Edit tour

Linux Analysis Report
ssx.elf

Overview

General Information

Sample name:	ssx.elf
Analysis ID:	1586604
MD5:	0aba08f117d7b1e5faffc1e3bdaf8f31
SHA1:	656e5e6724e5915eadf2b8fe3baf7f36d1aedb70
SHA256:	c8324d2e1dbe352de9d94f079590b099159c102536a6ba24464379962a06e68c
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Connects to many ports of the same IP (likely port scanning)

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1586604
Start date and time:	2025-01-09 11:52:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	ssx.elf
Detection:	MAL
Classification:	mal68.spre.troj.linELF@0/1@0/0

Runtime Messages

Command:	/tmp/ssx.elf
PID:	6236
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	gosh that chinese family at the other table sure ate alot
Standard Error:

Process Tree

system is lnxubuntu20

ssx.elf (PID: 6236, Parent: 6158, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/ssx.elf

ssx.elf New Fork (PID: 6238, Parent: 6236)

ssx.elf New Fork (PID: 6240, Parent: 6236)

ssx.elf New Fork (PID: 6242, Parent: 6240)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ssx.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: ssx.elf	Virustotal: Detection: 48%			Perma Link
Source: ssx.elf	ReversingLabs: Detection: 60%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/ssx.elf (PID: 6236)

Opens: /proc/net/route

Jump to behavior

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 89.33.192.138 ports 65487,4,5,6,7,8

Source: global traffic

TCP traffic: 192.168.2.23:44424 -> 89.33.192.138:65487

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: classification engine

Classification label: mal68.spre.troj.linELF@0/1@0/0

Source: ssx.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/brk.S
Source: ssx.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crt1.S
Source: ssx.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crti.S
Source: ssx.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crtn.S
Source: ssx.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/vfork.S

Source: /tmp/ssx.elf (PID: 6236)

Queries kernel information via 'uname':

Jump to behavior

Source: ssx.elf, 6236.1.00007ffda97ee000.00007ffda980f000.rw-.sdmp, ssx.elf, 6238.1.00007ffda97ee000.00007ffda980f000.rw-.sdmp, ssx.elf, 6240.1.00007ffda97ee000.00007ffda980f000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-ppc/tmp/ssx.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/ssx.elf
Source: ssx.elf, 6236.1.000055fd6a88a000.000055fd6a93a000.rw-.sdmp, ssx.elf, 6238.1.000055fd6a88a000.000055fd6a93a000.rw-.sdmp, ssx.elf, 6240.1.000055fd6a88a000.000055fd6a93a000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc1
Source: ssx.elf, 6236.1.00007ffda97ee000.00007ffda980f000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.7h6s0H\t
Source: ssx.elf, 6236.1.000055fd6a88a000.000055fd6a93a000.rw-.sdmp, ssx.elf, 6238.1.000055fd6a88a000.000055fd6a93a000.rw-.sdmp, ssx.elf, 6240.1.000055fd6a88a000.000055fd6a93a000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: ssx.elf, 6236.1.00007ffda97ee000.00007ffda980f000.rw-.sdmp, ssx.elf, 6238.1.00007ffda97ee000.00007ffda980f000.rw-.sdmp, ssx.elf, 6240.1.00007ffda97ee000.00007ffda980f000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc
Source: ssx.elf, 6236.1.00007ffda97ee000.00007ffda980f000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.7h6s0H

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: ssx.elf, type: SAMPLE

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: ssx.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
ssx.elf	48%	Virustotal		Browse
ssx.elf	61%	ReversingLabs	Linux.Backdoor.Bashlite

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
89.33.192.138	unknown	Romania	9009	M247GB	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
89.33.192.138	sss.elf	Get hash	malicious	Gafgyt	Browse
	ssi.elf	Get hash	malicious	Gafgyt	Browse
	sse.elf	Get hash	malicious	Gafgyt	Browse
	ss.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	ssi.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	ssl.elf	Get hash	malicious	Gafgyt	Browse
	sss.elf	Get hash	malicious	Gafgyt	Browse
	ssb.elf	Get hash	malicious	Gafgyt	Browse
	ssx.elf	Get hash	malicious	Gafgyt	Browse
	ssg.elf	Get hash	malicious	Mirai, Gafgyt	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	sss.elf	Get hash	malicious	Gafgyt	Browse
	12.elf	Get hash	malicious	Unknown	Browse
	Aqua.mpsl.elf	Get hash	malicious	Mirai	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	main_ppc.elf	Get hash	malicious	Mirai	Browse
	a-r.m-5.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	ssl.elf	Get hash	malicious	Gafgyt	Browse
	ssx.elf	Get hash	malicious	Gafgyt	Browse
	sst.elf	Get hash	malicious	Gafgyt	Browse
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	sss.elf	Get hash	malicious	Gafgyt	Browse
	12.elf	Get hash	malicious	Unknown	Browse
	Aqua.mpsl.elf	Get hash	malicious	Mirai	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	main_ppc.elf	Get hash	malicious	Mirai	Browse
	a-r.m-5.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	ssl.elf	Get hash	malicious	Gafgyt	Browse
	ssx.elf	Get hash	malicious	Gafgyt	Browse
	sst.elf	Get hash	malicious	Gafgyt	Browse
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	sss.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	12.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.mpsl.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	main_ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	a-r.m-5.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	ssl.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ssx.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	sst.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ssh.elf	Get hash	malicious	Mirai, Gafgyt	Browse	185.125.190.26
CANONICAL-ASGB	sss.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	12.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.mpsl.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	main_ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	a-r.m-5.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	ssl.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ssx.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	sst.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ssh.elf	Get hash	malicious	Mirai, Gafgyt	Browse	185.125.190.26
M247GB	sss.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssi.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	sse.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ss.elf	Get hash	malicious	Mirai, Gafgyt	Browse	89.33.192.138
	ssi.elf	Get hash	malicious	Mirai, Gafgyt	Browse	89.33.192.138
	ssl.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	sss.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssb.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssx.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssg.elf	Get hash	malicious	Mirai, Gafgyt	Browse	89.33.192.138
INIT7CH	sss.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	12.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Aqua.mpsl.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	2.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	main_ppc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	a-r.m-5.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	ssl.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	ssx.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	sst.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.7h6s0H (deleted)

Download File

Process:	/tmp/ssx.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.048940772845199
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	ssx.elf
File size:	112'658 bytes
MD5:	0aba08f117d7b1e5faffc1e3bdaf8f31
SHA1:	656e5e6724e5915eadf2b8fe3baf7f36d1aedb70
SHA256:	c8324d2e1dbe352de9d94f079590b099159c102536a6ba24464379962a06e68c
SHA512:	c0b1c9975263ae23ae4ce50b77690a951807c4fa39070947f07a67742ce71652c4e5e3c24970583c6b3c5687e1d2909f2f7814e105751ec745859184d302f56c
SSDEEP:	3072:SkBbS8Gr2zTsZ6w2fmimmXQcUcNSnFsRe:SkOr2PsZ6TfmimmXQcUcNSnFsRe
TLSH:	66B34917672C0B47C49B9AF02DBB37F08769BDB012A711C4A10AFED40377AB42526F96
File Content Preview:	.ELF...........................4..`$.....4. ...(......................P...P...............P...P...P.......h(........dt.Q.............................!..\|......$H...H.&....$8!. \|...N.. .!..\|.......?.........Td..../...@..\?.....P..+../...A..$8...})....P.N..

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x100001f0
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	90148
Section Header Size:	40
Number of Section Headers:	17
Header String Table Index:	14

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x10000094	0x94	0x24	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100000b8	0xb8	0x1266c	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x10012724	0x12724	0x20	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x10012748	0x12748	0x28b8	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x10015000	0x15000	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x10025004	0x15004	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x1002500c	0x1500c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x10025014	0x15014	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x10025018	0x15018	0x358	0x0	0x3	WA	0	0	8
.sdata	PROGBITS	0x10025370	0x15370	0x5c	0x0	0x3	WA	0	0	4
.sbss	NOBITS	0x100253d0	0x153cc	0x94	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x10025464	0x153cc	0x63c8	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x153cc	0xbe2	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x15fae	0x73	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x162cc	0x30d0	0x10	0x0		16	280	4
.strtab	STRTAB	0x0	0x1939c	0x2476	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000000	0x10000000	0x15004	0x15004	6.0525	0x5	R E	0x10000	.init .text .fini .rodata .eh_frame
LOAD	0x15004	0x10025004	0x10025004	0x3c8	0x6828	2.9192	0x6	RW	0x10000	.ctors .dtors .jcr .data .sdata .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x10000094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100000b8	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x10012724	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x10012748	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x10015000	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x10025004	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x1002500c	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x10025014	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x10025018	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x10025370	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x100253d0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x10025464	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
C.155.5915	.symtab	0x10013114	36	OBJECT	<unknown>	DEFAULT	4
C.160.5965	.symtab	0x100134b4	24	OBJECT	<unknown>	DEFAULT	4
C.191.6249	.symtab	0x100136d8	20	OBJECT	<unknown>	DEFAULT	4
Hexed	.symtab	0x10003ffc	408	FUNC	<unknown>	DEFAULT	2
KHcommSOCK	.symtab	0x100253d8	4	OBJECT	<unknown>	DEFAULT	11
KHserverHACKER	.symtab	0x10025384	4	OBJECT	<unknown>	DEFAULT	10
LOCAL_ADDR	.symtab	0x100253d0	4	OBJECT	<unknown>	DEFAULT	11
Percocet_bp	.symtab	0x10025380	4	OBJECT	<unknown>	DEFAULT	10
Q	.symtab	0x10025480	16384	OBJECT	<unknown>	DEFAULT	12
RSF	.symtab	0x10004194	584	FUNC	<unknown>	DEFAULT	2
SendHttpRand	.symtab	0x10004f8c	568	FUNC	<unknown>	DEFAULT	2
UDPBYPASS	.symtab	0x1000340c	356	FUNC	<unknown>	DEFAULT	2
UserAgents	.symtab	0x10025034	12	OBJECT	<unknown>	DEFAULT	9
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_SDA_BASE_	.symtab	0x1002d370	0	NOTYPE	<unknown>	DEFAULT	10
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x10025008	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x10025004	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x10025390	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x10013974	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x100253c4	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x10014d00	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x10025398	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x10013c74	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x10025010	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x1002500c	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x10015000	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x10015000	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x10025390	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_b_data	.symtab	0x10013974	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x100253c4	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_tolower_data	.symtab	0x10014d00	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x10025398	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_toupper_data	.symtab	0x10013c74	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x10025394	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_tolower	.symtab	0x100253c8	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_toupper	.symtab	0x1002539c	4	OBJECT	<unknown>	HIDDEN	10
__GI___errno_location	.symtab	0x1000aa38	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x100121c8	312	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x1000c490	48	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x1000e814	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x1000a37c	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x1000a400	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x1000a760	120	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x1000e144	148	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x1000e244	128	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x1000c4c0	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x1000a464	60	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x10010410	336	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x1000dba4	12	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x1000dba4	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1001057c	52	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x1000a4e8	72	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x1000cbf0	52	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x1000a530	72	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x10025440	4	OBJECT	<unknown>	HIDDEN	11
__GI_execl	.symtab	0x1000ddf0	308	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x1000e5ac	72	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x1000dd6c	132	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x10010640	332	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x1000a37c	132	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x1000a400	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x10010e88	432	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x100121c8	312	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x10010cd4	148	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x10011038	196	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1001078c	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1000a578	72	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x1000bdb8	92	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x10010798	16	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x100107a8	284	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x1000be14	184	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x100121c8	312	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1000a5c0	56	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1000e5f4	72	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1000a5f8	72	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1000e63c	72	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x1000c858	84	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x1000c8ac	836	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x1000a640	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x1000a6d0	72	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x1000cc24	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x1000e684	72	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x10025444	4	OBJECT	<unknown>	HIDDEN	11
__GI_inet_addr	.symtab	0x1000c824	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1000f8c4	192	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x1001176c	676	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x10011400	524	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x1000dabc	232	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x1000a284	232	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1000c5e8	44	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x1000a718	72	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x10012128	128	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1000f5b8	264	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x1000becc	156	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x1000f514	164	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1000f6c0	52	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1000f6f4	244	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x1000bf68	144	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1000e6cc	72	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x1000a760	120	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x1000a7e8	72	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x100105f8	72	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x100120f8	48	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x1000d670	108	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x1000d948	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x100110fc	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x1000a878	72	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x1000cc94	56	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x1000cccc	64	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1000e714	112	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x1000a8c0	72	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x1000cd0c	56	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x1000cd44	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x1000cd84	60	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x1000d854	244	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x1001034c	196	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x1000cdf4	76	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x1000ce40	44	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x1000ce6c	224	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1000a908	120	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x1000df24	468	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x1000cdc0	52	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x1000aa7c	140	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x1000d9d8	228	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x10012300	80	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x1000bff8	256	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x1000c0f8	52	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x1000c0f8	52	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x1000c12c	32	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x100112d0	80	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x1000c14c	164	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x100111b4	208	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x1000c1f0	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x1000c2ac	240	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x1000f888	60	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x10011284	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x1000c39c	244	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x1000c5dc	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x1000f7e8	160	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1000dbb0	8	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x1000c614	156	FUNC	<unknown>	HIDDEN	2
__GI_tcsetattr	.symtab	0x1000c6b0	356	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x1000a980	72	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x1000e784	72	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x100121a8	32	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x1000aa18	32	FUNC	<unknown>	HIDDEN	2
__GI_vfork	.symtab	0x1000a36c	16	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x1000ab08	204	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x1000e7cc	72	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x1000a9c8	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1000e820	92	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1000e88c	204	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1000e87c	16	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x1000a9d0	72	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x10025014	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x10025014	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x10025434	4	OBJECT	<unknown>	HIDDEN	11
__atexit_lock	.symtab	0x10025324	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x1000ce6c	224	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x100253cc	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x1000e1e4	96	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x10025394	4	OBJECT	<unknown>	DEFAULT	10
__ctype_tolower	.symtab	0x100253c8	4	OBJECT	<unknown>	DEFAULT	10
__ctype_toupper	.symtab	0x1002539c	4	OBJECT	<unknown>	DEFAULT	10
__curbrk	.symtab	0x10025460	4	OBJECT	<unknown>	DEFAULT	11
__data_start	.symtab	0x10025020	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x10011c68	272	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x1001241c	244	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x10011afc	196	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x1000f984	1692	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x100126b8	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100000b8	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x10025018	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x10012350	204	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x10011a10	236	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x10011bc0	124	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x1002542c	4	OBJECT	<unknown>	DEFAULT	11
__errno_location	.symtab	0x1000aa38	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x10025424	4	OBJECT	<unknown>	HIDDEN	11
__fgetc_unlocked	.symtab	0x100121c8	312	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x10025004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x10025004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x100102f4	88	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x1000c490	48	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x1000e814	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x1000d3bc	160	FUNC	<unknown>	DEFAULT	2
__heap_alloc_at	.symtab	0x1000d45c	156	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x1000d540	300	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x1000d4f8	44	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x1000d524	28	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x10025004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x10025004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x10012510	72	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x10011c3c	44	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x1000a4e8	72	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x1000cbf0	52	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x1000a7d8	16	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x1000a37c	132	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x1000a400	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1000a578	72	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x1000a640	72	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x10012128	128	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x1000e6cc	72	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x1000a760	120	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x100105f8	72	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x1000a878	72	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x1000cc94	56	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x1000cccc	64	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x1000a8c0	72	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x1000cd0c	56	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x1000cd44	64	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x1001034c	196	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x10025428	4	OBJECT	<unknown>	DEFAULT	11
__libc_waitpid	.symtab	0x1000a9c8	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x1000a9d0	72	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x100253bc	4	OBJECT	<unknown>	DEFAULT	10
__malloc_heap_lock	.symtab	0x1002b660	24	OBJECT	<unknown>	DEFAULT	12
__malloc_sbrk_lock	.symtab	0x1002b7f8	24	OBJECT	<unknown>	DEFAULT	12
__nameserver	.symtab	0x1002b820	12	OBJECT	<unknown>	HIDDEN	12
__nameservers	.symtab	0x1002544c	4	OBJECT	<unknown>	HIDDEN	11
__open_etc_hosts	.symtab	0x10011d78	100	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x10010020	724	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x10025430	4	OBJECT	<unknown>	DEFAULT	11
__preinit_array_end	.symtab	0x10025004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x10025004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x1000e1d8	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x1000e1d8	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x1000e1d8	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x1000e1d8	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x1000e1d8	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x1000e1e0	4	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x100120f8	48	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x10011ddc	796	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x10025340	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x10025438	4	OBJECT	<unknown>	HIDDEN	11
__searchdomain	.symtab	0x1002b810	16	OBJECT	<unknown>	HIDDEN	12
__searchdomains	.symtab	0x10025450	4	OBJECT	<unknown>	HIDDEN	11
__sigaddset	.symtab	0x1000cf74	40	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x1000cf9c	40	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x1000cf4c	40	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x1000e564	72	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x100253ac	4	OBJECT	<unknown>	DEFAULT	10
__stdio_READ	.symtab	0x10012558	116	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1000e958	224	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x100108c4	252	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1000ea38	364	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x1000ac48	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3862	.symtab	0x10013f74	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x100125cc	72	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x10010c7c	88	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x10012614	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1000eba4	248	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1000ad18	80	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x100253b0	4	OBJECT	<unknown>	DEFAULT	10
__syscall_error	.symtab	0x1000e530	52	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x100105b0	72	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x1000e144	148	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x1000e244	128	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x1000e2c4	620	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x100253c0	4	OBJECT	<unknown>	HIDDEN	10
__vfork	.symtab	0x1000a36c	16	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0x1000c4c0	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x1000ad68	96	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x10010560	28	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x10025458	4	OBJECT	<unknown>	DEFAULT	11
_dl_phnum	.symtab	0x1002545c	4	OBJECT	<unknown>	DEFAULT	11
_edata	.symtab	0x100253cc	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x1002b82c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_endswith	.symtab	0x10009dc8	268	FUNC	<unknown>	DEFAULT	2
_errno	.symtab	0x10025440	4	OBJECT	<unknown>	DEFAULT	11
_exit	.symtab	0x1000a464	60	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x10012724	16	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x10029480	8192	OBJECT	<unknown>	DEFAULT	12
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x1000adc8	160	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1000ee50	1732	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x10025444	4	OBJECT	<unknown>	DEFAULT	11
_init	.symtab	0x10000094	16	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1000ec9c	128	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x100098e0	132	FUNC	<unknown>	DEFAULT	2
_memmove	.symtab	0x10009964	220	FUNC	<unknown>	DEFAULT	2
_memset	.symtab	0x10009a40	108	FUNC	<unknown>	DEFAULT	2
_ppfs_init	.symtab	0x1000b4d8	188	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x1000b8a0	1304	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x1000b594	92	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x1000b5f0	624	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x1000b860	64	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1000e1e0	4	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x1000e1e0	4	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x1002b778	128	OBJECT	<unknown>	HIDDEN	12
_start	.symtab	0x100001f0	72	FUNC	<unknown>	DEFAULT	2
_startswith	.symtab	0x10009d24	164	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x100109c0	700	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x1000abd4	116	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x100253b4	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_add_lock	.symtab	0x10025048	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x10010d68	288	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x1002541c	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_del_lock	.symtab	0x10025060	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x10025418	4	OBJECT	<unknown>	DEFAULT	11
_stdio_streams	.symtab	0x10025078	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x1000ac58	192	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x100253b8	4	OBJECT	<unknown>	DEFAULT	10
_stdlib_strto_l	.symtab	0x1000dbb8	436	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x1000ed1c	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_strcat	.symtab	0x10009b30	160	FUNC	<unknown>	DEFAULT	2
_strcmp	.symtab	0x100097ec	244	FUNC	<unknown>	DEFAULT	2
_strcpy	.symtab	0x10009aac	132	FUNC	<unknown>	DEFAULT	2
_strdup	.symtab	0x10009bd0	104	FUNC	<unknown>	DEFAULT	2
_string_syserrmsgs	.symtab	0x10014044	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_strlen	.symtab	0x10009790	92	FUNC	<unknown>	DEFAULT	2
_strstr	.symtab	0x10009c38	236	FUNC	<unknown>	DEFAULT	2
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x1000ed58	248	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x1000ae68	1648	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x10010410	336	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x1000a4a0	72	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
acnc	.symtab	0x10004d68	220	FUNC	<unknown>	DEFAULT	2
add_entry	.symtab	0x100089dc	164	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x1000dba4	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x1000dba4	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x1000c5cc	16	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x10025454	4	OBJECT	<unknown>	DEFAULT	11
been_there_done_that.2829	.symtab	0x1002543c	4	OBJECT	<unknown>	DEFAULT	11
brk	.symtab	0x1001057c	52	FUNC	<unknown>	DEFAULT	2
bsd_signal	.symtab	0x1000ce6c	224	FUNC	<unknown>	DEFAULT	2
buf.4865	.symtab	0x1002b480	460	OBJECT	<unknown>	DEFAULT	12
c	.symtab	0x10025040	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x10012708	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x1000014c	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x100001d4	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x1000d11c	112	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0x10000238	212	FUNC	<unknown>	DEFAULT	2
checksum_tcp_udp	.symtab	0x1000030c	432	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0x100004bc	432	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x1000aa44	56	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x1000a4e8	72	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.3069	.symtab	0x10025464	1	OBJECT	<unknown>	DEFAULT	12
connect	.symtab	0x1000cbf0	52	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x100025e0	656	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x1000a7d8	16	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x10002aa8	320	FUNC	<unknown>	DEFAULT	2
data_start	.symtab	0x10025020	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dup2	.symtab	0x1000a530	72	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x1002542c	4	OBJECT	<unknown>	DEFAULT	11
errno	.symtab	0x10025440	4	OBJECT	<unknown>	DEFAULT	11
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execl	.symtab	0x1000ddf0	308	FUNC	<unknown>	DEFAULT	2
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x1000e5ac	72	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x1000dd6c	132	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x10014c18	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x10010640	332	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x1000a37c	132	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x1000a400	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x10001de4	232	FUNC	<unknown>	DEFAULT	2
fdopen_pids	.symtab	0x100253f4	4	OBJECT	<unknown>	DEFAULT	11
fdpclose	.symtab	0x10001c44	416	FUNC	<unknown>	DEFAULT	2
fdpopen	.symtab	0x10001998	684	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x10010e88	432	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x100121c8	312	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x10010cd4	148	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x10011038	196	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
findRandIP	.symtab	0x10002a38	112	FUNC	<unknown>	DEFAULT	2
fmt	.symtab	0x10014c00	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x1001078c	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x1000a578	72	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x1000bdb8	92	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x10000168	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x1000d18c	256	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x10010798	16	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x10010798	16	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x100107a8	284	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x1000be14	184	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getBuild	.symtab	0x1000710c	28	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x10002138	124	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x10006e74	664	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x100121c8	312	FUNC	<unknown>	DEFAULT	2
getdtablesize	.symtab	0x1000a5c0	56	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x1000e5f4	72	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1000a5f8	72	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x1000e63c	72	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x1000c858	84	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x1000c8ac	836	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x1000a640	72	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x1000a688	72	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x1000a6d0	72	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x1000cc24	52	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x1000cc58	60	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x1000e684	72	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h.4864	.symtab	0x1002b64c	20	OBJECT	<unknown>	DEFAULT	12
h_errno	.symtab	0x10025444	4	OBJECT	<unknown>	DEFAULT	11
hacks	.symtab	0x10025370	4	OBJECT	<unknown>	DEFAULT	10
hacks2	.symtab	0x10025374	4	OBJECT	<unknown>	DEFAULT	10
hacks3	.symtab	0x10025378	4	OBJECT	<unknown>	DEFAULT	10
hacks4	.symtab	0x1002537c	4	OBJECT	<unknown>	DEFAULT	10
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_alloc_at.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
hextable	.symtab	0x10012a1c	1024	OBJECT	<unknown>	DEFAULT	4
htonl	.symtab	0x1000c81c	4	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x1000c820	4	FUNC	<unknown>	DEFAULT	2
i.4550	.symtab	0x10025044	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x1000bff8	256	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x1000c824	52	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1000f8c4	192	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntop	.symtab	0x1001176c	676	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x1001160c	352	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x10011400	524	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x10011320	224	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x10006c64	528	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x100007d4	232	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x10025168	264	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x1000d760	136	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x1000dabc	232	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x1000a284	232	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x1000c5e8	44	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x1000a718	72	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_status	.symtab	0x100253e8	4	OBJECT	<unknown>	DEFAULT	11
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/brk.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/vfork.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x10002870	456	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x10012128	128	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x100253ec	6	OBJECT	<unknown>	DEFAULT	11
main	.symtab	0x10007128	2284	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
makeIPPacket	.symtab	0x10002cf8	236	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x1000222c	188	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x100045d4	264	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x1000cfc4	344	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x1000f5b8	264	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x1000becc	156	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x1000f514	164	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x1000f6c0	52	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1000f6f4	244	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x1000bf68	144	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x10025270	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x1002b678	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x10025358	24	OBJECT	<unknown>	DEFAULT	9
nanosleep	.symtab	0x1000e6cc	72	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1106	.symtab	0x10025420	4	OBJECT	<unknown>	DEFAULT	11
ngPid	.symtab	0x100253fc	4	OBJECT	<unknown>	DEFAULT	11
ntohl	.symtab	0x1000c814	4	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x1000c818	4	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x100253e0	8	OBJECT	<unknown>	DEFAULT	11
object.3150	.symtab	0x10025468	24	OBJECT	<unknown>	DEFAULT	12
open	.symtab	0x1000a760	120	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x100253f8	4	OBJECT	<unknown>	DEFAULT	11
p.3067	.symtab	0x1002501c	0	OBJECT	<unknown>	DEFAULT	9
parseHex	.symtab	0x10001ecc	144	FUNC	<unknown>	DEFAULT	2
pids	.symtab	0x10025404	4	OBJECT	<unknown>	DEFAULT	11
pipe	.symtab	0x1000a7e8	72	FUNC	<unknown>	DEFAULT	2
pipe.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
poll	.symtab	0x100105f8	72	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prctl	.symtab	0x1000a830	72	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4074	.symtab	0x10013f9c	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x100010ec	1564	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x10000cc8	128	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x10000eec	512	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x10000d48	420	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x100051c4	6816	FUNC	<unknown>	DEFAULT	2
qual_chars.4079	.symtab	0x10013fb0	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x100120f8	48	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x1000d66c	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand__str	.symtab	0x10007b68	244	FUNC	<unknown>	DEFAULT	2
rand_alpha_str	.symtab	0x10007c5c	212	FUNC	<unknown>	DEFAULT	2
rand_alphastr	.symtab	0x10000b90	312	FUNC	<unknown>	DEFAULT	2
rand_cmwc	.symtab	0x10000a38	344	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x10007a14	144	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x10007aa4	196	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x1000d670	108	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x10014ba0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x1000d948	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randstrings	.symtab	0x10025024	16	OBJECT	<unknown>	DEFAULT	9
randtbl	.symtab	0x100252a4	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x100110fc	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x1000a878	72	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x1000d28c	304	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x1000cc94	56	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x100022e8	760	FUNC	<unknown>	DEFAULT	2
recvfrom	.symtab	0x1000cccc	64	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_domain_to_hostname	.symtab	0x10007d30	296	FUNC	<unknown>	DEFAULT	2
resolv_entries_free	.symtab	0x1000864c	100	FUNC	<unknown>	DEFAULT	2
resolv_lookup	.symtab	0x10007f58	1780	FUNC	<unknown>	DEFAULT	2
resolv_skip_name	.symtab	0x10007e58	256	FUNC	<unknown>	DEFAULT	2
rtcp	.symtab	0x10003b6c	1168	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x1000e714	112	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanPid	.symtab	0x10025400	4	OBJECT	<unknown>	DEFAULT	11
select	.symtab	0x1000a8c0	72	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x1000cd0c	56	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendSTD	.symtab	0x100043dc	504	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x1000cd44	64	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x1000cd84	60	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x1000d6dc	132	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x1000d854	244	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x1001034c	196	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x1000cdf4	76	FUNC	<unknown>	DEFAULT	2
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x1000ce40	44	FUNC	<unknown>	DEFAULT	2
signal	.symtab	0x1000ce6c	224	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x1000a908	120	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x1000df24	468	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x1000cdc0	52	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x10004e44	328	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x10001864	308	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4078	.symtab	0x10013fc4	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4073	.symtab	0x10013fa8	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4075	.symtab	0x10013ff0	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4074	.symtab	0x10014008	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4077	.symtab	0x10013fd4	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4076	.symtab	0x10013fe4	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x1000aa7c	140	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x1000d7e8	108	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x1000d7e8	108	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x1000d9d8	228	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x1002533c	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x10025448	4	OBJECT	<unknown>	DEFAULT	11
stderr	.symtab	0x100253a8	4	OBJECT	<unknown>	DEFAULT	10
stdin	.symtab	0x100253a0	4	OBJECT	<unknown>	DEFAULT	10
stdout	.symtab	0x100253a4	4	OBJECT	<unknown>	DEFAULT	10
strcasecmp	.symtab	0x10012300	80	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x1000bff8	256	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x1000c0f8	52	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x1000c0f8	52	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x1000c12c	32	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x100112d0	80	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x1000c4c0	268	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x1000c14c	164	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x100111b4	208	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x1000c1f0	188	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x1000c2ac	240	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x1000f888	60	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x10011284	76	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x1000c39c	244	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x1000c5dc	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x1000f7e8	160	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x1000dbb0	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
szprintf	.symtab	0x100017b4	176	FUNC	<unknown>	DEFAULT	2
table	.symtab	0x1002b690	232	OBJECT	<unknown>	DEFAULT	12
table.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table_init	.symtab	0x100086b0	504	FUNC	<unknown>	DEFAULT	2
table_key	.symtab	0x1002538c	4	OBJECT	<unknown>	DEFAULT	10
table_lock_val	.symtab	0x1000890c	100	FUNC	<unknown>	DEFAULT	2
table_retrieve_val	.symtab	0x10008970	108	FUNC	<unknown>	DEFAULT	2
table_unlock_val	.symtab	0x100088a8	100	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x1000c614	156	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpFl00d	.symtab	0x10003570	1532	FUNC	<unknown>	DEFAULT	2
tcpcsum	.symtab	0x10002be8	272	FUNC	<unknown>	DEFAULT	2
tcsetattr	.symtab	0x1000c6b0	356	FUNC	<unknown>	DEFAULT	2
tcsetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x1000a980	72	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
times	.symtab	0x1000e784	72	FUNC	<unknown>	DEFAULT	2
times.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toggle_obf	.symtab	0x10008a80	412	FUNC	<unknown>	DEFAULT	2
tolower	.symtab	0x100121a8	32	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x1000aa18	32	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x100008bc	380	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x10014010	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x10014028	12	OBJECT	<unknown>	DEFAULT	4
udpfl00d	.symtab	0x10002de4	1576	FUNC	<unknown>	DEFAULT	2
unknown.1128	.symtab	0x10014034	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x10025288	28	OBJECT	<unknown>	DEFAULT	9
uppercase	.symtab	0x100021b4	120	FUNC	<unknown>	DEFAULT	2
userID	.symtab	0x10025388	4	OBJECT	<unknown>	DEFAULT	10
usleep	.symtab	0x1000e0f8	76	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util_atoi	.symtab	0x10009058	720	FUNC	<unknown>	DEFAULT	2
util_fdgets	.symtab	0x10009fc4	256	FUNC	<unknown>	DEFAULT	2
util_isalpha	.symtab	0x1000a124	128	FUNC	<unknown>	DEFAULT	2
util_isdigit	.symtab	0x1000a224	96	FUNC	<unknown>	DEFAULT	2
util_isspace	.symtab	0x1000a1a4	128	FUNC	<unknown>	DEFAULT	2
util_isupper	.symtab	0x1000a0c4	96	FUNC	<unknown>	DEFAULT	2
util_itoa	.symtab	0x10009328	452	FUNC	<unknown>	DEFAULT	2
util_local_addr	.symtab	0x10009ed4	240	FUNC	<unknown>	DEFAULT	2
util_memcpy	.symtab	0x10008f70	132	FUNC	<unknown>	DEFAULT	2
util_memsearch	.symtab	0x100094ec	252	FUNC	<unknown>	DEFAULT	2
util_strcat	.symtab	0x10008ee8	136	FUNC	<unknown>	DEFAULT	2
util_strcmp	.symtab	0x10008d90	244	FUNC	<unknown>	DEFAULT	2
util_strcpy	.symtab	0x10008e84	100	FUNC	<unknown>	DEFAULT	2
util_stristr	.symtab	0x100095e8	424	FUNC	<unknown>	DEFAULT	2
util_strlen	.symtab	0x10008c1c	108	FUNC	<unknown>	DEFAULT	2
util_strncmp	.symtab	0x10008c88	264	FUNC	<unknown>	DEFAULT	2
util_zero	.symtab	0x10008ff4	100	FUNC	<unknown>	DEFAULT	2
vfork	.symtab	0x1000a36c	16	FUNC	<unknown>	DEFAULT	2
vseattack	.symtab	0x100046dc	1676	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x1000ab08	204	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
w	.symtab	0x10025414	4	OBJECT	<unknown>	DEFAULT	11
wait4	.symtab	0x1000e7cc	72	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x1000a9c8	8	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
watchdog_maintain	.symtab	0x1000066c	360	FUNC	<unknown>	DEFAULT	2
watchdog_pid	.symtab	0x100253dc	4	OBJECT	<unknown>	DEFAULT	11
wcrtomb	.symtab	0x1000e820	92	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x1000e88c	204	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x1000e87c	16	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wildString	.symtab	0x10001f5c	476	FUNC	<unknown>	DEFAULT	2
write	.symtab	0x1000a9d0	72	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
x	.symtab	0x10025408	4	OBJECT	<unknown>	DEFAULT	11
xdigits.3080	.symtab	0x10014cc8	17	OBJECT	<unknown>	DEFAULT	4
y	.symtab	0x1002540c	4	OBJECT	<unknown>	DEFAULT	11
z	.symtab	0x10025410	4	OBJECT	<unknown>	DEFAULT	11
zprintf	.symtab	0x10001708	172	FUNC	<unknown>	DEFAULT	2

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 11:52:58.497987986 CET	44424	65487	192.168.2.23	89.33.192.138
Jan 9, 2025 11:52:58.502870083 CET	65487	44424	89.33.192.138	192.168.2.23
Jan 9, 2025 11:52:58.502959013 CET	44424	65487	192.168.2.23	89.33.192.138
Jan 9, 2025 11:52:58.505049944 CET	44424	65487	192.168.2.23	89.33.192.138
Jan 9, 2025 11:52:58.509818077 CET	65487	44424	89.33.192.138	192.168.2.23
Jan 9, 2025 11:52:59.700062990 CET	43928	443	192.168.2.23	91.189.91.42
Jan 9, 2025 11:53:00.483834982 CET	65487	44424	89.33.192.138	192.168.2.23
Jan 9, 2025 11:53:00.484041929 CET	44424	65487	192.168.2.23	89.33.192.138
Jan 9, 2025 11:53:05.075396061 CET	42836	443	192.168.2.23	91.189.91.43
Jan 9, 2025 11:53:06.611090899 CET	42516	80	192.168.2.23	109.202.202.202
Jan 9, 2025 11:53:12.011214018 CET	65487	44424	89.33.192.138	192.168.2.23
Jan 9, 2025 11:53:12.011327982 CET	44424	65487	192.168.2.23	89.33.192.138
Jan 9, 2025 11:53:12.097759962 CET	65487	44424	89.33.192.138	192.168.2.23
Jan 9, 2025 11:53:12.097898006 CET	44424	65487	192.168.2.23	89.33.192.138
Jan 9, 2025 11:53:20.945158958 CET	43928	443	192.168.2.23	91.189.91.42
Jan 9, 2025 11:53:31.183677912 CET	42836	443	192.168.2.23	91.189.91.43
Jan 9, 2025 11:53:37.326857090 CET	42516	80	192.168.2.23	109.202.202.202
Jan 9, 2025 11:54:01.899431944 CET	43928	443	192.168.2.23	91.189.91.42
Jan 9, 2025 11:54:12.012347937 CET	65487	44424	89.33.192.138	192.168.2.23
Jan 9, 2025 11:54:12.012567997 CET	44424	65487	192.168.2.23	89.33.192.138
Jan 9, 2025 11:54:12.098944902 CET	65487	44424	89.33.192.138	192.168.2.23
Jan 9, 2025 11:54:12.099148035 CET	44424	65487	192.168.2.23	89.33.192.138
Jan 9, 2025 11:54:22.376677990 CET	42836	443	192.168.2.23	91.189.91.43
Jan 9, 2025 11:55:12.013607025 CET	65487	44424	89.33.192.138	192.168.2.23
Jan 9, 2025 11:55:12.013741016 CET	44424	65487	192.168.2.23	89.33.192.138
Jan 9, 2025 11:55:12.100152016 CET	65487	44424	89.33.192.138	192.168.2.23
Jan 9, 2025 11:55:12.100220919 CET	44424	65487	192.168.2.23	89.33.192.138
Jan 9, 2025 11:56:12.015778065 CET	65487	44424	89.33.192.138	192.168.2.23
Jan 9, 2025 11:56:12.016047001 CET	44424	65487	192.168.2.23	89.33.192.138
Jan 9, 2025 11:56:12.102530003 CET	65487	44424	89.33.192.138	192.168.2.23
Jan 9, 2025 11:56:12.102691889 CET	44424	65487	192.168.2.23	89.33.192.138

System Behavior

Analysis Process: ssx.elf PID: 6236, Parent PID: 6158

General

Start time (UTC):	10:52:57
Start date (UTC):	09/01/2025
Path:	/tmp/ssx.elf
Arguments:	/tmp/ssx.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: ssx.elf PID: 6238, Parent PID: 6236

General

Start time (UTC):	10:52:58
Start date (UTC):	09/01/2025
Path:	/tmp/ssx.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: ssx.elf PID: 6240, Parent PID: 6236

General

Start time (UTC):	10:52:58
Start date (UTC):	09/01/2025
Path:	/tmp/ssx.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: ssx.elf PID: 6242, Parent PID: 6240

General

Start time (UTC):	10:52:58
Start date (UTC):	09/01/2025
Path:	/tmp/ssx.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report ssx.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.7h6s0H (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: ssx.elf PID: 6236, Parent PID: 6158

General

Chronological Activities

Analysis Process: ssx.elf PID: 6238, Parent PID: 6236

General

Chronological Activities

Analysis Process: ssx.elf PID: 6240, Parent PID: 6236

General

Chronological Activities

Analysis Process: ssx.elf PID: 6242, Parent PID: 6240

General

Chronological Activities

Linux Analysis Report
ssx.elf