: 27/05/202220:00:482022-05-27 20:00:48 +02:00
Joe Sandbox Product:CloudBasic
Overall analysis duration:0h 6m 37s
Hypervisor based Inspection enabled:false
Report type:light
Sample file name:tftp
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Detection:MAL
Classification:mal68.spre.lin@0/0@0/0

Warnings

  • Report size exceeded maximum capacity and may have missing network information.
  • TCP Packets have been reduced to 100

Runtime Messages

Command:/tmp/tftp
PID:6232
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
BUILD DONGS
buf: BUILD DONGS

buf: PROBUILD DONGS
BING

buf: PONG

buf: PONG
Standard Error:

Process Tree

  • system is lnxubuntu20
  • tftp (PID: 6232, Parent: 6122, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/tftp
    • tftp New Fork (PID: 6234, Parent: 6232)
      • tftp New Fork (PID: 6236, Parent: 6234)
        • tftp New Fork (PID: 6239, Parent: 6236)
  • cleanup

Yara Signatures

⊘No yara matches

Snort Signatures

Timestamp:192.168.2.2345.95.55.1257822232840333 05/27/22-20:01:34.611182
SID:2840333
Source Port:57822
Destination Port:23
Protocol:TCP
Classtype:A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Antivirus / Scanner detection for submitted sample
Source: tftpAvira: detected
Multi AV Scanner detection for submitted file
Source: tftpVirustotal: Detection: 62%Perma Link

Spreading

barindex
Opens /proc/net/* files useful for finding connected devices and routers
Source: /tmp/tftp (PID: 6232)Opens: /proc/net/route

Networking

barindex
Snort IDS alert for network traffic
Source: TrafficSnort IDS: 2840333 ETPRO TROJAN ELF/BASHLITE Variant CnC Activity 192.168.2.23:57822 -> 45.95.55.12:23
Source: global trafficTCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global trafficTCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global trafficTCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443
Source: unknownTCP traffic detected without corresponding DNS query: 45.95.55.12
Source: unknownTCP traffic detected without corresponding DNS query: 45.95.55.12
Source: unknownTCP traffic detected without corresponding DNS query: 45.95.55.12
Source: unknownTCP traffic detected without corresponding DNS query: 45.95.55.12
Source: unknownTCP traffic detected without corresponding DNS query: 45.95.55.12
Source: unknownTCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownTCP traffic detected without corresponding DNS query: 2.2.2.2
Source: unknownTCP traffic detected without corresponding DNS query: 3.3.3.3
Source: unknownTCP traffic detected without corresponding DNS query: 4.4.4.4
Source: unknownTCP traffic detected without corresponding DNS query: 5.5.5.5
Source: unknownTCP traffic detected without corresponding DNS query: 7.7.7.7
Source: unknownTCP traffic detected without corresponding DNS query: 6.6.6.6
Source: unknownTCP traffic detected without corresponding DNS query: 9.9.9.9
Source: unknownTCP traffic detected without corresponding DNS query: 11.11.11.11
Source: unknownTCP traffic detected without corresponding DNS query: 12.12.12.12
Source: unknownTCP traffic detected without corresponding DNS query: 13.13.13.13
Source: unknownTCP traffic detected without corresponding DNS query: 14.14.14.14
Source: unknownTCP traffic detected without corresponding DNS query: 15.15.15.15
Source: unknownTCP traffic detected without corresponding DNS query: 16.16.16.16
Source: unknownTCP traffic detected without corresponding DNS query: 17.17.17.17
Source: unknownTCP traffic detected without corresponding DNS query: 18.18.18.18
Source: unknownTCP traffic detected without corresponding DNS query: 19.19.19.19
Source: unknownTCP traffic detected without corresponding DNS query: 20.20.20.20
Source: unknownTCP traffic detected without corresponding DNS query: 21.21.21.21
Source: unknownTCP traffic detected without corresponding DNS query: 22.22.22.22
Source: unknownTCP traffic detected without corresponding DNS query: 23.23.23.23
Source: unknownTCP traffic detected without corresponding DNS query: 24.24.24.24
Source: unknownTCP traffic detected without corresponding DNS query: 25.25.25.25
Source: unknownTCP traffic detected without corresponding DNS query: 26.26.26.26
Source: unknownTCP traffic detected without corresponding DNS query: 27.27.27.27
Source: unknownTCP traffic detected without corresponding DNS query: 28.28.28.28
Source: unknownTCP traffic detected without corresponding DNS query: 29.29.29.29
Source: unknownTCP traffic detected without corresponding DNS query: 30.30.30.30
Source: unknownTCP traffic detected without corresponding DNS query: 31.31.31.31
Source: unknownTCP traffic detected without corresponding DNS query: 33.33.33.33
Source: unknownTCP traffic detected without corresponding DNS query: 32.32.32.32
Source: unknownTCP traffic detected without corresponding DNS query: 34.34.34.34
Source: unknownTCP traffic detected without corresponding DNS query: 36.36.36.36
Source: unknownTCP traffic detected without corresponding DNS query: 35.35.35.35
Source: unknownTCP traffic detected without corresponding DNS query: 37.37.37.37
Source: unknownTCP traffic detected without corresponding DNS query: 38.38.38.38
Source: unknownTCP traffic detected without corresponding DNS query: 39.39.39.39
Source: unknownTCP traffic detected without corresponding DNS query: 40.40.40.40
Source: unknownTCP traffic detected without corresponding DNS query: 42.42.42.42
Source: unknownTCP traffic detected without corresponding DNS query: 41.41.41.41
Source: unknownTCP traffic detected without corresponding DNS query: 44.44.44.44
Source: unknownTCP traffic detected without corresponding DNS query: 43.43.43.43
Source: unknownTCP traffic detected without corresponding DNS query: 45.45.45.45
Source: unknownTCP traffic detected without corresponding DNS query: 46.46.46.46
Source: unknownTCP traffic detected without corresponding DNS query: 48.48.48.48
Source: tftpString found in binary or memory: http://45.95.55.12/bins.sh;
Source: ELF static info symbol of initial sampleName: passwords
Source: classification engineClassification label: mal68.spre.lin@0/0@0/0
Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sampleFILE: libc/string/arm/_memcpy.S
Source: ELF static info symbol of initial sampleFILE: libc/string/arm/memcpy.S
Source: ELF static info symbol of initial sampleFILE: libc/string/arm/memset.S
Source: ELF static info symbol of initial sampleFILE: libc/string/arm/strcmp.S
Source: ELF static info symbol of initial sampleFILE: libc/string/arm/strlen.S
Source: ELF static info symbol of initial sampleFILE: libc/sysdeps/linux/arm/crt1.S
Source: ELF static info symbol of initial sampleFILE: libc/sysdeps/linux/arm/crti.S
Source: ELF static info symbol of initial sampleFILE: libc/sysdeps/linux/arm/crtn.S
Source: ELF static info symbol of initial sampleFILE: libc/sysdeps/linux/arm/sigrestorer.S
Source: ELF static info symbol of initial sampleFILE: libc/sysdeps/linux/arm/vfork.S
Source: /tmp/tftp (PID: 6232)Queries kernel information via 'uname':
Source: tftp, 6232.1.00000000ec6b475a.0000000062454580.rw-.sdmp, tftp, 6234.1.00000000ec6b475a.0000000062454580.rw-.sdmpBinary or memory string: DTx86_64/usr/bin/qemu-arm/tmp/tftpSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/tftp
Source: tftp, 6232.1.00000000881ed728.000000009695d3f6.rw-.sdmp, tftp, 6234.1.00000000881ed728.000000009695d3f6.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
Source: tftp, 6232.1.00000000ec6b475a.0000000062454580.rw-.sdmp, tftp, 6234.1.00000000ec6b475a.0000000062454580.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm
Source: tftp, 6232.1.00000000881ed728.000000009695d3f6.rw-.sdmp, tftp, 6234.1.00000000881ed728.000000009695d3f6.rw-.sdmpBinary or memory string: ASiU!/etc/qemu-binfmt/arm

Mitre Att&ck Matrix

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
Valid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
Masquerading		OS Credential Dumping11
Security Software Discovery		Remote ServicesData from Local SystemExfiltration Over Other Network Medium1
Encrypted Channel		Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
Default AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
Remote System Discovery		Remote Desktop ProtocolData from Removable MediaExfiltration Over Bluetooth1
Application Layer Protocol		Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Number of created Files
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 635352 Sample: tftp Startdate: 27/05/2022 Architecture: LINUX Score: 68 18 184.49.107.56 WAYPORTUS United States 2->18 20 144.75.151.32 VMI-ASNUS United States 2->20 22 98 other IPs or domains 2->22 24 Snort IDS alert for network traffic 2->24 26 Antivirus / Scanner detection for submitted sample 2->26 28 Multi AV Scanner detection for submitted file 2->28 9 tftp 2->9         started        signatures3 process4 signatures5 30 Opens /proc/net/* files useful for finding connected devices and routers 9->30 12 tftp 9->12         started        process6 process7 14 tftp 12->14         started        process8 16 tftp 14->16         started       

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
tftp62%VirustotalBrowse
tftp100%AviraLINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

SourceDetectionScannerLabelLink
http://45.95.55.12/bins.sh;0%Avira URL Cloudsafe

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

NameSourceMaliciousAntivirus DetectionReputation
http://45.95.55.12/bins.sh;tftpfalse
  • Avira URL Cloud: safe
unknown

World Map of Contacted IPs

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Public IPs

IPDomainCountryFlagASNASN NameMalicious
168.92.30.125
unknownUnited States
16399FIRSTCOMM-AS2USfalse
62.12.132.129
unknownSwitzerland
15623CYBERLINKCyberlinkAGCHfalse
115.165.142.94
unknownJapan9365ITSCOMitscommunicationsIncJPfalse
85.164.112.44
unknownNorway
2119TELENOR-NEXTELTelenorNorgeASNOfalse
87.164.170.161
unknownGermany
3320DTAGInternetserviceprovideroperationsDEfalse
202.105.114.179
unknownChina
4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
116.19.113.163
unknownChina
4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
23.125.91.155
unknownUnited States
7018ATT-INTERNET4USfalse
126.67.106.10
unknownJapan17676GIGAINFRASoftbankBBCorpJPfalse
153.174.172.38
unknownJapan4713OCNNTTCommunicationsCorporationJPfalse
110.110.110.110
unknownChina
38341CNNIC-HCENET-APHEXIEInformationtechnologyCoLtdCNfalse
140.185.185.201
unknownUnited States
27087DNIC-ASBLK-27032-27159USfalse
72.72.72.72
unknownUnited States
701UUNETUSfalse
199.105.180.183
unknownUnited States
17229ATT-CERFNET-BLOCKUSfalse
175.76.181.122
unknownChina
9394CTTNETChinaTieTongTelecommunicationsCorporationCNfalse
158.158.158.158
unknownSingapore
8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
144.75.151.32
unknownUnited States
14169VMI-ASNUSfalse
155.124.245.198
unknownUnited States
35163BRAUN-ASDEfalse
177.108.184.65
unknownBrazil
26615TIMSABRfalse
134.187.57.62
unknownUnited States
1226CTA-42-AS1226USfalse
217.94.93.163
unknownGermany
3320DTAGInternetserviceprovideroperationsDEfalse
183.183.183.183
unknownJapan45684MIRAINETKyoceraCommunicationSystemsCoLtdJPfalse
20.72.80.124
unknownUnited States
8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
209.162.185.253
unknownUnited States
17184ATL-CBEYONDUSfalse
196.193.127.123
unknownSouth Africa
23889MauritiusTelecomMUfalse
181.82.187.128
unknownArgentina
7303TelecomArgentinaSAARfalse
186.174.227.156
unknownChile
3816COLOMBIATELECOMUNICACIONESSAESPCOfalse
121.123.189.104
unknownMalaysia
9534MAXIS-AS1-APBinariangBerhadMYfalse
90.96.151.55
unknownFrance
28708ORANGEFR-PORTAL-ASDSImutualizedinternetaccessFRfalse
202.213.203.204
unknownJapan2527SO-NETSo-netEntertainmentCorporationJPfalse
129.27.47.135
unknownAustria
1113TUGNETTechnischeUniversitaetGrazATfalse
137.157.61.137
unknownAustralia
45128ANSTO-AS-APAustralianNuclearScienceandTechnologyOrganifalse
129.174.174.190
unknownUnited States
11279GEORGE-MASON-UNIVUSfalse
73.171.96.92
unknownUnited States
7922COMCAST-7922USfalse
201.108.144.208
unknownMexico
8151UninetSAdeCVMXfalse
143.195.87.215
unknownUnited States
397112ILLINOIS-MATH-SCIENCEUSfalse
122.25.119.169
unknownJapan4713OCNNTTCommunicationsCorporationJPfalse
119.171.179.223
unknownJapan9824JTCL-JP-ASJupiterTelecommunicationCoLtdJPfalse
187.218.204.190
unknownMexico
8151UninetSAdeCVMXfalse
122.33.51.115
unknownKorea Republic of
17858POWERVIS-AS-KRLGPOWERCOMMKRfalse
188.238.215.167
unknownFinland
1759TSF-IP-CORETeliaFinlandOyjEUfalse
79.36.64.48
unknownItaly
3269ASN-IBSNAZITfalse
147.157.121.222
unknownJapan2907SINET-ASResearchOrganizationofInformationandSystemsNfalse
133.235.143.138
unknownJapan7682HOTNETHOKKAIDOTELECOMMUNICATIONSNETWORKCoIncJPfalse
107.127.201.195
unknownUnited States
7018ATT-INTERNET4USfalse
82.141.152.35
unknownHungary
12301INVITECHHUfalse
189.95.170.173
unknownBrazil
22085ClaroSABRfalse
44.32.85.14
unknownUnited States
7377UCSDUSfalse
99.105.160.64
unknownUnited States
7018ATT-INTERNET4USfalse
177.183.159.176
unknownBrazil
28573CLAROSABRfalse
14.85.23.115
unknownKorea Republic of
4766KIXS-AS-KRKoreaTelecomKRfalse
190.115.215.160
unknownunknown
52260TelecommunicationsdeHaitiTelecoHTfalse
128.97.218.171
unknownUnited States
52UCLAUSfalse
15.122.139.11
unknownUnited States
13979ATT-IPFRUSfalse
70.78.68.106
unknownCanada
6327SHAWCAfalse
78.137.148.31
unknownIreland
31122DIGIWEB-ASIEfalse
189.252.239.247
unknownMexico
8151UninetSAdeCVMXfalse
86.188.154.218
unknownUnited Kingdom
2856BT-UK-ASBTnetUKRegionalnetworkGBfalse
105.207.173.237
unknownEgypt
36992ETISALAT-MISREGfalse
100.89.13.123
unknownReserved
701UUNETUSfalse
199.92.209.136
unknownUnited States
3356LEVEL3USfalse
184.49.107.56
unknownUnited States
14654WAYPORTUSfalse
96.66.17.160
unknownUnited States
7922COMCAST-7922USfalse
137.44.80.144
unknownUnited Kingdom
786JANETJiscServicesLimitedGBfalse
110.173.56.111
unknownHong Kong
45753NETSEC-HKNETSECHKfalse
142.163.111.170
unknownCanada
855CANET-ASN-4CAfalse
220.251.237.223
unknownChina
4837CHINA169-BACKBONECHINAUNICOMChina169BackboneCNfalse
184.146.75.64
unknownCanada
577BACOMCAfalse
160.53.170.97
unknownSwitzerland
21449ETATGECHfalse
139.127.180.109
unknownUnited States
30703SHSC-1-ASUSfalse
58.89.75.61
unknownJapan4713OCNNTTCommunicationsCorporationJPfalse
216.170.159.205
unknownUnited States
4181TDS-ASUSfalse
133.58.158.103
unknownJapan2907SINET-ASResearchOrganizationofInformationandSystemsNfalse
183.160.55.166
unknownChina
4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
181.131.251.248
unknownColombia
13489EPMTelecomunicacionesSAESPCOfalse
240.197.225.209
unknownReserved
unknownunknownfalse
90.140.117.69
unknownSweden
1257TELE2EUfalse
143.193.170.122
unknownUnited States
7448CHOICE-HOTELSUSfalse
210.108.128.216
unknownKorea Republic of
10064SANGNOK-AS-KRGEPSCheonanSagnokresortKRfalse
98.106.24.81
unknownUnited States
6167CELLCO-PARTUSfalse
90.111.59.118
unknownFrance
3215FranceTelecom-OrangeFRfalse
54.89.27.48
unknownUnited States
14618AMAZON-AESUSfalse
217.217.217.217
unknownSpain
12357COMUNITELSPAINESfalse
190.83.200.127
unknownTrinidad and Tobago
27665ColumbusCommunicationsTrinidadLimitedTTfalse
189.238.117.146
unknownMexico
8151UninetSAdeCVMXfalse
215.177.106.95
unknownUnited States
721DNIC-ASBLK-00721-00726USfalse
117.148.134.120
unknownChina
56041CMNET-ZHEJIANG-APChinaMobilecommunicationscorporationCfalse
110.161.42.71
unknownJapan9605DOCOMONTTDOCOMOINCJPfalse
72.124.132.176
unknownUnited States
22394CELLCOUSfalse
158.64.139.142
unknownLuxembourg
2602RESTENAReseauTeleinformatiquedelEducationNationaleLUfalse
172.110.119.88
unknownUnited States
7296ALCHEMYNETUSfalse
205.175.195.165
unknownUnited States
3715THEBOE-3715USfalse
219.208.132.242
unknownJapan17676GIGAINFRASoftbankBBCorpJPfalse
163.66.75.140
unknownFrance
17816CHINA169-GZChinaUnicomIPnetworkChina169Guangdongprovifalse
157.202.202.218
unknownUnited States
1759TSF-IP-CORETeliaFinlandOyjEUfalse
152.119.82.121
unknownUnited States
2576DOT-ASUSfalse
178.131.154.222
unknownIran (ISLAMIC Republic Of)
50810MOBINNET-ASAS47823belongstoArvanCloudCDNthatismobinnfalse
148.199.80.109
unknownUnited States
31382KAPSCH-ASATfalse
126.80.69.115
unknownJapan17676GIGAINFRASoftbankBBCorpJPfalse
218.172.161.207
unknownTaiwan; Republic of China (ROC)
3462HINETDataCommunicationBusinessGroupTWfalse

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):5.903431405967893
TrID:
  • ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:tftp
File size:117425
MD5:b8724cd89cae5c44cc8d2b90b85a4f11
SHA1:ef35fa64fc9dbcf8bd31fffa0a49ce194a945654
SHA256:4a6d9163d3d9725bf5ecb8bc126a740e246b921ee675007665c147178c8784f7
SHA512:ebc489388efb07990990133ea1bb755a8a6ef84b5c961b96328b689a09ae2d335a5a7f2220b03885b141693597dd96023a34db908b4bb4e529beb9e5bbdd71cc
SSDEEP:3072:d6z1WqLgV4ZQGBcD3i/lMpaLhmVAQ/iwmjafI/UxglryYl3s+Z2nYJ2W:WJjafI/Uo3s+CYJn
TLSH:FCB30805D9905737C2D22BBEF79A82CE73221F98979733119A287BF41BE5B9D1D39020
File Content Preview:.ELF..............(.........4....\......4. ...(........p.<...........................................<...<...............@...@...@..D....g..........Q.td..................................-...L..................G.F.G.F.G.F.G.F G.F(G.F0G.F8G.F@G.FHG.FPG.FXG.

Static ELF Info

ELF header

Class:ELF32
Data:2's complement, little endian
Version:1 (current)
Machine:ARM
Version Number:0x1
Type:EXEC (Executable file)
OS/ABI:UNIX - System V
ABI Version:0
Entry Point Address:0x81b0
Flags:0x4000002
ELF Header Size:52
Program Header Offset:52
Program Header Size:32
Number of Program Headers:4
Section Header Offset:89108
Section Header Size:40
Number of Section Headers:24
Header String Table Index:21

Sections

NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
NULL0x00x00x00x00x0000
.initPROGBITS0x80b40xb40x100x00x6AX004
.textPROGBITS0x80d00xd00x11fec0x00x6AX0016
.finiPROGBITS0x1a0bc0x120bc0x100x00x6AX004
.rodataPROGBITS0x1a0d00x120d00x1ba00x00x2A008
.ARM.extabPROGBITS0x1bc700x13c700x180x00x2A004
.ARM.exidxARM_EXIDX0x1bc880x13c880x100x00x82AL204
.eh_framePROGBITS0x240000x140000x40x00x3WA004
.init_arrayINIT_ARRAY0x240040x140040x40x00x3WA004
.fini_arrayFINI_ARRAY0x240080x140080x40x00x3WA004
.jcrPROGBITS0x2400c0x1400c0x40x00x3WA004
.gotPROGBITS0x240100x140100x780x40x3WA004
.dataPROGBITS0x240880x140880x2bc0x00x3WA004
.bssNOBITS0x243480x143440x64980x00x3WA008
.commentPROGBITS0x00x143440xb0e0x00x0001
.debug_arangesPROGBITS0x00x14e580xe00x00x0008
.debug_infoPROGBITS0x00x14f380x4b00x00x0001
.debug_abbrevPROGBITS0x00x153e80x8c0x00x0001
.debug_linePROGBITS0x00x154740x6550x00x0001
.debug_framePROGBITS0x00x15acc0x580x00x0004
.ARM.attributesARM_ATTRIBUTES0x00x15b240x100x00x0001
.shstrtabSTRTAB0x00x15b340xdd0x00x0001
.symtabSYMTAB0x00x15fd40x46500x100x0236024
.strtabSTRTAB0x00x1a6240x248d0x00x0001

Program Segments

TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
EXIDX0x13c880x1bc880x1bc880x100x100.50000x4R 0x4.ARM.exidx
LOAD0x00x80000x80000x13c980x13c983.42720x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD0x140000x240000x240000x3440x67e02.23810x6RW 0x8000.eh_frame .init_array .fini_array .jcr .got .data .bss
GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

Symbols

NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
.symtab0x80b40SECTION<unknown>DEFAULT1
.symtab0x80d00SECTION<unknown>DEFAULT2
.symtab0x1a0bc0SECTION<unknown>DEFAULT3
.symtab0x1a0d00SECTION<unknown>DEFAULT4
.symtab0x1bc700SECTION<unknown>DEFAULT5
.symtab0x1bc880SECTION<unknown>DEFAULT6
.symtab0x240000SECTION<unknown>DEFAULT7
.symtab0x240040SECTION<unknown>DEFAULT8
.symtab0x240080SECTION<unknown>DEFAULT9
.symtab0x2400c0SECTION<unknown>DEFAULT10
.symtab0x240100SECTION<unknown>DEFAULT11
.symtab0x240880SECTION<unknown>DEFAULT12
.symtab0x243480SECTION<unknown>DEFAULT13
.symtab0x00SECTION<unknown>DEFAULT14
.symtab0x00SECTION<unknown>DEFAULT15
.symtab0x00SECTION<unknown>DEFAULT16
.symtab0x00SECTION<unknown>DEFAULT17
.symtab0x00SECTION<unknown>DEFAULT18
.symtab0x00SECTION<unknown>DEFAULT19
.symtab0x00SECTION<unknown>DEFAULT20
.symtab0x00SECTION<unknown>DEFAULT21
.symtab0x00SECTION<unknown>DEFAULT22
.symtab0x00SECTION<unknown>DEFAULT23
$a.symtab0x80b40NOTYPE<unknown>DEFAULT1
$a.symtab0x1a0bc0NOTYPE<unknown>DEFAULT3
$a.symtab0x80c00NOTYPE<unknown>DEFAULT1
$a.symtab0x1a0c80NOTYPE<unknown>DEFAULT3
$a.symtab0x810c0NOTYPE<unknown>DEFAULT2
$a.symtab0x81500NOTYPE<unknown>DEFAULT2
$a.symtab0x81b00NOTYPE<unknown>DEFAULT2
$a.symtab0x81ec0NOTYPE<unknown>DEFAULT2
$a.symtab0x82c40NOTYPE<unknown>DEFAULT2
$a.symtab0x84080NOTYPE<unknown>DEFAULT2
$a.symtab0x8d140NOTYPE<unknown>DEFAULT2
$a.symtab0x8e800NOTYPE<unknown>DEFAULT2
$a.symtab0x91080NOTYPE<unknown>DEFAULT2
$a.symtab0x92900NOTYPE<unknown>DEFAULT2
$a.symtab0x93e80NOTYPE<unknown>DEFAULT2
$a.symtab0x98940NOTYPE<unknown>DEFAULT2
$a.symtab0x99800NOTYPE<unknown>DEFAULT2
$a.symtab0x9a380NOTYPE<unknown>DEFAULT2
$a.symtab0x9d280NOTYPE<unknown>DEFAULT2
$a.symtab0xa1440NOTYPE<unknown>DEFAULT2
$a.symtab0xa4480NOTYPE<unknown>DEFAULT2
$a.symtab0xabd80NOTYPE<unknown>DEFAULT2
$a.symtab0xac3c0NOTYPE<unknown>DEFAULT2
$a.symtab0xb1c80NOTYPE<unknown>DEFAULT2
$a.symtab0xcbf80NOTYPE<unknown>DEFAULT2
$a.symtab0xd4b80NOTYPE<unknown>DEFAULT2
$a.symtab0xd6340NOTYPE<unknown>DEFAULT2
$a.symtab0xdd480NOTYPE<unknown>DEFAULT2
$a.symtab0xf8540NOTYPE<unknown>DEFAULT2
$a.symtab0xfa300NOTYPE<unknown>DEFAULT2
$a.symtab0xfcec0NOTYPE<unknown>DEFAULT2
$a.symtab0xfd100NOTYPE<unknown>DEFAULT2
$a.symtab0x107380NOTYPE<unknown>DEFAULT2
$a.symtab0x1084c0NOTYPE<unknown>DEFAULT2
$a.symtab0x108600NOTYPE<unknown>DEFAULT2
$a.symtab0x108a00NOTYPE<unknown>DEFAULT2
$a.symtab0x108d40NOTYPE<unknown>DEFAULT2
$a.symtab0x109340NOTYPE<unknown>DEFAULT2
$a.symtab0x109680NOTYPE<unknown>DEFAULT2
$a.symtab0x1097c0NOTYPE<unknown>DEFAULT2
$a.symtab0x109ac0NOTYPE<unknown>DEFAULT2
$a.symtab0x109ec0NOTYPE<unknown>DEFAULT2
$a.symtab0x10a200NOTYPE<unknown>DEFAULT2
$a.symtab0x10a3c0NOTYPE<unknown>DEFAULT2
$a.symtab0x10a7c0NOTYPE<unknown>DEFAULT2
$a.symtab0x10ab00NOTYPE<unknown>DEFAULT2
$a.symtab0x10ae40NOTYPE<unknown>DEFAULT2
$a.symtab0x10b100NOTYPE<unknown>DEFAULT2
$a.symtab0x10b440NOTYPE<unknown>DEFAULT2
$a.symtab0x10b780NOTYPE<unknown>DEFAULT2
$a.symtab0x10c500NOTYPE<unknown>DEFAULT2
$a.symtab0x10c840NOTYPE<unknown>DEFAULT2
$a.symtab0x10cb80NOTYPE<unknown>DEFAULT2
$a.symtab0x10d0c0NOTYPE<unknown>DEFAULT2
$a.symtab0x10d380NOTYPE<unknown>DEFAULT2
$a.symtab0x10d700NOTYPE<unknown>DEFAULT2
$a.symtab0x10da40NOTYPE<unknown>DEFAULT2
$a.symtab0x10dcc0NOTYPE<unknown>DEFAULT2
$a.symtab0x10dfc0NOTYPE<unknown>DEFAULT2
$a.symtab0x10e180NOTYPE<unknown>DEFAULT2
$a.symtab0x10e640NOTYPE<unknown>DEFAULT2
$a.symtab0x10f9c0NOTYPE<unknown>DEFAULT2
$a.symtab0x112600NOTYPE<unknown>DEFAULT2
$a.symtab0x112c80NOTYPE<unknown>DEFAULT2
$a.symtab0x112fc0NOTYPE<unknown>DEFAULT2
$a.symtab0x113d00NOTYPE<unknown>DEFAULT2
$a.symtab0x114000NOTYPE<unknown>DEFAULT2
$a.symtab0x114e40NOTYPE<unknown>DEFAULT2
$a.symtab0x11ca40NOTYPE<unknown>DEFAULT2
$a.symtab0x11d440NOTYPE<unknown>DEFAULT2
$a.symtab0x11d880NOTYPE<unknown>DEFAULT2
$a.symtab0x11f380NOTYPE<unknown>DEFAULT2
$a.symtab0x11f8c0NOTYPE<unknown>DEFAULT2
$a.symtab0x124fc0NOTYPE<unknown>DEFAULT2
$a.symtab0x125340NOTYPE<unknown>DEFAULT2
$a.symtab0x125f00NOTYPE<unknown>DEFAULT2
$a.symtab0x126900NOTYPE<unknown>DEFAULT2
$a.symtab0x126f00NOTYPE<unknown>DEFAULT2
$a.symtab0x127100NOTYPE<unknown>DEFAULT2
$a.symtab0x127200NOTYPE<unknown>DEFAULT2
$a.symtab0x1281c0NOTYPE<unknown>DEFAULT2
$a.symtab0x128e80NOTYPE<unknown>DEFAULT2
$a.symtab0x129100NOTYPE<unknown>DEFAULT2
$a.symtab0x129340NOTYPE<unknown>DEFAULT2
$a.symtab0x129f00NOTYPE<unknown>DEFAULT2
$a.symtab0x12ae00NOTYPE<unknown>DEFAULT2
$a.symtab0x12af80NOTYPE<unknown>DEFAULT2
$a.symtab0x12b280NOTYPE<unknown>DEFAULT2
$a.symtab0x12c280NOTYPE<unknown>DEFAULT2
$a.symtab0x12c4c0NOTYPE<unknown>DEFAULT2
$a.symtab0x12cc80NOTYPE<unknown>DEFAULT2
$a.symtab0x12d280NOTYPE<unknown>DEFAULT2
$a.symtab0x12dd00NOTYPE<unknown>DEFAULT2
$a.symtab0x12df80NOTYPE<unknown>DEFAULT2
$a.symtab0x12e300NOTYPE<unknown>DEFAULT2
$a.symtab0x12e680NOTYPE<unknown>DEFAULT2
$a.symtab0x12eac0NOTYPE<unknown>DEFAULT2
$a.symtab0x12ee40NOTYPE<unknown>DEFAULT2
$a.symtab0x12f1c0NOTYPE<unknown>DEFAULT2
$a.symtab0x12f5c0NOTYPE<unknown>DEFAULT2
$a.symtab0x12fa00NOTYPE<unknown>DEFAULT2
$a.symtab0x12fd80NOTYPE<unknown>DEFAULT2
$a.symtab0x12ff40NOTYPE<unknown>DEFAULT2
$a.symtab0x130380NOTYPE<unknown>DEFAULT2
$a.symtab0x1304c0NOTYPE<unknown>DEFAULT2
$a.symtab0x131040NOTYPE<unknown>DEFAULT2
$a.symtab0x131700NOTYPE<unknown>DEFAULT2
$a.symtab0x13b080NOTYPE<unknown>DEFAULT2
$a.symtab0x13fa80NOTYPE<unknown>DEFAULT2
$a.symtab0x13fe80NOTYPE<unknown>DEFAULT2
$a.symtab0x141100NOTYPE<unknown>DEFAULT2
$a.symtab0x141280NOTYPE<unknown>DEFAULT2
$a.symtab0x141cc0NOTYPE<unknown>DEFAULT2
$a.symtab0x142840NOTYPE<unknown>DEFAULT2
$a.symtab0x143440NOTYPE<unknown>DEFAULT2
$a.symtab0x143e80NOTYPE<unknown>DEFAULT2
$a.symtab0x144cc0NOTYPE<unknown>DEFAULT2
$a.symtab0x1455c0NOTYPE<unknown>DEFAULT2
$a.symtab0x146340NOTYPE<unknown>DEFAULT2
$a.symtab0x147180NOTYPE<unknown>DEFAULT2
$a.symtab0x147380NOTYPE<unknown>DEFAULT2
$a.symtab0x147540NOTYPE<unknown>DEFAULT2
$a.symtab0x149140NOTYPE<unknown>DEFAULT2
$a.symtab0x149cc0NOTYPE<unknown>DEFAULT2
$a.symtab0x14a780NOTYPE<unknown>DEFAULT2
$a.symtab0x14bc40NOTYPE<unknown>DEFAULT2
$a.symtab0x1519c0NOTYPE<unknown>DEFAULT2
$a.symtab0x152480NOTYPE<unknown>DEFAULT2
$a.symtab0x153080NOTYPE<unknown>DEFAULT2
$a.symtab0x1535c0NOTYPE<unknown>DEFAULT2
$a.symtab0x153c80NOTYPE<unknown>DEFAULT2
$a.symtab0x1569c0NOTYPE<unknown>DEFAULT2
$a.symtab0x157f80NOTYPE<unknown>DEFAULT2
$a.symtab0x158600NOTYPE<unknown>DEFAULT2
$a.symtab0x158800NOTYPE<unknown>DEFAULT2
$a.symtab0x159080NOTYPE<unknown>DEFAULT2
$a.symtab0x159140NOTYPE<unknown>DEFAULT2
$a.symtab0x159200NOTYPE<unknown>DEFAULT2
$a.symtab0x159540NOTYPE<unknown>DEFAULT2
$a.symtab0x159880NOTYPE<unknown>DEFAULT2
$a.symtab0x159b00NOTYPE<unknown>DEFAULT2
$a.symtab0x159c40NOTYPE<unknown>DEFAULT2
$a.symtab0x159f80NOTYPE<unknown>DEFAULT2
$a.symtab0x15a2c0NOTYPE<unknown>DEFAULT2
$a.symtab0x15a400NOTYPE<unknown>DEFAULT2
$a.symtab0x15a540NOTYPE<unknown>DEFAULT2
$a.symtab0x15ac00NOTYPE<unknown>DEFAULT2
$a.symtab0x15ad40NOTYPE<unknown>DEFAULT2
$a.symtab0x15b080NOTYPE<unknown>DEFAULT2
$a.symtab0x15b3c0NOTYPE<unknown>DEFAULT2
$a.symtab0x15b700NOTYPE<unknown>DEFAULT2
$a.symtab0x15c680NOTYPE<unknown>DEFAULT2
$a.symtab0x15d380NOTYPE<unknown>DEFAULT2
$a.symtab0x15de40NOTYPE<unknown>DEFAULT2
$a.symtab0x15e7c0NOTYPE<unknown>DEFAULT2
$a.symtab0x15f680NOTYPE<unknown>DEFAULT2
$a.symtab0x1630c0NOTYPE<unknown>DEFAULT2
$a.symtab0x163600NOTYPE<unknown>DEFAULT2
$a.symtab0x163840NOTYPE<unknown>DEFAULT2
$a.symtab0x164340NOTYPE<unknown>DEFAULT2
$a.symtab0x165e80NOTYPE<unknown>DEFAULT2
$a.symtab0x166240NOTYPE<unknown>DEFAULT2
$a.symtab0x166440NOTYPE<unknown>DEFAULT2
$a.symtab0x166f80NOTYPE<unknown>DEFAULT2
$a.symtab0x16a000NOTYPE<unknown>DEFAULT2
$a.symtab0x16b400NOTYPE<unknown>DEFAULT2
$a.symtab0x16c100NOTYPE<unknown>DEFAULT2
$a.symtab0x16c800NOTYPE<unknown>DEFAULT2
$a.symtab0x16cac0NOTYPE<unknown>DEFAULT2
$a.symtab0x16e080NOTYPE<unknown>DEFAULT2
$a.symtab0x175fc0NOTYPE<unknown>DEFAULT2
$a.symtab0x176d80NOTYPE<unknown>DEFAULT2
$a.symtab0x177940NOTYPE<unknown>DEFAULT2
$a.symtab0x1791c0NOTYPE<unknown>DEFAULT2
$a.symtab0x17b280NOTYPE<unknown>DEFAULT2
$a.symtab0x17c540NOTYPE<unknown>DEFAULT2
$a.symtab0x17d000NOTYPE<unknown>DEFAULT2
$a.symtab0x181900NOTYPE<unknown>DEFAULT2
$a.symtab0x182800NOTYPE<unknown>DEFAULT2
$a.symtab0x182f80NOTYPE<unknown>DEFAULT2
$a.symtab0x1833c0NOTYPE<unknown>DEFAULT2
$a.symtab0x183ec0NOTYPE<unknown>DEFAULT2
$a.symtab0x184cc0NOTYPE<unknown>DEFAULT2
$a.symtab0x185180NOTYPE<unknown>DEFAULT2
$a.symtab0x185680NOTYPE<unknown>DEFAULT2
$a.symtab0x1858c0NOTYPE<unknown>DEFAULT2
$a.symtab0x186780NOTYPE<unknown>DEFAULT2
$a.symtab0x186b80NOTYPE<unknown>DEFAULT2
$a.symtab0x187b00NOTYPE<unknown>DEFAULT2
$a.symtab0x188e40NOTYPE<unknown>DEFAULT2
$a.symtab0x18c980NOTYPE<unknown>DEFAULT2
$a.symtab0x18cd00NOTYPE<unknown>DEFAULT2
$a.symtab0x18d1c0NOTYPE<unknown>DEFAULT2
$a.symtab0x18d280NOTYPE<unknown>DEFAULT2
$a.symtab0x18d800NOTYPE<unknown>DEFAULT2
$a.symtab0x18fb00NOTYPE<unknown>DEFAULT2
$a.symtab0x18ff00NOTYPE<unknown>DEFAULT2
$a.symtab0x191340NOTYPE<unknown>DEFAULT2
$a.symtab0x191580NOTYPE<unknown>DEFAULT2
$a.symtab0x192a80NOTYPE<unknown>DEFAULT2
$a.symtab0x193000NOTYPE<unknown>DEFAULT2
$a.symtab0x193c40NOTYPE<unknown>DEFAULT2
$a.symtab0x193f40NOTYPE<unknown>DEFAULT2
$a.symtab0x1948c0NOTYPE<unknown>DEFAULT2
$a.symtab0x194c80NOTYPE<unknown>DEFAULT2
$a.symtab0x1952c0NOTYPE<unknown>DEFAULT2
$a.symtab0x196700NOTYPE<unknown>DEFAULT2
$a.symtab0x19a8c0NOTYPE<unknown>DEFAULT2
$a.symtab0x19f280NOTYPE<unknown>DEFAULT2
$a.symtab0x1a0680NOTYPE<unknown>DEFAULT2
$d.symtab0x81440NOTYPE<unknown>DEFAULT2
$d.symtab0x240080NOTYPE<unknown>DEFAULT9
$d.symtab0x819c0NOTYPE<unknown>DEFAULT2
$d.symtab0x240040NOTYPE<unknown>DEFAULT8
$d.symtab0x2408c0NOTYPE<unknown>DEFAULT12
$d.symtab0x81e00NOTYPE<unknown>DEFAULT2
$d.symtab0x240900NOTYPE<unknown>DEFAULT12
$d.symtab0x82bc0NOTYPE<unknown>DEFAULT2
$d.symtab0x83fc0NOTYPE<unknown>DEFAULT2
$d.symtab0x8d100NOTYPE<unknown>DEFAULT2
$d.symtab0x8e7c0NOTYPE<unknown>DEFAULT2
$d.symtab0x90f80NOTYPE<unknown>DEFAULT2
$d.symtab0x928c0NOTYPE<unknown>DEFAULT2
$d.symtab0x1a30c0NOTYPE<unknown>DEFAULT4
$d.symtab0x93e40NOTYPE<unknown>DEFAULT2
$d.symtab0x988c0NOTYPE<unknown>DEFAULT2
$d.symtab0x99780NOTYPE<unknown>DEFAULT2
$d.symtab0x9a340NOTYPE<unknown>DEFAULT2
$d.symtab0x9d200NOTYPE<unknown>DEFAULT2
$d.symtab0xa13c0NOTYPE<unknown>DEFAULT2
$d.symtab0xa4440NOTYPE<unknown>DEFAULT2
$d.symtab0xabcc0NOTYPE<unknown>DEFAULT2
$d.symtab0xac380NOTYPE<unknown>DEFAULT2
$d.symtab0xb1a40NOTYPE<unknown>DEFAULT2
$d.symtab0xcbd00NOTYPE<unknown>DEFAULT2
$d.symtab0xd4ac0NOTYPE<unknown>DEFAULT2
$d.symtab0xd62c0NOTYPE<unknown>DEFAULT2
$d.symtab0xdd1c0NOTYPE<unknown>DEFAULT2
$d.symtab0xf7f00NOTYPE<unknown>DEFAULT2
$d.symtab0xfa240NOTYPE<unknown>DEFAULT2
$d.symtab0xfcd80NOTYPE<unknown>DEFAULT2
$d.symtab0xfd0c0NOTYPE<unknown>DEFAULT2
$d.symtab0x106fc0NOTYPE<unknown>DEFAULT2
$d.symtab0x10dc40NOTYPE<unknown>DEFAULT2
$d.symtab0x10df40NOTYPE<unknown>DEFAULT2
$d.symtab0x240f40NOTYPE<unknown>DEFAULT12
$d.symtab0x240fc0NOTYPE<unknown>DEFAULT12
$d.symtab0x10e100NOTYPE<unknown>DEFAULT2
$d.symtab0x10e5c0NOTYPE<unknown>DEFAULT2
$d.symtab0x10f800NOTYPE<unknown>DEFAULT2
$d.symtab0x112380NOTYPE<unknown>DEFAULT2
$d.symtab0x112c00NOTYPE<unknown>DEFAULT2
$d.symtab0x112f40NOTYPE<unknown>DEFAULT2
$d.symtab0x113bc0NOTYPE<unknown>DEFAULT2
$d.symtab0x241380NOTYPE<unknown>DEFAULT12
$d.symtab0x241040NOTYPE<unknown>DEFAULT12
$d.symtab0x1af4c0NOTYPE<unknown>DEFAULT4
$d.symtab0x114d00NOTYPE<unknown>DEFAULT2
$d.symtab0x11c840NOTYPE<unknown>DEFAULT2
$d.symtab0x11f340NOTYPE<unknown>DEFAULT2
$d.symtab0x11f800NOTYPE<unknown>DEFAULT2
$d.symtab0x124cc0NOTYPE<unknown>DEFAULT2
$d.symtab0x242400NOTYPE<unknown>DEFAULT12
$d.symtab0x128e00NOTYPE<unknown>DEFAULT2
$d.symtab0x12ad80NOTYPE<unknown>DEFAULT2
$d.symtab0x12b200NOTYPE<unknown>DEFAULT2
$d.symtab0x12c1c0NOTYPE<unknown>DEFAULT2
$d.symtab0x12cc40NOTYPE<unknown>DEFAULT2
$d.symtab0x12dc80NOTYPE<unknown>DEFAULT2
$d.symtab0x12e2c0NOTYPE<unknown>DEFAULT2
$d.symtab0x12e640NOTYPE<unknown>DEFAULT2
$d.symtab0x12ea80NOTYPE<unknown>DEFAULT2
$d.symtab0x12ee00NOTYPE<unknown>DEFAULT2
$d.symtab0x12f180NOTYPE<unknown>DEFAULT2
$d.symtab0x12f580NOTYPE<unknown>DEFAULT2
$d.symtab0x12f9c0NOTYPE<unknown>DEFAULT2
$d.symtab0x12fd40NOTYPE<unknown>DEFAULT2
$d.symtab0x130fc0NOTYPE<unknown>DEFAULT2
$d.symtab0x13aec0NOTYPE<unknown>DEFAULT2
$d.symtab0x242440NOTYPE<unknown>DEFAULT12
$d.symtab0x13f8c0NOTYPE<unknown>DEFAULT2
$d.symtab0x13fe00NOTYPE<unknown>DEFAULT2
$d.symtab0x140fc0NOTYPE<unknown>DEFAULT2
$d.symtab0x2425c0NOTYPE<unknown>DEFAULT12
$d.symtab0x141b00NOTYPE<unknown>DEFAULT2
$d.symtab0x142680NOTYPE<unknown>DEFAULT2
$d.symtab0x143280NOTYPE<unknown>DEFAULT2
$d.symtab0x143cc0NOTYPE<unknown>DEFAULT2
$d.symtab0x242740NOTYPE<unknown>DEFAULT12
$d.symtab0x2430c0NOTYPE<unknown>DEFAULT12
$d.symtab0x144c40NOTYPE<unknown>DEFAULT2
$d.symtab0x145580NOTYPE<unknown>DEFAULT2
$d.symtab0x146280NOTYPE<unknown>DEFAULT2
$d.symtab0x147100NOTYPE<unknown>DEFAULT2
$d.symtab0x1bb780NOTYPE<unknown>DEFAULT4
$d.symtab0x1490c0NOTYPE<unknown>DEFAULT2
$d.symtab0x149ac0NOTYPE<unknown>DEFAULT2
$d.symtab0x243200NOTYPE<unknown>DEFAULT12
$d.symtab0x14a740NOTYPE<unknown>DEFAULT2
$d.symtab0x14ba00NOTYPE<unknown>DEFAULT2
$d.symtab0x151780NOTYPE<unknown>DEFAULT2
$d.symtab0x152400NOTYPE<unknown>DEFAULT2
$d.symtab0x152f40NOTYPE<unknown>DEFAULT2
$d.symtab0x153540NOTYPE<unknown>DEFAULT2
$d.symtab0x153b80NOTYPE<unknown>DEFAULT2
$d.symtab0x1565c0NOTYPE<unknown>DEFAULT2
$d.symtab0x243380NOTYPE<unknown>DEFAULT12
$d.symtab0x157e80NOTYPE<unknown>DEFAULT2
$d.symtab0x158fc0NOTYPE<unknown>DEFAULT2
$d.symtab0x159a80NOTYPE<unknown>DEFAULT2
$d.symtab0x15ab80NOTYPE<unknown>DEFAULT2
$d.symtab0x15c540NOTYPE<unknown>DEFAULT2
$d.symtab0x15d300NOTYPE<unknown>DEFAULT2
$d.symtab0x15de00NOTYPE<unknown>DEFAULT2
$d.symtab0x1bbf40NOTYPE<unknown>DEFAULT4
$d.symtab0x15f540NOTYPE<unknown>DEFAULT2
$d.symtab0x2a3f00NOTYPE<unknown>DEFAULT13
$d.symtab0x163040NOTYPE<unknown>DEFAULT2
$d.symtab0x165c80NOTYPE<unknown>DEFAULT2
$d.symtab0x169cc0NOTYPE<unknown>DEFAULT2
$d.symtab0x175dc0NOTYPE<unknown>DEFAULT2
$d.symtab0x1bc280NOTYPE<unknown>DEFAULT4
$d.symtab0x176c40NOTYPE<unknown>DEFAULT2
$d.symtab0x177800NOTYPE<unknown>DEFAULT2
$d.symtab0x178f00NOTYPE<unknown>DEFAULT2
$d.symtab0x17b040NOTYPE<unknown>DEFAULT2
$d.symtab0x17c4c0NOTYPE<unknown>DEFAULT2
$d.symtab0x182780NOTYPE<unknown>DEFAULT2
$d.symtab0x183e40NOTYPE<unknown>DEFAULT2
$d.symtab0x184c40NOTYPE<unknown>DEFAULT2
$d.symtab0x186700NOTYPE<unknown>DEFAULT2
$d.symtab0x187a80NOTYPE<unknown>DEFAULT2
$d.symtab0x188cc0NOTYPE<unknown>DEFAULT2
$d.symtab0x18c7c0NOTYPE<unknown>DEFAULT2
$d.symtab0x18cc40NOTYPE<unknown>DEFAULT2
$d.symtab0x18d140NOTYPE<unknown>DEFAULT2
$d.symtab0x192940NOTYPE<unknown>DEFAULT2
$t.symtab0x80d00NOTYPE<unknown>DEFAULT2
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
C.1.3506.symtab0x1bbf424OBJECT<unknown>DEFAULT4
Laligned.symtab0x126b80NOTYPE<unknown>DEFAULT2
Llastword.symtab0x126d40NOTYPE<unknown>DEFAULT2
Q.symtab0x2438016384OBJECT<unknown>DEFAULT13
StartTheLelz.symtab0xafb47972FUNC<unknown>DEFAULT2
_Exit.symtab0x10d0c44FUNC<unknown>DEFAULT2
_GLOBAL_OFFSET_TABLE_.symtab0x240100OBJECT<unknown>HIDDEN11
_Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
_READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
__C_ctype_b.symtab0x240f44OBJECT<unknown>DEFAULT12
__C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
__C_ctype_b_data.symtab0x1a93c768OBJECT<unknown>DEFAULT4
__C_ctype_toupper.symtab0x240fc4OBJECT<unknown>DEFAULT12
__C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
__C_ctype_toupper_data.symtab0x1ac3c768OBJECT<unknown>DEFAULT4
__EH_FRAME_BEGIN__.symtab0x240000OBJECT<unknown>DEFAULT7
__FRAME_END__.symtab0x240000OBJECT<unknown>DEFAULT7
__GI___C_ctype_b.symtab0x240f44OBJECT<unknown>HIDDEN12
__GI___C_ctype_toupper.symtab0x240fc4OBJECT<unknown>HIDDEN12
__GI___ctype_b.symtab0x240f84OBJECT<unknown>HIDDEN12
__GI___ctype_toupper.symtab0x241004OBJECT<unknown>HIDDEN12
__GI___errno_location.symtab0x10dfc28FUNC<unknown>HIDDEN2
__GI___fcntl_nocancel.symtab0x10be4108FUNC<unknown>HIDDEN2
__GI___fgetc_unlocked.symtab0x17b28300FUNC<unknown>HIDDEN2
__GI___glibc_strerror_r.symtab0x12ae024FUNC<unknown>HIDDEN2
__GI___libc_fcntl.symtab0x10b78108FUNC<unknown>HIDDEN2
__GI___sigaddset.symtab0x1312836FUNC<unknown>HIDDEN2
__GI___sigdelset.symtab0x1314c36FUNC<unknown>HIDDEN2
__GI___sigismember.symtab0x1310436FUNC<unknown>HIDDEN2
__GI___uClibc_fini.symtab0x1528c124FUNC<unknown>HIDDEN2
__GI___uClibc_init.symtab0x1535c108FUNC<unknown>HIDDEN2
__GI___xpg_strerror_r.symtab0x12b28256FUNC<unknown>HIDDEN2
__GI__exit.symtab0x10d0c44FUNC<unknown>HIDDEN2
__GI_abort.symtab0x13fe8296FUNC<unknown>HIDDEN2
__GI_atoi.symtab0x1471832FUNC<unknown>HIDDEN2
__GI_brk.symtab0x18cd076FUNC<unknown>HIDDEN2
__GI_chdir.symtab0x10a7c52FUNC<unknown>HIDDEN2
__GI_clock_getres.symtab0x159c452FUNC<unknown>HIDDEN2
__GI_close.symtab0x10d7052FUNC<unknown>HIDDEN2
__GI_closedir.symtab0x15b70248FUNC<unknown>HIDDEN2
__GI_config_close.symtab0x1629052FUNC<unknown>HIDDEN2
__GI_config_open.symtab0x162c472FUNC<unknown>HIDDEN2
__GI_config_read.symtab0x15f68808FUNC<unknown>HIDDEN2
__GI_connect.symtab0x12df856FUNC<unknown>HIDDEN2
__GI_dup2.symtab0x108a052FUNC<unknown>HIDDEN2
__GI_errno.symtab0x2a3f04OBJECT<unknown>HIDDEN13
__GI_execl.symtab0x1519c172FUNC<unknown>HIDDEN2
__GI_execve.symtab0x1595452FUNC<unknown>HIDDEN2
__GI_exit.symtab0x14914184FUNC<unknown>HIDDEN2
__GI_fclose.symtab0x16434436FUNC<unknown>HIDDEN2
__GI_fcntl.symtab0x10b78108FUNC<unknown>HIDDEN2
__GI_fdopen.symtab0x165e860FUNC<unknown>HIDDEN2
__GI_fflush_unlocked.symtab0x1791c524FUNC<unknown>HIDDEN2
__GI_fgetc.symtab0x175fc220FUNC<unknown>HIDDEN2
__GI_fgetc_unlocked.symtab0x17b28300FUNC<unknown>HIDDEN2
__GI_fgets.symtab0x176d8188FUNC<unknown>HIDDEN2
__GI_fgets_unlocked.symtab0x17c54160FUNC<unknown>HIDDEN2
__GI_fopen.symtab0x1662432FUNC<unknown>HIDDEN2
__GI_fork.symtab0x109ec52FUNC<unknown>HIDDEN2
__GI_fputs_unlocked.symtab0x124fc56FUNC<unknown>HIDDEN2
__GI_fseek.symtab0x1913436FUNC<unknown>HIDDEN2
__GI_fseeko64.symtab0x19158336FUNC<unknown>HIDDEN2
__GI_fstat.symtab0x18d2888FUNC<unknown>HIDDEN2
__GI_fwrite_unlocked.symtab0x12534176FUNC<unknown>HIDDEN2
__GI_getc_unlocked.symtab0x17b28300FUNC<unknown>HIDDEN2
__GI_getdtablesize.symtab0x10ae444FUNC<unknown>HIDDEN2
__GI_getegid.symtab0x15a2c20FUNC<unknown>HIDDEN2
__GI_geteuid.symtab0x15a4020FUNC<unknown>HIDDEN2
__GI_getgid.symtab0x15ac020FUNC<unknown>HIDDEN2
__GI_getpagesize.symtab0x1598840FUNC<unknown>HIDDEN2
__GI_getpid.symtab0x1096820FUNC<unknown>HIDDEN2
__GI_getrlimit.symtab0x159f852FUNC<unknown>HIDDEN2
__GI_getsockname.symtab0x12e3056FUNC<unknown>HIDDEN2
__GI_gettimeofday.symtab0x10b4452FUNC<unknown>HIDDEN2
__GI_getuid.symtab0x159b020FUNC<unknown>HIDDEN2
__GI_h_errno.symtab0x2a3f44OBJECT<unknown>HIDDEN13
__GI_htonl.symtab0x12cd832FUNC<unknown>HIDDEN2
__GI_htons.symtab0x12cc816FUNC<unknown>HIDDEN2
__GI_inet_addr.symtab0x12dd040FUNC<unknown>HIDDEN2
__GI_inet_aton.symtab0x186b8248FUNC<unknown>HIDDEN2
__GI_inet_ntoa.symtab0x12db428FUNC<unknown>HIDDEN2
__GI_inet_ntoa_r.symtab0x12d28140FUNC<unknown>HIDDEN2
__GI_initstate_r.symtab0x14634228FUNC<unknown>HIDDEN2
__GI_ioctl.symtab0x10cb884FUNC<unknown>HIDDEN2
__GI_isatty.symtab0x12c2836FUNC<unknown>HIDDEN2
__GI_isspace.symtab0x10da440FUNC<unknown>HIDDEN2
__GI_kill.symtab0x10b1052FUNC<unknown>HIDDEN2
__GI_lseek64.symtab0x194c8100FUNC<unknown>HIDDEN2
__GI_memchr.symtab0x18190240FUNC<unknown>HIDDEN2
__GI_memcpy.symtab0x127104FUNC<unknown>HIDDEN2
__GI_mempcpy.symtab0x1856836FUNC<unknown>HIDDEN2
__GI_memrchr.symtab0x183ec224FUNC<unknown>HIDDEN2
__GI_memset.symtab0x125f0156FUNC<unknown>HIDDEN2
__GI_mmap.symtab0x157f8104FUNC<unknown>HIDDEN2
__GI_mremap.symtab0x18fb064FUNC<unknown>HIDDEN2
__GI_munmap.symtab0x15ad452FUNC<unknown>HIDDEN2
__GI_nanosleep.symtab0x15b0852FUNC<unknown>HIDDEN2
__GI_ntohl.symtab0x12d0832FUNC<unknown>HIDDEN2
__GI_ntohs.symtab0x12cf816FUNC<unknown>HIDDEN2
__GI_open.symtab0x108d496FUNC<unknown>HIDDEN2
__GI_opendir.symtab0x15d38172FUNC<unknown>HIDDEN2
__GI_pipe.symtab0x1093452FUNC<unknown>HIDDEN2
__GI_printf.symtab0x10e1876FUNC<unknown>HIDDEN2
__GI_raise.symtab0x12fd828FUNC<unknown>HIDDEN2
__GI_random.symtab0x14128164FUNC<unknown>HIDDEN2
__GI_random_r.symtab0x144cc144FUNC<unknown>HIDDEN2
__GI_rawmemchr.symtab0x1833c176FUNC<unknown>HIDDEN2
__GI_read.symtab0x10ab052FUNC<unknown>HIDDEN2
__GI_readdir64.symtab0x15e7c236FUNC<unknown>HIDDEN2
__GI_recv.symtab0x12eac56FUNC<unknown>HIDDEN2
__GI_sbrk.symtab0x15a54108FUNC<unknown>HIDDEN2
__GI_select.symtab0x10a3c64FUNC<unknown>HIDDEN2
__GI_send.symtab0x12ee456FUNC<unknown>HIDDEN2
__GI_sendto.symtab0x12f1c64FUNC<unknown>HIDDEN2
__GI_setsid.symtab0x10c8452FUNC<unknown>HIDDEN2
__GI_setsockopt.symtab0x12f5c68FUNC<unknown>HIDDEN2
__GI_setstate_r.symtab0x143e8228FUNC<unknown>HIDDEN2
__GI_sigaction.symtab0x15880136FUNC<unknown>HIDDEN2
__GI_sigaddset.symtab0x12ff468FUNC<unknown>HIDDEN2
__GI_sigemptyset.symtab0x1303820FUNC<unknown>HIDDEN2
__GI_signal.symtab0x1304c184FUNC<unknown>HIDDEN2
__GI_sigprocmask.symtab0x10d3856FUNC<unknown>HIDDEN2
__GI_sleep.symtab0x149cc172FUNC<unknown>HIDDEN2
__GI_socket.symtab0x12fa056FUNC<unknown>HIDDEN2
__GI_srandom_r.symtab0x1455c216FUNC<unknown>HIDDEN2
__GI_strcat.symtab0x128e840FUNC<unknown>HIDDEN2
__GI_strchr.symtab0x129f0240FUNC<unknown>HIDDEN2
__GI_strchrnul.symtab0x1858c236FUNC<unknown>HIDDEN2
__GI_strcmp.symtab0x126f028FUNC<unknown>HIDDEN2
__GI_strcoll.symtab0x126f028FUNC<unknown>HIDDEN2
__GI_strcpy.symtab0x1291036FUNC<unknown>HIDDEN2
__GI_strcspn.symtab0x182f868FUNC<unknown>HIDDEN2
__GI_strlen.symtab0x1269096FUNC<unknown>HIDDEN2
__GI_strncpy.symtab0x12934188FUNC<unknown>HIDDEN2
__GI_strnlen.symtab0x1281c204FUNC<unknown>HIDDEN2
__GI_strpbrk.symtab0x1867864FUNC<unknown>HIDDEN2
__GI_strrchr.symtab0x1851880FUNC<unknown>HIDDEN2
__GI_strspn.symtab0x184cc76FUNC<unknown>HIDDEN2
__GI_strstr.symtab0x12720252FUNC<unknown>HIDDEN2
__GI_strtok.symtab0x12af848FUNC<unknown>HIDDEN2
__GI_strtok_r.symtab0x18280120FUNC<unknown>HIDDEN2
__GI_strtol.symtab0x1473828FUNC<unknown>HIDDEN2
__GI_sysconf.symtab0x14bc41496FUNC<unknown>HIDDEN2
__GI_tcgetattr.symtab0x12c4c124FUNC<unknown>HIDDEN2
__GI_time.symtab0x1097c48FUNC<unknown>HIDDEN2
__GI_toupper.symtab0x10dcc48FUNC<unknown>HIDDEN2
__GI_vfork.symtab0x1086064FUNC<unknown>HIDDEN2
__GI_vfprintf.symtab0x11400228FUNC<unknown>HIDDEN2
__GI_wait4.symtab0x1592052FUNC<unknown>HIDDEN2
__GI_waitpid.symtab0x10a2028FUNC<unknown>HIDDEN2
__GI_wcrtomb.symtab0x1630c84FUNC<unknown>HIDDEN2
__GI_wcsnrtombs.symtab0x16384176FUNC<unknown>HIDDEN2
__GI_wcsrtombs.symtab0x1636036FUNC<unknown>HIDDEN2
__GI_write.symtab0x10c5052FUNC<unknown>HIDDEN2
__JCR_END__.symtab0x2400c0OBJECT<unknown>DEFAULT10
__JCR_LIST__.symtab0x2400c0OBJECT<unknown>DEFAULT10
__adddf3.symtab0x1967c784FUNC<unknown>HIDDEN2
__aeabi_cdcmpeq.symtab0x19fd824FUNC<unknown>HIDDEN2
__aeabi_cdcmple.symtab0x19fd824FUNC<unknown>HIDDEN2
__aeabi_cdrcmple.symtab0x19fbc52FUNC<unknown>HIDDEN2
__aeabi_d2uiz.symtab0x1a06884FUNC<unknown>HIDDEN2
__aeabi_dadd.symtab0x1967c784FUNC<unknown>HIDDEN2
__aeabi_dcmpeq.symtab0x19ff024FUNC<unknown>HIDDEN2
__aeabi_dcmpge.symtab0x1a03824FUNC<unknown>HIDDEN2
__aeabi_dcmpgt.symtab0x1a05024FUNC<unknown>HIDDEN2
__aeabi_dcmple.symtab0x1a02024FUNC<unknown>HIDDEN2
__aeabi_dcmplt.symtab0x1a00824FUNC<unknown>HIDDEN2
__aeabi_ddiv.symtab0x19d1c524FUNC<unknown>HIDDEN2
__aeabi_dmul.symtab0x19a8c656FUNC<unknown>HIDDEN2
__aeabi_drsub.symtab0x196700FUNC<unknown>HIDDEN2
__aeabi_dsub.symtab0x19678788FUNC<unknown>HIDDEN2
__aeabi_f2d.symtab0x199d864FUNC<unknown>HIDDEN2
__aeabi_i2d.symtab0x199b040FUNC<unknown>HIDDEN2
__aeabi_idiv.symtab0x1952c0FUNC<unknown>HIDDEN2
__aeabi_idivmod.symtab0x1965824FUNC<unknown>HIDDEN2
__aeabi_l2d.symtab0x19a2c96FUNC<unknown>HIDDEN2
__aeabi_ui2d.symtab0x1998c36FUNC<unknown>HIDDEN2
__aeabi_uidiv.symtab0x107380FUNC<unknown>HIDDEN2
__aeabi_uidivmod.symtab0x1083424FUNC<unknown>HIDDEN2
__aeabi_ul2d.symtab0x19a18116FUNC<unknown>HIDDEN2
__aeabi_unwind_cpp_pr0.symtab0x18d1c4FUNC<unknown>DEFAULT2
__aeabi_unwind_cpp_pr1.symtab0x18d204FUNC<unknown>DEFAULT2
__aeabi_unwind_cpp_pr2.symtab0x18d244FUNC<unknown>DEFAULT2
__app_fini.symtab0x2a3e84OBJECT<unknown>HIDDEN13
__atexit_lock.symtab0x2432024OBJECT<unknown>DEFAULT12
__bss_end__.symtab0x2a7e00NOTYPE<unknown>DEFAULTSHN_ABS
__bss_start.symtab0x243440NOTYPE<unknown>DEFAULTSHN_ABS
__bss_start__.symtab0x243440NOTYPE<unknown>DEFAULTSHN_ABS
__check_one_fd.symtab0x1530884FUNC<unknown>DEFAULT2
__cmpdf2.symtab0x19f38132FUNC<unknown>HIDDEN2
__ctype_b.symtab0x240f84OBJECT<unknown>DEFAULT12
__ctype_toupper.symtab0x241004OBJECT<unknown>DEFAULT12
__curbrk.symtab0x2a3f84OBJECT<unknown>HIDDEN13
__data_start.symtab0x240880NOTYPE<unknown>DEFAULT12
__default_rt_sa_restorer.symtab0x159180FUNC<unknown>DEFAULT2
__default_sa_restorer.symtab0x1590c0FUNC<unknown>DEFAULT2
__deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
__div0.symtab0x1084c20FUNC<unknown>HIDDEN2
__divdf3.symtab0x19d1c524FUNC<unknown>HIDDEN2
__divsi3.symtab0x1952c300FUNC<unknown>HIDDEN2
__do_global_dtors_aux.symtab0x810c0FUNC<unknown>DEFAULT2
__do_global_dtors_aux_fini_array_entry.symtab0x240080OBJECT<unknown>DEFAULT9
__dso_handle.symtab0x240880OBJECT<unknown>HIDDEN12
__end__.symtab0x2a7e00NOTYPE<unknown>DEFAULTSHN_ABS
__environ.symtab0x2a3e04OBJECT<unknown>DEFAULT13
__eqdf2.symtab0x19f38132FUNC<unknown>HIDDEN2
__errno_location.symtab0x10dfc28FUNC<unknown>DEFAULT2
__errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
__error.symtab0x1089c0NOTYPE<unknown>DEFAULT2
__exidx_end.symtab0x1bc980NOTYPE<unknown>DEFAULTSHN_ABS
__exidx_start.symtab0x1bc880NOTYPE<unknown>DEFAULTSHN_ABS
__exit_cleanup.symtab0x2a3d84OBJECT<unknown>HIDDEN13
__extendsfdf2.symtab0x199d864FUNC<unknown>HIDDEN2
__fcntl_nocancel.symtab0x10be4108FUNC<unknown>DEFAULT2
__fgetc_unlocked.symtab0x17b28300FUNC<unknown>DEFAULT2
__fini_array_end.symtab0x2400c0NOTYPE<unknown>HIDDEN9
__fini_array_start.symtab0x240080NOTYPE<unknown>HIDDEN9
__fixunsdfsi.symtab0x1a06884FUNC<unknown>HIDDEN2
__floatdidf.symtab0x19a2c96FUNC<unknown>HIDDEN2
__floatsidf.symtab0x199b040FUNC<unknown>HIDDEN2
__floatundidf.symtab0x19a18116FUNC<unknown>HIDDEN2
__floatunsidf.symtab0x1998c36FUNC<unknown>HIDDEN2
__frame_dummy_init_array_entry.symtab0x240040OBJECT<unknown>DEFAULT8
__gedf2.symtab0x19f28148FUNC<unknown>HIDDEN2
__getdents64.symtab0x18ff0324FUNC<unknown>HIDDEN2
__getpagesize.symtab0x1598840FUNC<unknown>DEFAULT2
__glibc_strerror_r.symtab0x12ae024FUNC<unknown>DEFAULT2
__glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
__gtdf2.symtab0x19f28148FUNC<unknown>HIDDEN2
__h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
__init_array_end.symtab0x240080NOTYPE<unknown>HIDDEN8
__init_array_start.symtab0x240040NOTYPE<unknown>HIDDEN8
__ledf2.symtab0x19f30140FUNC<unknown>HIDDEN2
__libc_close.symtab0x10d7052FUNC<unknown>DEFAULT2
__libc_connect.symtab0x12df856FUNC<unknown>DEFAULT2
__libc_fcntl.symtab0x10b78108FUNC<unknown>DEFAULT2
__libc_fork.symtab0x109ec52FUNC<unknown>DEFAULT2
__libc_lseek64.symtab0x194c8100FUNC<unknown>DEFAULT2
__libc_nanosleep.symtab0x15b0852FUNC<unknown>DEFAULT2
__libc_open.symtab0x108d496FUNC<unknown>DEFAULT2
__libc_read.symtab0x10ab052FUNC<unknown>DEFAULT2
__libc_recv.symtab0x12eac56FUNC<unknown>DEFAULT2
__libc_select.symtab0x10a3c64FUNC<unknown>DEFAULT2
__libc_send.symtab0x12ee456FUNC<unknown>DEFAULT2
__libc_sendto.symtab0x12f1c64FUNC<unknown>DEFAULT2
__libc_sigaction.symtab0x15880136FUNC<unknown>DEFAULT2
__libc_stack_end.symtab0x2a3dc4OBJECT<unknown>DEFAULT13
__libc_system.symtab0x1569c348FUNC<unknown>DEFAULT2
__libc_waitpid.symtab0x10a2028FUNC<unknown>DEFAULT2
__libc_write.symtab0x10c5052FUNC<unknown>DEFAULT2
__ltdf2.symtab0x19f30140FUNC<unknown>HIDDEN2
__malloc_consolidate.symtab0x13bb8436FUNC<unknown>HIDDEN2
__malloc_largebin_index.symtab0x13170120FUNC<unknown>DEFAULT2
__malloc_lock.symtab0x2424424OBJECT<unknown>DEFAULT12
__malloc_state.symtab0x2a460888OBJECT<unknown>DEFAULT13
__malloc_trim.symtab0x13b08176FUNC<unknown>DEFAULT2
__muldf3.symtab0x19a8c656FUNC<unknown>HIDDEN2
__nedf2.symtab0x19f38132FUNC<unknown>HIDDEN2
__pagesize.symtab0x2a3e44OBJECT<unknown>DEFAULT13
__preinit_array_end.symtab0x240040NOTYPE<unknown>HIDDENSHN_ABS
__preinit_array_start.symtab0x240040NOTYPE<unknown>HIDDENSHN_ABS
__progname.symtab0x2433c4OBJECT<unknown>DEFAULT12
__progname_full.symtab0x243404OBJECT<unknown>DEFAULT12
__pthread_initialize_minimal.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
__pthread_mutex_init.symtab0x152508FUNC<unknown>DEFAULT2
__pthread_mutex_lock.symtab0x152488FUNC<unknown>DEFAULT2
__pthread_mutex_trylock.symtab0x152488FUNC<unknown>DEFAULT2
__pthread_mutex_unlock.symtab0x152488FUNC<unknown>DEFAULT2
__pthread_return_0.symtab0x152488FUNC<unknown>DEFAULT2
__register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
__rtld_fini.symtab0x2a3ec4OBJECT<unknown>HIDDEN13
__sigaddset.symtab0x1312836FUNC<unknown>DEFAULT2
__sigdelset.symtab0x1314c36FUNC<unknown>DEFAULT2
__sigismember.symtab0x1310436FUNC<unknown>DEFAULT2
__stdin.symtab0x241444OBJECT<unknown>DEFAULT12
__stdio_READ.symtab0x192a888FUNC<unknown>HIDDEN2
__stdio_WRITE.symtab0x16644180FUNC<unknown>HIDDEN2
__stdio_adjust_position.symtab0x19300196FUNC<unknown>HIDDEN2
__stdio_fwrite.symtab0x16a00320FUNC<unknown>HIDDEN2
__stdio_init_mutex.symtab0x112c852FUNC<unknown>HIDDEN2
__stdio_mutex_initializer.4636.symtab0x1af4c24OBJECT<unknown>DEFAULT4
__stdio_rfill.symtab0x193c448FUNC<unknown>HIDDEN2
__stdio_seek.symtab0x1948c60FUNC<unknown>HIDDEN2
__stdio_trans2r_o.symtab0x193f4152FUNC<unknown>HIDDEN2
__stdio_trans2w_o.symtab0x16b40208FUNC<unknown>HIDDEN2
__stdio_wcommit.symtab0x113d048FUNC<unknown>HIDDEN2
__stdout.symtab0x241484OBJECT<unknown>DEFAULT12
__subdf3.symtab0x19678788FUNC<unknown>HIDDEN2
__syscall_error.symtab0x1586032FUNC<unknown>HIDDEN2
__syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
__syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
__syscall_rt_sigaction.symtab0x15b3c52FUNC<unknown>DEFAULT2
__syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
__uClibc_fini.symtab0x1528c124FUNC<unknown>DEFAULT2
__uClibc_init.symtab0x1535c108FUNC<unknown>DEFAULT2
__uClibc_main.symtab0x153c8724FUNC<unknown>DEFAULT2
__uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
__uclibc_progname.symtab0x243384OBJECT<unknown>HIDDEN12
__udivsi3.symtab0x10738252FUNC<unknown>HIDDEN2
__vfork.symtab0x1086064FUNC<unknown>HIDDEN2
__xpg_strerror_r.symtab0x12b28256FUNC<unknown>DEFAULT2
__xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
__xstat32_conv.symtab0x18e4c172FUNC<unknown>HIDDEN2
__xstat64_conv.symtab0x18d80204FUNC<unknown>HIDDEN2
__xstat_conv.symtab0x18ef8184FUNC<unknown>HIDDEN2
_adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_bss_custom_printf_spec.symtab0x2a3b410OBJECT<unknown>DEFAULT13
_bss_end__.symtab0x2a7e00NOTYPE<unknown>DEFAULTSHN_ABS
_call_via_fp.symtab0x80fd4FUNC<unknown>HIDDEN2
_call_via_ip.symtab0x81014FUNC<unknown>HIDDEN2
_call_via_lr.symtab0x81094FUNC<unknown>HIDDEN2
_call_via_r0.symtab0x80d14FUNC<unknown>HIDDEN2
_call_via_r1.symtab0x80d54FUNC<unknown>HIDDEN2
_call_via_r2.symtab0x80d94FUNC<unknown>HIDDEN2
_call_via_r3.symtab0x80dd4FUNC<unknown>HIDDEN2
_call_via_r4.symtab0x80e14FUNC<unknown>HIDDEN2
_call_via_r5.symtab0x80e54FUNC<unknown>HIDDEN2
_call_via_r6.symtab0x80e94FUNC<unknown>HIDDEN2
_call_via_r7.symtab0x80ed4FUNC<unknown>HIDDEN2
_call_via_r8.symtab0x80f14FUNC<unknown>HIDDEN2
_call_via_r9.symtab0x80f54FUNC<unknown>HIDDEN2
_call_via_sl.symtab0x80f94FUNC<unknown>HIDDEN2
_call_via_sp.symtab0x81054FUNC<unknown>HIDDEN2
_charpad.symtab0x114e484FUNC<unknown>DEFAULT2
_cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_custom_printf_arginfo.symtab0x2a40840OBJECT<unknown>HIDDEN13
_custom_printf_handler.symtab0x2a43040OBJECT<unknown>HIDDEN13
_custom_printf_spec.symtab0x242404OBJECT<unknown>HIDDEN12
_dl_aux_init.symtab0x18c9856FUNC<unknown>DEFAULT2
_dl_phdr.symtab0x2a7d84OBJECT<unknown>DEFAULT13
_dl_phnum.symtab0x2a7dc4OBJECT<unknown>DEFAULT13
_edata.symtab0x243440NOTYPE<unknown>DEFAULTSHN_ABS
_end.symtab0x2a7e00NOTYPE<unknown>DEFAULTSHN_ABS
_errno.symtab0x2a3f04OBJECT<unknown>DEFAULT13
_exit.symtab0x10d0c44FUNC<unknown>DEFAULT2
_exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_fini.symtab0x1a0bc0FUNC<unknown>DEFAULT3
_fixed_buffers.symtab0x283b48192OBJECT<unknown>DEFAULT13
_fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_fp_out_narrow.symtab0x11538132FUNC<unknown>DEFAULT2
_fpmaxtostr.symtab0x16e082036FUNC<unknown>HIDDEN2
_fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_h_errno.symtab0x2a3f44OBJECT<unknown>DEFAULT13
_init.symtab0x80b40FUNC<unknown>DEFAULT1
_load_inttype.symtab0x16c10112FUNC<unknown>HIDDEN2
_load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_memcpy.symtab0x17d000FUNC<unknown>HIDDEN2
_ppfs_init.symtab0x11ca4160FUNC<unknown>HIDDEN2
_ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_ppfs_parsespec.symtab0x11f8c1392FUNC<unknown>HIDDEN2
_ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_ppfs_prepargs.symtab0x11d4468FUNC<unknown>HIDDEN2
_ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_ppfs_setargs.symtab0x11d88432FUNC<unknown>HIDDEN2
_ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_promoted_size.symtab0x11f3884FUNC<unknown>DEFAULT2
_pthread_cleanup_pop_restore.symtab0x1526044FUNC<unknown>DEFAULT2
_pthread_cleanup_push_defer.symtab0x152588FUNC<unknown>DEFAULT2
_rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_sigintr.symtab0x2a4588OBJECT<unknown>HIDDEN13
_start.symtab0x81b00FUNC<unknown>DEFAULT2
_stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_stdio_fopen.symtab0x166f8776FUNC<unknown>HIDDEN2
_stdio_init.symtab0x11260104FUNC<unknown>HIDDEN2
_stdio_openlist.symtab0x2414c4OBJECT<unknown>DEFAULT12
_stdio_openlist_add_lock.symtab0x2410424OBJECT<unknown>DEFAULT12
_stdio_openlist_dec_use.symtab0x17794392FUNC<unknown>HIDDEN2
_stdio_openlist_del_count.symtab0x283b04OBJECT<unknown>DEFAULT13
_stdio_openlist_del_lock.symtab0x2411c24OBJECT<unknown>DEFAULT12
_stdio_openlist_use_count.symtab0x283ac4OBJECT<unknown>DEFAULT13
_stdio_streams.symtab0x24150240OBJECT<unknown>DEFAULT12
_stdio_term.symtab0x112fc212FUNC<unknown>HIDDEN2
_stdio_user_locking.symtab0x241344OBJECT<unknown>DEFAULT12
_stdlib_strto_l.symtab0x14754448FUNC<unknown>HIDDEN2
_stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_store_inttype.symtab0x16c8044FUNC<unknown>HIDDEN2
_store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_string_syserrmsgs.symtab0x1b01c2906OBJECT<unknown>HIDDEN4
_string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_uintmaxtostr.symtab0x16cac348FUNC<unknown>HIDDEN2
_uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_vfprintf_internal.symtab0x115bc1768FUNC<unknown>HIDDEN2
_vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
_wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
abort.symtab0x13fe8296FUNC<unknown>DEFAULT2
abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
aeabi_unwind_cpp_pr1.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
atoi.symtab0x1471832FUNC<unknown>DEFAULT2
atol.symtab0x1471832FUNC<unknown>DEFAULT2
atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
been_there_done_that.symtab0x2a3d44OBJECT<unknown>DEFAULT13
brk.symtab0x18cd076FUNC<unknown>DEFAULT2
brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
bsd_signal.symtab0x1304c184FUNC<unknown>DEFAULT2
buf.2975.symtab0x2a3c416OBJECT<unknown>DEFAULT13
c.symtab0x240ec4OBJECT<unknown>DEFAULT12
calloc.symtab0x187b0308FUNC<unknown>DEFAULT2
calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
chdir.symtab0x10a7c52FUNC<unknown>DEFAULT2
chdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
client.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
clock_getres.symtab0x159c452FUNC<unknown>DEFAULT2
clock_getres.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
close.symtab0x10d7052FUNC<unknown>DEFAULT2
close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
closedir.symtab0x15b70248FUNC<unknown>DEFAULT2
closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
commServer.symtab0x240944OBJECT<unknown>DEFAULT12
completed.4959.symtab0x243481OBJECT<unknown>DEFAULT13
connect.symtab0x12df856FUNC<unknown>DEFAULT2
connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
connectTimeout.symtab0x9d28628FUNC<unknown>DEFAULT2
crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
csum.symtab0xac3c340FUNC<unknown>DEFAULT2
currentServer.symtab0x240984OBJECT<unknown>DEFAULT12
data_start.symtab0x2408c0NOTYPE<unknown>DEFAULT12
dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
dup2.symtab0x108a052FUNC<unknown>DEFAULT2
dup2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
environ.symtab0x2a3e04OBJECT<unknown>DEFAULT13
errno.symtab0x2a3f04OBJECT<unknown>DEFAULT13
errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
execl.symtab0x1519c172FUNC<unknown>DEFAULT2
execl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
execve.symtab0x1595452FUNC<unknown>DEFAULT2
execve.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
exit.symtab0x14914184FUNC<unknown>DEFAULT2
exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
exp10_table.symtab0x1bc2872OBJECT<unknown>DEFAULT4
fclose.symtab0x16434436FUNC<unknown>DEFAULT2
fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fcntl.symtab0x10b78108FUNC<unknown>DEFAULT2
fd_to_DIR.symtab0x15c68208FUNC<unknown>DEFAULT2
fdgets.symtab0x9290212FUNC<unknown>DEFAULT2
fdopen.symtab0x165e860FUNC<unknown>DEFAULT2
fdopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fdopen_pids.symtab0x283804OBJECT<unknown>DEFAULT13
fdopendir.symtab0x15de4152FUNC<unknown>DEFAULT2
fdpclose.symtab0x9108392FUNC<unknown>DEFAULT2
fdpopen.symtab0x8e80648FUNC<unknown>DEFAULT2
fflush_unlocked.symtab0x1791c524FUNC<unknown>DEFAULT2
fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fgetc.symtab0x175fc220FUNC<unknown>DEFAULT2
fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fgetc_unlocked.symtab0x17b28300FUNC<unknown>DEFAULT2
fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fgets.symtab0x176d8188FUNC<unknown>DEFAULT2
fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fgets_unlocked.symtab0x17c54160FUNC<unknown>DEFAULT2
fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fmt.symtab0x1bc1020OBJECT<unknown>DEFAULT4
fopen.symtab0x1662432FUNC<unknown>DEFAULT2
fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fork.symtab0x109ec52FUNC<unknown>DEFAULT2
fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fputs_unlocked.symtab0x124fc56FUNC<unknown>DEFAULT2
fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
frame_dummy.symtab0x81500FUNC<unknown>DEFAULT2
free.symtab0x13d6c572FUNC<unknown>DEFAULT2
free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fseek.symtab0x1913436FUNC<unknown>DEFAULT2
fseeko.symtab0x1913436FUNC<unknown>DEFAULT2
fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fseeko64.symtab0x19158336FUNC<unknown>DEFAULT2
fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fstat.symtab0x18d2888FUNC<unknown>DEFAULT2
fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
fwrite_unlocked.symtab0x12534176FUNC<unknown>DEFAULT2
fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
getBogos.symtab0x965c568FUNC<unknown>DEFAULT2
getBuild.symtab0xfcec36FUNC<unknown>DEFAULT2
getCores.symtab0x9894236FUNC<unknown>DEFAULT2
getHost.symtab0x9594104FUNC<unknown>DEFAULT2
getOurIP.symtab0xfa30700FUNC<unknown>DEFAULT2
getRandomIP.symtab0xabd8100FUNC<unknown>DEFAULT2
getRandomPublicIP.symtab0xa6f01256FUNC<unknown>DEFAULT2
getc.symtab0x175fc220FUNC<unknown>DEFAULT2
getc_unlocked.symtab0x17b28300FUNC<unknown>DEFAULT2
getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
getdtablesize.symtab0x10ae444FUNC<unknown>DEFAULT2
getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
getegid.symtab0x15a2c20FUNC<unknown>DEFAULT2
getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
geteuid.symtab0x15a4020FUNC<unknown>DEFAULT2
geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
getgid.symtab0x15ac020FUNC<unknown>DEFAULT2
getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
getpagesize.symtab0x1598840FUNC<unknown>DEFAULT2
getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
getpid.symtab0x1096820FUNC<unknown>DEFAULT2
getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
getrlimit.symtab0x159f852FUNC<unknown>DEFAULT2
getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
getsockname.symtab0x12e3056FUNC<unknown>DEFAULT2
getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
getsockopt.symtab0x12e6868FUNC<unknown>DEFAULT2
getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
gettimeofday.symtab0x10b4452FUNC<unknown>DEFAULT2
gettimeofday.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
getuid.symtab0x159b020FUNC<unknown>DEFAULT2
getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
gotIP.symtab0x2436c4OBJECT<unknown>DEFAULT13
h_errno.symtab0x2a3f44OBJECT<unknown>DEFAULT13
hextable.symtab0x1a30c1024OBJECT<unknown>DEFAULT4
htonl.symtab0x12cd832FUNC<unknown>DEFAULT2
htons.symtab0x12cc816FUNC<unknown>DEFAULT2
i.4597.symtab0x240f04OBJECT<unknown>DEFAULT12
index.symtab0x129f0240FUNC<unknown>DEFAULT2
inet_addr.symtab0x12dd040FUNC<unknown>DEFAULT2
inet_aton.symtab0x186b8248FUNC<unknown>DEFAULT2
inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
inet_ntoa.symtab0x12db428FUNC<unknown>DEFAULT2
inet_ntoa.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
inet_ntoa_r.symtab0x12d28140FUNC<unknown>DEFAULT2
infectline.symtab0x240904OBJECT<unknown>DEFAULT12
initConnection.symtab0xf860464FUNC<unknown>DEFAULT2
init_rand.symtab0x81ec216FUNC<unknown>DEFAULT2
initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
initstate.symtab0x14284192FUNC<unknown>DEFAULT2
initstate_r.symtab0x14634228FUNC<unknown>DEFAULT2
ioctl.symtab0x10cb884FUNC<unknown>DEFAULT2
ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
ipState.symtab0x283845OBJECT<unknown>DEFAULT13
isatty.symtab0x12c2836FUNC<unknown>DEFAULT2
isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
isspace.symtab0x10da440FUNC<unknown>DEFAULT2
isspace.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
kill.symtab0x10b1052FUNC<unknown>DEFAULT2
kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
libc/string/arm/_memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
libc/string/arm/memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
libc/string/arm/memset.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
libc/string/arm/strcmp.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
libc/string/arm/strlen.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
libc/sysdeps/linux/arm/crt1.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
libc/sysdeps/linux/arm/crti.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
libc/sysdeps/linux/arm/crtn.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
libc/sysdeps/linux/arm/vfork.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
listFork.symtab0x9f9c424FUNC<unknown>DEFAULT2
llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
lseek64.symtab0x194c8100FUNC<unknown>DEFAULT2
macAddress.symtab0x243786OBJECT<unknown>DEFAULT13
main.symtab0xfd102600FUNC<unknown>DEFAULT2
mainCommSock.symtab0x243684OBJECT<unknown>DEFAULT13
makeIPPacket.symtab0xae64256FUNC<unknown>DEFAULT2
makeRandomStr.symtab0x9980184FUNC<unknown>DEFAULT2
malloc.symtab0x131e82336FUNC<unknown>DEFAULT2
malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
malloc_trim.symtab0x13fa864FUNC<unknown>DEFAULT2
matchPrompt.symtab0xa2d4372FUNC<unknown>DEFAULT2
memchr.symtab0x18190240FUNC<unknown>DEFAULT2
memchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
memcpy.symtab0x127104FUNC<unknown>DEFAULT2
mempcpy.symtab0x1856836FUNC<unknown>DEFAULT2
mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
memrchr.symtab0x183ec224FUNC<unknown>DEFAULT2
memrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
memset.symtab0x125f0156FUNC<unknown>DEFAULT2
mmap.symtab0x157f8104FUNC<unknown>DEFAULT2
mmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
mremap.symtab0x18fb064FUNC<unknown>DEFAULT2
mremap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
munmap.symtab0x15ad452FUNC<unknown>DEFAULT2
munmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
mylock.symtab0x2839024OBJECT<unknown>DEFAULT13
mylock.symtab0x2425c24OBJECT<unknown>DEFAULT12
mylock.symtab0x2427424OBJECT<unknown>DEFAULT12
nanosleep.symtab0x15b0852FUNC<unknown>DEFAULT2
nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
negotiate.symtab0xa144400FUNC<unknown>DEFAULT2
next_start.1358.symtab0x2a3c04OBJECT<unknown>DEFAULT13
nprocessors_onln.symtab0x14a78332FUNC<unknown>DEFAULT2
ntohl.symtab0x12d0832FUNC<unknown>DEFAULT2
ntohl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
ntohs.symtab0x12cf816FUNC<unknown>DEFAULT2
numpids.symtab0x243708OBJECT<unknown>DEFAULT13
object.4967.symtab0x2434c24OBJECT<unknown>DEFAULT13
open.symtab0x108d496FUNC<unknown>DEFAULT2
open.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
opendir.symtab0x15d38172FUNC<unknown>DEFAULT2
opendir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
ourIP.symtab0x2a3fc4OBJECT<unknown>DEFAULT13
parseHex.symtab0x9364132FUNC<unknown>DEFAULT2
parse_config.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
passwords.symtab0x240b456OBJECT<unknown>DEFAULT12
pclose.symtab0x10e64312FUNC<unknown>DEFAULT2
pids.symtab0x2a4044OBJECT<unknown>DEFAULT13
pipe.symtab0x1093452FUNC<unknown>DEFAULT2
pipe.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
popen.symtab0x10f9c708FUNC<unknown>DEFAULT2
popen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
popen_list.symtab0x283a84OBJECT<unknown>DEFAULT13
prctl.symtab0x109ac64FUNC<unknown>DEFAULT2
prctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
prefix.4856.symtab0x1af7412OBJECT<unknown>DEFAULT4
print.symtab0x89201012FUNC<unknown>DEFAULT2
printchar.symtab0x853c112FUNC<unknown>DEFAULT2
printf.symtab0x10e1876FUNC<unknown>DEFAULT2
printf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
printi.symtab0x8734492FUNC<unknown>DEFAULT2
prints.symtab0x85ac392FUNC<unknown>DEFAULT2
processCmd.symtab0xe7f84200FUNC<unknown>DEFAULT2
program_invocation_name.symtab0x243404OBJECT<unknown>DEFAULT12
program_invocation_short_name.symtab0x2433c4OBJECT<unknown>DEFAULT12
qual_chars.4865.symtab0x1af8820OBJECT<unknown>DEFAULT4
raise.symtab0x12fd828FUNC<unknown>DEFAULT2
raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
rand.symtab0x1411024FUNC<unknown>DEFAULT2
rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
rand_cmwc.symtab0x82c4324FUNC<unknown>DEFAULT2
random.symtab0x14128164FUNC<unknown>DEFAULT2
random.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
random_poly_info.symtab0x1bb7840OBJECT<unknown>DEFAULT4
random_r.symtab0x144cc144FUNC<unknown>DEFAULT2
random_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
randtbl.symtab0x2428c128OBJECT<unknown>DEFAULT12
rawmemchr.symtab0x1833c176FUNC<unknown>DEFAULT2
rawmemchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
read.symtab0x10ab052FUNC<unknown>DEFAULT2
read.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
readUntil.symtab0xa448680FUNC<unknown>DEFAULT2
readdir64.symtab0x15e7c236FUNC<unknown>DEFAULT2
readdir64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
realloc.symtab0x188e4948FUNC<unknown>DEFAULT2
realloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
recv.symtab0x12eac56FUNC<unknown>DEFAULT2
recv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
recvLine.symtab0x9a38752FUNC<unknown>DEFAULT2
rindex.symtab0x1851880FUNC<unknown>DEFAULT2
sbrk.symtab0x15a54108FUNC<unknown>DEFAULT2
sbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
scanPid.symtab0x2a4004OBJECT<unknown>DEFAULT13
sclose.symtab0xaf6480FUNC<unknown>DEFAULT2
select.symtab0x10a3c64FUNC<unknown>DEFAULT2
select.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
send.symtab0x12ee456FUNC<unknown>DEFAULT2
send.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
sendCNC.symtab0xd4b8208FUNC<unknown>DEFAULT2
sendHOLD.symtab0xe24c1452FUNC<unknown>DEFAULT2
sendHTTP.symtab0xd588172FUNC<unknown>DEFAULT2
sendJUNK.symtab0xdd481284FUNC<unknown>DEFAULT2
sendTCP.symtab0xd6341812FUNC<unknown>DEFAULT2
sendUDP.symtab0xced81504FUNC<unknown>DEFAULT2
sendto.symtab0x12f1c64FUNC<unknown>DEFAULT2
sendto.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
setsid.symtab0x10c8452FUNC<unknown>DEFAULT2
setsid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS

Network Behavior

Snort IDS Alerts

TimestampProtocolSIDMessageSource PortDest PortSource IPDest IP
192.168.2.2345.95.55.1257822232840333 05/27/22-20:01:34.611182TCP2840333ETPRO TROJAN ELF/BASHLITE Variant CnC Activity5782223192.168.2.2345.95.55.12

Network Port Distribution

TCP Packets

TimestampSource PortDest PortSource IPDest IP
May 27, 2022 20:01:34.464443922 CEST5782223192.168.2.2345.95.55.12
May 27, 2022 20:01:34.485968113 CEST235782245.95.55.12192.168.2.23
May 27, 2022 20:01:34.486098051 CEST5782223192.168.2.2345.95.55.12
May 27, 2022 20:01:34.509326935 CEST235782245.95.55.12192.168.2.23
May 27, 2022 20:01:34.509440899 CEST5782223192.168.2.2345.95.55.12
May 27, 2022 20:01:34.611181974 CEST5782223192.168.2.2345.95.55.12
May 27, 2022 20:01:34.631892920 CEST235782245.95.55.12192.168.2.23
May 27, 2022 20:01:34.677701950 CEST5782223192.168.2.2345.95.55.12
May 27, 2022 20:01:34.684135914 CEST4815623192.168.2.231.1.1.1
May 27, 2022 20:01:34.684247971 CEST4251823192.168.2.232.2.2.2
May 27, 2022 20:01:34.684303999 CEST4959223192.168.2.233.3.3.3
May 27, 2022 20:01:34.684364080 CEST5470823192.168.2.234.4.4.4
May 27, 2022 20:01:34.684391022 CEST4016223192.168.2.235.5.5.5
May 27, 2022 20:01:34.684469938 CEST5783223192.168.2.237.7.7.7
May 27, 2022 20:01:34.684547901 CEST4908223192.168.2.236.6.6.6
May 27, 2022 20:01:34.684551954 CEST5714023192.168.2.239.9.9.9
May 27, 2022 20:01:34.684587002 CEST4626023192.168.2.238.8.8.8
May 27, 2022 20:01:34.684658051 CEST3601023192.168.2.2310.10.10.10
May 27, 2022 20:01:34.684700012 CEST6045823192.168.2.2311.11.11.11
May 27, 2022 20:01:34.684726954 CEST4037823192.168.2.2312.12.12.12
May 27, 2022 20:01:34.684834957 CEST4066223192.168.2.2313.13.13.13
May 27, 2022 20:01:34.684864044 CEST4399823192.168.2.2314.14.14.14
May 27, 2022 20:01:34.684923887 CEST5360223192.168.2.2315.15.15.15
May 27, 2022 20:01:34.684962988 CEST5019223192.168.2.2316.16.16.16
May 27, 2022 20:01:34.685055017 CEST5376623192.168.2.2317.17.17.17
May 27, 2022 20:01:34.685102940 CEST3287223192.168.2.2318.18.18.18
May 27, 2022 20:01:34.685103893 CEST4321023192.168.2.2319.19.19.19
May 27, 2022 20:01:34.685158968 CEST4935623192.168.2.2320.20.20.20
May 27, 2022 20:01:34.685173988 CEST5175823192.168.2.2321.21.21.21
May 27, 2022 20:01:34.685221910 CEST4970223192.168.2.2322.22.22.22
May 27, 2022 20:01:34.685314894 CEST5701623192.168.2.2323.23.23.23
May 27, 2022 20:01:34.685317993 CEST5844423192.168.2.2324.24.24.24
May 27, 2022 20:01:34.685369015 CEST4612823192.168.2.2325.25.25.25
May 27, 2022 20:01:34.685393095 CEST4377623192.168.2.2326.26.26.26
May 27, 2022 20:01:34.685478926 CEST5211623192.168.2.2327.27.27.27
May 27, 2022 20:01:34.685523987 CEST3703023192.168.2.2328.28.28.28
May 27, 2022 20:01:34.685617924 CEST4886623192.168.2.2329.29.29.29
May 27, 2022 20:01:34.685622931 CEST3557023192.168.2.2330.30.30.30
May 27, 2022 20:01:34.685678005 CEST3311823192.168.2.2331.31.31.31
May 27, 2022 20:01:34.685730934 CEST5135023192.168.2.2333.33.33.33
May 27, 2022 20:01:34.685748100 CEST5360223192.168.2.2332.32.32.32
May 27, 2022 20:01:34.685811996 CEST5215223192.168.2.2334.34.34.34
May 27, 2022 20:01:34.685879946 CEST3919223192.168.2.2336.36.36.36
May 27, 2022 20:01:34.685899973 CEST5737023192.168.2.2335.35.35.35
May 27, 2022 20:01:34.685949087 CEST5166823192.168.2.2337.37.37.37
May 27, 2022 20:01:34.685952902 CEST4898623192.168.2.2338.38.38.38
May 27, 2022 20:01:34.686008930 CEST5514023192.168.2.2339.39.39.39
May 27, 2022 20:01:34.686062098 CEST4163023192.168.2.2340.40.40.40
May 27, 2022 20:01:34.686163902 CEST5665823192.168.2.2342.42.42.42
May 27, 2022 20:01:34.686204910 CEST4162223192.168.2.2341.41.41.41
May 27, 2022 20:01:34.686245918 CEST6046223192.168.2.2344.44.44.44
May 27, 2022 20:01:34.686316967 CEST3968823192.168.2.2343.43.43.43
May 27, 2022 20:01:34.686357021 CEST3415223192.168.2.2345.45.45.45
May 27, 2022 20:01:34.686374903 CEST5450223192.168.2.2346.46.46.46
May 27, 2022 20:01:34.686393023 CEST3558623192.168.2.2348.48.48.48
May 27, 2022 20:01:34.686415911 CEST4328623192.168.2.2349.49.49.49
May 27, 2022 20:01:34.686436892 CEST5345823192.168.2.2350.50.50.50
May 27, 2022 20:01:34.686475039 CEST5867623192.168.2.2352.52.52.52
May 27, 2022 20:01:34.686475992 CEST4892623192.168.2.2347.47.47.47
May 27, 2022 20:01:34.686495066 CEST4116623192.168.2.2351.51.51.51
May 27, 2022 20:01:34.686526060 CEST6016423192.168.2.2353.53.53.53
May 27, 2022 20:01:34.686532021 CEST4955223192.168.2.2355.55.55.55
May 27, 2022 20:01:34.686561108 CEST3474423192.168.2.2354.54.54.54
May 27, 2022 20:01:34.686584949 CEST4925823192.168.2.2356.56.56.56
May 27, 2022 20:01:34.686589003 CEST4386023192.168.2.2357.57.57.57
May 27, 2022 20:01:34.686611891 CEST5236423192.168.2.2358.58.58.58
May 27, 2022 20:01:34.686624050 CEST4047423192.168.2.2359.59.59.59
May 27, 2022 20:01:34.686644077 CEST3944023192.168.2.2360.60.60.60
May 27, 2022 20:01:34.698908091 CEST5501023192.168.2.2361.61.61.61
May 27, 2022 20:01:34.698941946 CEST3454023192.168.2.2362.62.62.62
May 27, 2022 20:01:34.698968887 CEST3897223192.168.2.2363.63.63.63
May 27, 2022 20:01:34.698990107 CEST3337423192.168.2.2364.64.64.64
May 27, 2022 20:01:34.699024916 CEST4411423192.168.2.2365.65.65.65
May 27, 2022 20:01:34.699043036 CEST3639623192.168.2.2366.66.66.66
May 27, 2022 20:01:34.699071884 CEST3900623192.168.2.2367.67.67.67
May 27, 2022 20:01:34.699105978 CEST3464623192.168.2.2368.68.68.68
May 27, 2022 20:01:34.699126959 CEST5151023192.168.2.2369.69.69.69
May 27, 2022 20:01:34.699167013 CEST5714223192.168.2.2370.70.70.70
May 27, 2022 20:01:34.699254036 CEST4552623192.168.2.2371.71.71.71
May 27, 2022 20:01:34.699295998 CEST3377023192.168.2.2373.73.73.73
May 27, 2022 20:01:34.699299097 CEST4346623192.168.2.2372.72.72.72
May 27, 2022 20:01:34.699327946 CEST5304423192.168.2.2374.74.74.74
May 27, 2022 20:01:34.699353933 CEST5600223192.168.2.2375.75.75.75
May 27, 2022 20:01:34.699409962 CEST4900823192.168.2.2377.77.77.77
May 27, 2022 20:01:34.699398041 CEST4626223192.168.2.2376.76.76.76
May 27, 2022 20:01:34.699450970 CEST5477223192.168.2.2378.78.78.78
May 27, 2022 20:01:34.699462891 CEST4806623192.168.2.2379.79.79.79
May 27, 2022 20:01:34.699485064 CEST4158023192.168.2.2380.80.80.80
May 27, 2022 20:01:34.699512005 CEST3738223192.168.2.2381.81.81.81
May 27, 2022 20:01:34.699551105 CEST4356823192.168.2.2382.82.82.82
May 27, 2022 20:01:34.699563980 CEST5758423192.168.2.2383.83.83.83
May 27, 2022 20:01:34.699596882 CEST5101023192.168.2.2384.84.84.84
May 27, 2022 20:01:34.699606895 CEST4651823192.168.2.2385.85.85.85
May 27, 2022 20:01:34.699644089 CEST4078623192.168.2.2386.86.86.86
May 27, 2022 20:01:34.699665070 CEST5926423192.168.2.2387.87.87.87
May 27, 2022 20:01:34.699703932 CEST5645023192.168.2.2388.88.88.88
May 27, 2022 20:01:34.699724913 CEST4969223192.168.2.2389.89.89.89
May 27, 2022 20:01:34.699748993 CEST3375823192.168.2.2390.90.90.90
May 27, 2022 20:01:34.699774981 CEST4149223192.168.2.2391.91.91.91
May 27, 2022 20:01:34.699822903 CEST4583423192.168.2.2393.93.93.93

System Behavior

General

Start time:20:01:32
Start date:27/05/2022
Path:/tmp/tftp
Arguments:/tmp/tftp
File size:4956856 bytes
MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

General

Start time:20:01:33
Start date:27/05/2022
Path:/tmp/tftp
Arguments:n/a
File size:4956856 bytes
MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

General

Start time:20:01:33
Start date:27/05/2022
Path:/tmp/tftp
Arguments:n/a
File size:4956856 bytes
MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

General

Start time:20:01:33
Start date:27/05/2022
Path:/tmp/tftp
Arguments:n/a
File size:4956856 bytes
MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1