Edit tour

Linux Analysis Report
spc.elf

Overview

General Information

Sample name:	spc.elf
Analysis ID:	1541277
MD5:	e7fc75902bc90a5fa40e27797b6855d6
SHA1:	7897588ee87011da8246b028edf06c1b39eb6dae
SHA256:	470c4d933e1f20f116b31762de8320108993fd97ca49da8cce7f95c31a008061
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false

Signatures

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541277
Start date and time:	2024-10-24 16:47:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	spc.elf
Detection:	CLEAN
Classification:	clean1.linELF@0/0@0/0

Warnings

VT rate limit hit for: spc.elf

Runtime Messages

Command:	/tmp/spc.elf
PID:	6221
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

spc.elf (PID: 6221, Parent: 6143, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/spc.elf

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: classification engine

Classification label: clean1.linELF@0/0@0/0

Source: /tmp/spc.elf (PID: 6221)

Queries kernel information via 'uname':

Jump to behavior

Source: spc.elf, 6221.1.000055c85973f000.000055c8597a4000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: spc.elf, 6221.1.000055c85973f000.000055c8597a4000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/sparc
Source: spc.elf, 6221.1.00007ffdc69c7000.00007ffdc69e8000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sparc/tmp/spc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/spc.elf
Source: spc.elf, 6221.1.00007ffdc69c7000.00007ffdc69e8000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	hmips.elf	Get hash	malicious	Unknown	Browse
	vqsjh4.elf	Get hash	malicious	Gafgyt, Mirai, Okiru	Browse
	vwkjebwi686.elf	Get hash	malicious	Mirai, Okiru	Browse
	arm7.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
	ppc.elf	Get hash	malicious	Unknown	Browse
	mozi.m.elf	Get hash	malicious	Unknown	Browse
	tftp.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	i486.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	hmips.elf	Get hash	malicious	Unknown	Browse
	vqsjh4.elf	Get hash	malicious	Gafgyt, Mirai, Okiru	Browse
	vwkjebwi686.elf	Get hash	malicious	Mirai, Okiru	Browse
	arm7.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
	ppc.elf	Get hash	malicious	Unknown	Browse
	mozi.m.elf	Get hash	malicious	Unknown	Browse
	tftp.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	i486.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	hmips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	vqsjh4.elf	Get hash	malicious	Gafgyt, Mirai, Okiru	Browse	91.189.91.42
	vwkjebwi686.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mpsl.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ppc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mozi.m.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	i686.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
CANONICAL-ASGB	hmips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	vqsjh4.elf	Get hash	malicious	Gafgyt, Mirai, Okiru	Browse	91.189.91.42
	vwkjebwi686.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mpsl.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ppc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mozi.m.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	i686.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
INIT7CH	hmips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	vqsjh4.elf	Get hash	malicious	Gafgyt, Mirai, Okiru	Browse	109.202.202.202
	vwkjebwi686.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	arm7.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	mpsl.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ppc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	mozi.m.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	tftp.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	.i.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	i486.elf	Get hash	malicious	Unknown	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.84199577288499
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	spc.elf
File size:	78'822 bytes
MD5:	e7fc75902bc90a5fa40e27797b6855d6
SHA1:	7897588ee87011da8246b028edf06c1b39eb6dae
SHA256:	470c4d933e1f20f116b31762de8320108993fd97ca49da8cce7f95c31a008061
SHA512:	4025571cbbc8013ba42cb0ab844a743be7e3daf5c32c3201842c01bc448f6908fc7239a8e7115d3fd75bff838192e45f4ed6898b0c11136ab8b9bf19e6fe58ce
SSDEEP:	768:2OvGN0hwPXpeLjO+f3KoQ3WXipOMv+OLtIb6r7itB2IGbix5puQeQHwd:p+N0+vpuf37kOMv+OLtIbPtB2RswQQd
TLSH:	AA734A32377A4A27C4E6A53840E7D337B7F68B9519700207B664AFCC3B59AE035933A1
File Content Preview:	.ELF...........................4...8.....4. ...(.......................P...P..............................3(...............H...H...H................dt.Q................................@..(....@.0.................#.....c...`.....!.....!...@.....".........`

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101c4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	60984
Section Header Size:	40
Number of Section Headers:	17
Header String Table Index:	14

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x100b4	0xb4	0x1c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100d0	0xd0	0xc298	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x1c368	0xc368	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1c380	0xc380	0x11d0	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x2e000	0xe000	0x48	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x2e048	0xe048	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x2e048	0xe048	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x2e050	0xe050	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2e058	0xe058	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x2e05c	0xe05c	0x180	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x2e1e0	0xe1e0	0x20c	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x2e3f0	0xe3ec	0x2f38	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0xe3ec	0x9d8	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0xedc4	0x71	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0xf0e0	0x2580	0x10	0x0		16	239	4
.strtab	STRTAB	0x0	0x11660	0x1d86	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0xd550	0xd550	5.9528	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0xe000	0x2e000	0x2e000	0x3ec	0x3328	4.4865	0x6	RW	0x10000	.eh_frame .tbss .ctors .dtors .jcr .got .data .bss
TLS	0xe048	0x2e048	0x2e048	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x100b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100d0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1c368	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1c380	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x2e000	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x2e048	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x2e048	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x2e050	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2e058	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2e05c	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x2e1e0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x2e3f0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
.LLC3	.symtab	0x1d178	0	NOTYPE	<unknown>	DEFAULT	4
C.23.5636	.symtab	0x1d48c	24	OBJECT	<unknown>	DEFAULT	4
_Exit	.symtab	0x17f18	128	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x2e05c	0	OBJECT	<unknown>	HIDDEN	10
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x2e04c	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x2e048	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x2e3e4	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1d18a	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x2e054	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x2e050	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x2e000	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x2e044	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x2e3e4	4	OBJECT	<unknown>	HIDDEN	11
__GI___close	.symtab	0x172e4	124	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x172f0	32	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x2e3e8	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x108d8	36	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x17d54	196	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1a4dc	344	FUNC	<unknown>	HIDDEN	2
__GI___fputc_unlocked	.symtab	0x1265c	292	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x14760	32	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x172e4	124	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x17e18	248	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x1b4fc	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x1c218	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x1b580	132	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x1b4fc	132	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x1b508	32	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x1c218	132	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x1c224	32	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x17580	168	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x1767c	92	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x1b580	132	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x1b58c	32	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x14788	300	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x17f18	128	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x15bac	280	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x1b2f0	24	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x14940	36	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1ba18	88	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x172e4	124	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x18410	208	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x18b4c	64	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x18b94	80	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x187f0	860	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x14964	96	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x16230	168	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x18d1c	860	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x17e18	248	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1227c	992	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1a290	320	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1a4dc	344	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1a3d0	260	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1a634	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x19078	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x16b20	1088	FUNC	<unknown>	HIDDEN	2
__GI_fputc_unlocked	.symtab	0x1265c	292	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x12780	60	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1bda4	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1bdd0	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1ba78	116	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x127c4	196	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1a4dc	344	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x17f98	40	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x17fc0	32	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x17fe0	32	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x18000	32	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x18028	56	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x17024	88	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x18068	92	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x149c4	36	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x180c4	32	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x16020	244	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x180ec	228	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x148b4	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x107d8	92	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x149e8	28	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1c2a4	124	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1a754	280	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x12eb4	4212	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x128d0	1508	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1abac	32	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1abcc	256	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x13f5c	416	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1083c	108	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1baf4	104	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x181d8	92	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x18298	72	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x1b4fc	132	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x18598	228	FUNC	<unknown>	HIDDEN	2
__GI_printf	.symtab	0x10904	76	FUNC	<unknown>	HIDDEN	2
__GI_putc_unlocked	.symtab	0x1265c	292	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x17084	264	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x15ccc	108	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x15e98	152	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x1c218	132	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x18734	188	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x14a04	92	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x182e8	108	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x14a60	92	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x14abc	44	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x16114	276	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x17b50	264	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1835c	172	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x17194	336	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x14ae8	36	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x15f30	232	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x141d0	896	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x1a8e0	524	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1accc	260	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x14630	60	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x145b8	120	FUNC	<unknown>	HIDDEN	2
__GI_strncmp	.symtab	0x1add0	244	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x1466c	244	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1aaec	192	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1aec4	84	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1b308	20	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x166a4	1140	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x148d4	108	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x108a8	40	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x10b48	308	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x18be4	76	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x18c54	192	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x18c30	28	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x1b580	132	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2e058	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x2e058	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x309e4	4	OBJECT	<unknown>	HIDDEN	12
__atexit_lock	.symtab	0x2e3c0	24	OBJECT	<unknown>	DEFAULT	11
__bss_start	.symtab	0x2e3ec	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x17628	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x172e4	124	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x172f0	32	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x2e3e8	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x30f28	4	OBJECT	<unknown>	HIDDEN	12
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x1c320	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100d0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x2e1e0	0	OBJECT	<unknown>	HIDDEN	11
__environ	.symtab	0x309dc	4	OBJECT	<unknown>	DEFAULT	12
__errno_location	.symtab	0x108d8	36	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x3048c	4	OBJECT	<unknown>	HIDDEN	12
__fcntl_nocancel	.symtab	0x17d54	196	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1a4dc	344	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2e048	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x2e048	0	NOTYPE	<unknown>	HIDDEN	6
__fork	.symtab	0x16b20	1088	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x312f4	4	OBJECT	<unknown>	HIDDEN	12
__fork_handlers	.symtab	0x312f8	4	OBJECT	<unknown>	HIDDEN	12
__fork_lock	.symtab	0x30490	4	OBJECT	<unknown>	HIDDEN	12
__fputc_unlocked	.symtab	0x1265c	292	FUNC	<unknown>	DEFAULT	2
__getdents64	.symtab	0x1bc74	304	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x18028	56	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x17024	88	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x14760	32	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x2e048	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x2e048	0	NOTYPE	<unknown>	HIDDEN	6
__libc_close	.symtab	0x172e4	124	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x14964	96	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x17368	196	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x1742c	268	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	6
__libc_fcntl	.symtab	0x17e18	248	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x16b20	1088	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	6
__libc_nanosleep	.symtab	0x18298	72	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x1b4fc	132	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x1c218	132	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x14a04	92	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x14a60	92	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1b6e0	636	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x17b50	264	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x309d8	4	OBJECT	<unknown>	DEFAULT	12
__libc_write	.symtab	0x1b580	132	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x16f78	172	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x15784	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x14b94	144	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2e2e4	24	OBJECT	<unknown>	DEFAULT	11
__malloc_state	.symtab	0x30f7c	888	OBJECT	<unknown>	DEFAULT	12
__malloc_trim	.symtab	0x156d4	176	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x1b4fc	132	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x1b508	32	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x309e0	4	OBJECT	<unknown>	DEFAULT	12
__preinit_array_end	.symtab	0x2e048	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x2e048	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x2e3dc	4	OBJECT	<unknown>	DEFAULT	11
__progname_full	.symtab	0x2e3e0	4	OBJECT	<unknown>	DEFAULT	11
__psfs_do_numeric.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__psfs_parse_spec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__pthread_initialize_minimal	.symtab	0x1b95c	24	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x17540	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x17538	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x17538	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x17538	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x17538	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x1c218	132	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x1c224	32	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__rt_sigreturn_stub	.symtab	0x17b28	16	FUNC	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x309e8	4	OBJECT	<unknown>	HIDDEN	12
__scan_cookie.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__sigjmp_save	.symtab	0x1af18	60	FUNC	<unknown>	HIDDEN	2
__sigreturn_stub	.symtab	0x17b38	16	FUNC	<unknown>	DEFAULT	2
__sigsetjmp	.symtab	0x17ccc	28	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x17cf0	92	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__sparc32_atomic_locks	.symtab	0x2e418	64	OBJECT	<unknown>	HIDDEN	12
__stdin	.symtab	0x2e208	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x1bf90	104	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x19098	248	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1c000	248	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1963c	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1c0f8	56	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1c1e4	52	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1c138	172	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x19784	272	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x10b10	56	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x2e20c	4	OBJECT	<unknown>	DEFAULT	11
__strtofpmax.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_error	.symtab	0x17b00	40	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x1823c	92	FUNC	<unknown>	DEFAULT	2
__sysv_signal	.symtab	0x14b14	128	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x17580	168	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x1767c	92	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x176d8	1056	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__ubp_memchr	.symtab	0x1a754	280	FUNC	<unknown>	DEFAULT	2
__uclibc_progname	.symtab	0x2e3d8	4	OBJECT	<unknown>	HIDDEN	11
__write	.symtab	0x1b580	132	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x1b58c	32	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x14788	300	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x1bbe8	132	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x1bb5c	140	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x30478	10	OBJECT	<unknown>	DEFAULT	12
_charpad	.symtab	0x10c7c	64	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x30f2c	40	OBJECT	<unknown>	HIDDEN	12
_custom_printf_handler	.symtab	0x30f54	40	OBJECT	<unknown>	HIDDEN	12
_custom_printf_spec	.symtab	0x2e2e0	4	OBJECT	<unknown>	HIDDEN	11
_dl_aux_init	.symtab	0x1b97c	64	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x1b9bc	84	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x3131c	4	OBJECT	<unknown>	DEFAULT	12
_dl_phnum	.symtab	0x31320	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_gaps	.symtab	0x31310	1	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_slotinfo_list	.symtab	0x3130c	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_generation	.symtab	0x31314	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_max_dtv_idx	.symtab	0x31304	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_setup	.symtab	0x1b684	92	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x31300	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_nelem	.symtab	0x31318	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_size	.symtab	0x31308	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_used	.symtab	0x312fc	4	OBJECT	<unknown>	DEFAULT	12
_edata	.symtab	0x2e3ec	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x31328	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x17f18	128	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1c368	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x2e478	8192	OBJECT	<unknown>	DEFAULT	12
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x10cbc	116	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x19aa0	2032	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x100b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x19894	144	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x114a0	156	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x117e0	1604	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x1153c	60	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x11578	492	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x1176c	116	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x17554	36	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x17548	12	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x17cc0	8	FUNC	<unknown>	DEFAULT	2
_start	.symtab	0x101c4	56	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x19198	1188	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x10958	124	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x2e210	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x2e458	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_dec_use	.symtab	0x11f9c	736	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x2e474	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_del_lock	.symtab	0x2e464	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_use_count	.symtab	0x2e470	4	OBJECT	<unknown>	DEFAULT	12
_stdio_streams	.symtab	0x2e214	204	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x109d4	316	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x2e1f8	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x1b324	472	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdlib_strto_ll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x19924	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1c580	2934	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x19960	312	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x10d38	1896	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x15bac	280	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x1b2f0	24	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x1b2f0	24	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
authBytes	.symtab	0x2e1f0	4	OBJECT	<unknown>	DEFAULT	11
bcopy	.symtab	0x128c4	12	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x30488	4	OBJECT	<unknown>	DEFAULT	12
bind	.symtab	0x14940	36	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1ba18	88	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bzero	.symtab	0x13f28	52	FUNC	<unknown>	DEFAULT	2
call___do_global_ctors_aux	.symtab	0x1c35c	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x1014c	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x101b8	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x155b8	284	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x172e4	124	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x18410	208	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cncHost	.symtab	0x2e1e8	4	OBJECT	<unknown>	DEFAULT	11
completed.4753	.symtab	0x2e3f0	1	OBJECT	<unknown>	DEFAULT	12
connect	.symtab	0x14964	96	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectToCNC	.symtab	0x101fc	268	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
endianness	.symtab	0x2e40c	4	OBJECT	<unknown>	DEFAULT	12
ensure	.symtab	0x103b0	192	FUNC	<unknown>	DEFAULT	2
environ	.symtab	0x309dc	4	OBJECT	<unknown>	DEFAULT	12
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	6
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x1c4f0	126	OBJECT	<unknown>	DEFAULT	4
exit	.symtab	0x16230	168	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x1d508	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x18d1c	860	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x17e18	248	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x184e8	176	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x1867c	176	FUNC	<unknown>	DEFAULT	2
fetchBuf	.symtab	0x10470	176	FUNC	<unknown>	DEFAULT	2
fetchLocalAddress	.symtab	0x1059c	224	FUNC	<unknown>	DEFAULT	2
fflush.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fflush_unlocked	.symtab	0x1227c	992	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x1a290	320	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1a4dc	344	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1a3d0	260	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1a634	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x1d4f0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x19078	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x16b20	1088	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x30494	1348	OBJECT	<unknown>	DEFAULT	12
fprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputc_unlocked	.symtab	0x1265c	292	FUNC	<unknown>	DEFAULT	2
fputc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x12780	60	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x10158	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x15940	564	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x1bda4	36	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x1bda4	36	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x1bdd0	448	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x1ba78	116	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x127c4	196	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getDeviceName	.symtab	0x10308	168	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x1a290	320	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x1a4dc	344	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x17f98	40	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x17fc0	32	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x17fe0	32	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x18000	32	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x18028	56	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x17024	88	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x18068	92	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x149c4	36	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x180c4	32	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	6
handleCommand	.symtab	0x10520	124	FUNC	<unknown>	DEFAULT	2
index	.symtab	0x1a8e0	524	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
init_static_tls	.symtab	0x1b60c	120	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x15db4	124	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x16020	244	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x180ec	228	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x148b4	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x107d8	92	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x149e8	28	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
localAddress	.symtab	0x2e410	4	OBJECT	<unknown>	DEFAULT	12
lseek64	.symtab	0x1c2a4	124	FUNC	<unknown>	DEFAULT	2
main	.symtab	0x1067c	340	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc	.symtab	0x14c2c	2436	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x15b74	48	FUNC	<unknown>	DEFAULT	2
mbrtowc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mbsnrtowcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x1a754	280	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x12eb4	4212	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x128d0	1508	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x1abac	32	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1abcc	256	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x13f5c	416	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x1083c	108	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mount.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x1baf4	104	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x181d8	92	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x2e2fc	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x2e314	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x18298	72	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
object.4768	.symtab	0x2e3f4	24	OBJECT	<unknown>	DEFAULT	12
open	.symtab	0x1b4fc	132	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x18598	228	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
p.4751	.symtab	0x2e1e4	0	OBJECT	<unknown>	DEFAULT	11
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
perror.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6476	.symtab	0x1c448	12	OBJECT	<unknown>	DEFAULT	4
printf	.symtab	0x10904	76	FUNC	<unknown>	DEFAULT	2
printf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
program_invocation_name	.symtab	0x2e3e0	4	OBJECT	<unknown>	DEFAULT	11
program_invocation_short_name	.symtab	0x2e3dc	4	OBJECT	<unknown>	DEFAULT	11
putc_unlocked	.symtab	0x1265c	292	FUNC	<unknown>	DEFAULT	2
putchar	.symtab	0x11e2c	360	FUNC	<unknown>	DEFAULT	2
putchar.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
puts.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
qual_chars.6485	.symtab	0x1c460	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x17084	264	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random	.symtab	0x15ccc	108	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x1d0f8	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x15e98	152	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x2e32c	128	OBJECT	<unknown>	DEFAULT	11
read	.symtab	0x1c218	132	FUNC	<unknown>	DEFAULT	2
readdir64	.symtab	0x18734	188	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x1af5c	916	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x14a04	92	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rindex	.symtab	0x1aaec	192	FUNC	<unknown>	DEFAULT	2
rt_sigaction	.symtab	0x17c58	104	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x182e8	108	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x14a60	92	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setjmp	.symtab	0x17cc8	4	FUNC	<unknown>	DEFAULT	2
setsockopt	.symtab	0x14abc	44	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x15d38	124	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x16114	276	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x17b50	264	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigjmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x1835c	172	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x17194	336	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
snprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x14ae8	36	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
spec_and_mask.6484	.symtab	0x1c474	16	OBJECT	<unknown>	DEFAULT	4
spec_base.6475	.symtab	0x1c458	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.6481	.symtab	0x1c4d0	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.6480	.symtab	0x1c4e8	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.6483	.symtab	0x1c484	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.6482	.symtab	0x1c498	9	OBJECT	<unknown>	DEFAULT	4
srand	.symtab	0x15e30	104	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x15e30	104	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x15f30	232	FUNC	<unknown>	DEFAULT	2
sscanf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
static_dtv	.symtab	0x309ec	512	OBJECT	<unknown>	DEFAULT	12
static_map	.symtab	0x30ef4	52	OBJECT	<unknown>	DEFAULT	12
static_slotinfo	.symtab	0x30bec	776	OBJECT	<unknown>	DEFAULT	12
stderr	.symtab	0x2e204	4	OBJECT	<unknown>	DEFAULT	11
stdin	.symtab	0x2e1fc	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x2e200	4	OBJECT	<unknown>	DEFAULT	11
strcat	.symtab	0x141d0	896	FUNC	<unknown>	DEFAULT	2
strchr	.symtab	0x1a8e0	524	FUNC	<unknown>	DEFAULT	2
strchrnul	.symtab	0x1accc	260	FUNC	<unknown>	DEFAULT	2
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn	.symtab	0x14630	60	FUNC	<unknown>	DEFAULT	2
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x14788	300	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x145b8	120	FUNC	<unknown>	DEFAULT	2
strncmp	.symtab	0x1add0	244	FUNC	<unknown>	DEFAULT	2
strncmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x1466c	244	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x1aaec	192	FUNC	<unknown>	DEFAULT	2
strspn	.symtab	0x1aec4	84	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x1b308	20	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x166a4	1140	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysv_signal	.symtab	0x14b14	128	FUNC	<unknown>	DEFAULT	2
sysv_signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x148d4	108	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x108a8	40	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
type_codes	.symtab	0x1c4a2	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x1c4c0	12	OBJECT	<unknown>	DEFAULT	4
ungetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unknown.1356	.symtab	0x1c570	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x2e3ac	20	OBJECT	<unknown>	DEFAULT	11
vfprintf	.symtab	0x10b48	308	FUNC	<unknown>	DEFAULT	2
vfprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vfscanf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vsscanf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x18be4	76	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x18c54	192	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x18c30	28	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x1b580	132	FUNC	<unknown>	DEFAULT	2
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 16:47:50.998586893 CEST	43928	443	192.168.2.23	91.189.91.42
Oct 24, 2024 16:47:56.629878044 CEST	42836	443	192.168.2.23	91.189.91.43
Oct 24, 2024 16:47:57.397793055 CEST	42516	80	192.168.2.23	109.202.202.202
Oct 24, 2024 16:48:11.731650114 CEST	43928	443	192.168.2.23	91.189.91.42
Oct 24, 2024 16:48:24.018002033 CEST	42836	443	192.168.2.23	91.189.91.43
Oct 24, 2024 16:48:28.113435984 CEST	42516	80	192.168.2.23	109.202.202.202
Oct 24, 2024 16:48:52.686096907 CEST	43928	443	192.168.2.23	91.189.91.42

System Behavior

Analysis Process: spc.elf PID: 6221, Parent PID: 6143

General

Start time (UTC):	14:47:51
Start date (UTC):	24/10/2024
Path:	/tmp/spc.elf
Arguments:	/tmp/spc.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report spc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: spc.elf PID: 6221, Parent PID: 6143

General

Chronological Activities

Linux Analysis Report
spc.elf