Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
Cinquento.arm7.elf

Overview

General Information

Sample name:Cinquento.arm7.elf
Analysis ID:1589566
MD5:a6085a7be4604623540a230a6c5a0051
SHA1:8787597bd8ac67a2b38d5a1b06792b5d4bf28dd8
SHA256:6ed67622b1164dbdb53f767002dfae9a65d68760da1cf25631c4f4c7fa64174a
Tags:elfuser-abuse_ch
Infos:

Detection

Mirai
Score:76
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Contains symbols with names commonly found in malware
Sample and/or dropped files contains symbols with suspicious names
Uses the "uname" system call to query kernel version information (possible evasion)
Yara detected Mirai
Yara signature match

Classification

General Information

Joe Sandbox version:42.0.0 Malachite
Analysis ID:1589566
Start date and time:2025-01-12 20:57:10 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 31s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:Cinquento.arm7.elf
Detection:MAL
Classification:mal76.troj.linELF@0/0@2/0

Runtime Messages

Command:/tmp/Cinquento.arm7.elf
PID:5554
Exit Code:139
Exit Code Info:SIGSEGV (11) Segmentation fault invalid memory reference
Killed:False
Standard Output:

Standard Error:qemu: uncaught target signal 11 (Segmentation fault) - core dumped

Process Tree

  • system is lnxubuntu20
  • Cinquento.arm7.elf (PID: 5554, Parent: 5470, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/Cinquento.arm7.elf
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
Cinquento.arm7.elfJoeSecurity_Mirai_2Yara detected MiraiJoe Security
    Cinquento.arm7.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security
      Cinquento.arm7.elfLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
      • 0x14dfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14e10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14e24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14e38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14e4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14e60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14e74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14e88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14e9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14eb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14ec4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14ed8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14eec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14f00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14f14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14f28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14f3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14f50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14f64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14f78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x14f8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      Cinquento.arm7.elfLinux_Trojan_Gafgyt_ea92cca8unknownunknown
      • 0x15354:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

      Memory Dumps

      SourceRuleDescriptionAuthorStrings
      5554.1.00007f3bec017000.00007f3bec02e000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
        5554.1.00007f3bec017000.00007f3bec02e000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
        • 0x14dfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14e10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14e24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14e38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14e4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14e60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14e74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14e88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14e9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14eb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14ec4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14ed8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14eec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14f00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14f14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14f28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14f3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14f50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14f64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14f78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14f8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        5554.1.00007f3bec017000.00007f3bec02e000.r-x.sdmpLinux_Trojan_Gafgyt_ea92cca8unknownunknown
        • 0x15354:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
        Process Memory Space: Cinquento.arm7.elf PID: 5554Linux_Trojan_Gafgyt_28a2fe0cunknownunknown
        • 0xf908:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf91c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf930:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf944:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf958:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf96c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf980:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf994:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf9a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf9bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf9d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf9e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xf9f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfa0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfa20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfa34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfa48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfa5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfa70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfa84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfa98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        Process Memory Space: Cinquento.arm7.elf PID: 5554Linux_Trojan_Gafgyt_ea92cca8unknownunknown
        • 0xfdc6:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

        Suricata Signatures

        ⊘No Suricata rule has matched

        Joe Sandbox Signatures

        Click to jump to signature section

        Show All Signature Results

        AV Detection

        barindex
        Antivirus / Scanner detection for submitted sample
        Source: Cinquento.arm7.elfAvira: detected
        Multi AV Scanner detection for submitted file
        Source: Cinquento.arm7.elfVirustotal: Detection: 62%Perma Link
        Source: Cinquento.arm7.elfReversingLabs: Detection: 73%
        Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
        Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
        Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com

        System Summary

        barindex
        Malicious sample detected (through community Yara rule)
        Source: Cinquento.arm7.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
        Source: Cinquento.arm7.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
        Source: 5554.1.00007f3bec017000.00007f3bec02e000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
        Source: 5554.1.00007f3bec017000.00007f3bec02e000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
        Source: Process Memory Space: Cinquento.arm7.elf PID: 5554, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
        Source: Process Memory Space: Cinquento.arm7.elf PID: 5554, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
        Contains symbols with names commonly found in malware
        Source: ELF static info symbol of initial sampleName: attack.c
        Source: ELF static info symbol of initial sampleName: attack_get_opt_int
        Source: ELF static info symbol of initial sampleName: attack_get_opt_ip
        Source: ELF static info symbol of initial sampleName: attack_get_opt_str
        Source: ELF static info symbol of initial sampleName: attack_init
        Source: ELF static info symbol of initial sampleName: attack_method.c
        Source: ELF static info symbol of initial sampleName: attack_method_asyn
        Source: ELF static info symbol of initial sampleName: attack_method_greeth
        Source: ELF static info symbol of initial sampleName: attack_method_greip
        Source: ELF static info symbol of initial sampleName: attack_method_ice
        Source: Cinquento.arm7.elfELF static info symbol of initial sample: __gnu_unwind_execute
        Source: Cinquento.arm7.elfELF static info symbol of initial sample: hnap_scanner.c
        Source: Cinquento.arm7.elfELF static info symbol of initial sample: scanner.c
        Source: Cinquento.arm7.elfELF static info symbol of initial sample: scanner_init
        Source: Cinquento.arm7.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
        Source: Cinquento.arm7.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
        Source: 5554.1.00007f3bec017000.00007f3bec02e000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
        Source: 5554.1.00007f3bec017000.00007f3bec02e000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
        Source: Process Memory Space: Cinquento.arm7.elf PID: 5554, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
        Source: Process Memory Space: Cinquento.arm7.elf PID: 5554, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
        Source: classification engineClassification label: mal76.troj.linELF@0/0@2/0
        Source: /tmp/Cinquento.arm7.elf (PID: 5554)Queries kernel information via 'uname': Jump to behavior
        Source: Cinquento.arm7.elf, 5554.1.000055965f024000.000055965f152000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
        Source: Cinquento.arm7.elf, 5554.1.000055965f024000.000055965f152000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
        Source: Cinquento.arm7.elf, 5554.1.00007fffc96cf000.00007fffc96f0000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/Cinquento.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Cinquento.arm7.elf
        Source: Cinquento.arm7.elf, 5554.1.00007fffc96cf000.00007fffc96f0000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm
        Source: Cinquento.arm7.elf, 5554.1.00007fffc96cf000.00007fffc96f0000.rw-.sdmpBinary or memory string: qemu: uncaught target signal 11 (Segmentation fault) - core dumped
        Source: Yara matchFile source: Cinquento.arm7.elf, type: SAMPLE
        Source: Yara matchFile source: 5554.1.00007f3bec017000.00007f3bec02e000.r-x.sdmp, type: MEMORY
        Source: Yara matchFile source: Cinquento.arm7.elf, type: SAMPLE
        Source: Yara matchFile source: 5554.1.00007f3bec017000.00007f3bec02e000.r-x.sdmp, type: MEMORY

        Mitre Att&ck Matrix

        ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
        Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
        Masquerading        		OS Credential Dumping11
        Security Software Discovery        		Remote ServicesData from Local System1
        Non-Application Layer Protocol        		Exfiltration Over Other Network MediumAbuse Accessibility Features
        CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media1
        Application Layer Protocol        		Exfiltration Over BluetoothNetwork Denial of Service

        Malware Configuration

        ⊘No configs have been found

        Behavior Graph

        Hide Legend

        Legend:

        • Process
        • Signature
        • Created File
        • DNS/IP Info
        • Is Dropped
        • Number of created Files
        • Is malicious
        • Internet

        Screenshots

        Thumbnails

        This section contains all screenshots as thumbnails, including those not shown in the slideshow.


        windows-stand

        Antivirus, Machine Learning and Genetic Malware Detection

        Initial Sample

        SourceDetectionScannerLabelLink
        Cinquento.arm7.elf62%VirustotalBrowse
        Cinquento.arm7.elf74%ReversingLabsLinux.Backdoor.Mirai
        Cinquento.arm7.elf100%AviraEXP/ELF.Mirai.Bootnet.o

        Dropped Files

        ⊘No Antivirus matches

        Domains

        ⊘No Antivirus matches

        URLs

        ⊘No Antivirus matches

        Domains and IPs

        Contacted Domains

        NameIPActiveMaliciousAntivirus DetectionReputation
        daisy.ubuntu.com
        		162.213.35.25
        		truefalse
          		high

          World Map of Contacted IPs

          ⊘No contacted IP infos

          Joe Sandbox View / Context

          IPs

          ⊘No context

          Domains

          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
          daisy.ubuntu.comppc.elfGet hashmaliciousMiraiBrowse
          • 162.213.35.24
          g2.elfGet hashmaliciousUnknownBrowse
          • 162.213.35.25
          t1.elfGet hashmaliciousUnknownBrowse
          • 162.213.35.25
          t6.elfGet hashmaliciousUnknownBrowse
          • 162.213.35.24
          t3.elfGet hashmaliciousUnknownBrowse
          • 162.213.35.25
          sshd.elfGet hashmaliciousUnknownBrowse
          • 162.213.35.24
          .i.elfGet hashmaliciousUnknownBrowse
          • 162.213.35.25
          res.arm7.elfGet hashmaliciousUnknownBrowse
          • 162.213.35.25
          boatnet.i686.elfGet hashmaliciousMiraiBrowse
          • 162.213.35.25
          boatnet.m68k.elfGet hashmaliciousMiraiBrowse
          • 162.213.35.24

          ASNs

          ⊘No context

          JA3 Fingerprints

          ⊘No context

          Dropped Files

          ⊘No context

          Created / dropped Files

          ⊘No created / dropped files found

          Static File Info

          General

          File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
          Entropy (8bit):5.9885057935956185
          TrID:
          • ELF Executable and Linkable format (generic) (4004/1) 100.00%
          File name:Cinquento.arm7.elf
          File size:143'845 bytes
          MD5:a6085a7be4604623540a230a6c5a0051
          SHA1:8787597bd8ac67a2b38d5a1b06792b5d4bf28dd8
          SHA256:6ed67622b1164dbdb53f767002dfae9a65d68760da1cf25631c4f4c7fa64174a
          SHA512:05b4caa0f56f8b1472015301ebae996db073d2cb7541b155f1dad39571915c7328fd2c0d9f831b1dad7993c0abe57a172558bb1d99684c23457cd101d955eb16
          SSDEEP:3072:PtvMNqExY0qKN0UQ+SyIX/lhWjJ2EdLfSGV+qXscRM/97ZX/kP:lvMNqExHqKN0UQ5TGjJ2Ed+GbXs2M/9k
          TLSH:01E32B46F6418A13C5D61777FAAF414A3322D794A3DB330699285FF43F86A9F0E13A06
          File Content Preview:.ELF..............(.........4...P.......4. ...(........pHc..H...H...................................`d..`d..............`d..`d..`d.......2..............dd..dd..dd..................Q.td..................................-...L..................@-.,@...0....S

          Static ELF Info

          ELF header

          Class:ELF32
          Data:2's complement, little endian
          Version:1 (current)
          Machine:ARM
          Version Number:0x1
          Type:EXEC (Executable file)
          OS/ABI:UNIX - System V
          ABI Version:0
          Entry Point Address:0x8194
          Flags:0x4000002
          ELF Header Size:52
          Program Header Offset:52
          Program Header Size:32
          Number of Program Headers:5
          Section Header Offset:115792
          Section Header Size:40
          Number of Section Headers:29
          Header String Table Index:26

          Sections

          NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
          NULL0x00x00x00x00x0000
          .initPROGBITS0x80d40xd40x100x00x6AX004
          .textPROGBITS0x80f00xf00x14cfc0x00x6AX0016
          .finiPROGBITS0x1cdec0x14dec0x100x00x6AX004
          .rodataPROGBITS0x1cdfc0x14dfc0x15340x00x2A004
          .ARM.extabPROGBITS0x1e3300x163300x180x00x2A004
          .ARM.exidxARM_EXIDX0x1e3480x163480x1180x00x82AL204
          .eh_framePROGBITS0x264600x164600x40x00x3WA004
          .tbssNOBITS0x264640x164640x80x00x403WAT004
          .init_arrayINIT_ARRAY0x264640x164640x40x00x3WA004
          .fini_arrayFINI_ARRAY0x264680x164680x40x00x3WA004
          .jcrPROGBITS0x2646c0x1646c0x40x00x3WA004
          .gotPROGBITS0x264700x164700xa80x40x3WA004
          .dataPROGBITS0x265180x165180x2000x00x3WA004
          .bssNOBITS0x267180x167180x30140x00x3WA004
          .commentPROGBITS0x00x167180x94c0x00x0001
          .debug_arangesPROGBITS0x00x170680xc00x00x0008
          .debug_pubnamesPROGBITS0x00x171280x2130x00x0001
          .debug_infoPROGBITS0x00x1733b0x1d230x00x0001
          .debug_abbrevPROGBITS0x00x1905e0x6920x00x0001
          .debug_linePROGBITS0x00x196f00x9c70x00x0001
          .debug_framePROGBITS0x00x1a0b80x2b80x00x0004
          .debug_strPROGBITS0x00x1a3700x8ca0x10x30MS001
          .debug_locPROGBITS0x00x1ac3a0x118f0x00x0001
          .debug_rangesPROGBITS0x00x1bdc90x5580x00x0001
          .ARM.attributesARM_ATTRIBUTES0x00x1c3210x160x00x0001
          .shstrtabSTRTAB0x00x1c3370x1170x00x0001
          .symtabSYMTAB0x00x1c8d80x46400x100x0286484
          .strtabSTRTAB0x00x20f180x22cd0x00x0001

          Program Segments

          TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
          EXIDX0x163480x1e3480x1e3480x1180x1184.42700x4R 0x4.ARM.exidx
          LOAD0x00x80000x80000x164600x164606.06120x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
          LOAD0x164600x264600x264600x2b80x32cc3.90990x6RW 0x8000.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
          TLS0x164640x264640x264640x00x80.00000x4R 0x4.tbss
          GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

          Symbols

          NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
          .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          .symtab0x80d40SECTION<unknown>DEFAULT1
          .symtab0x80f00SECTION<unknown>DEFAULT2
          .symtab0x1cdec0SECTION<unknown>DEFAULT3
          .symtab0x1cdfc0SECTION<unknown>DEFAULT4
          .symtab0x1e3300SECTION<unknown>DEFAULT5
          .symtab0x1e3480SECTION<unknown>DEFAULT6
          .symtab0x264600SECTION<unknown>DEFAULT7
          .symtab0x264640SECTION<unknown>DEFAULT8
          .symtab0x264640SECTION<unknown>DEFAULT9
          .symtab0x264680SECTION<unknown>DEFAULT10
          .symtab0x2646c0SECTION<unknown>DEFAULT11
          .symtab0x264700SECTION<unknown>DEFAULT12
          .symtab0x265180SECTION<unknown>DEFAULT13
          .symtab0x267180SECTION<unknown>DEFAULT14
          .symtab0x00SECTION<unknown>DEFAULT15
          .symtab0x00SECTION<unknown>DEFAULT16
          .symtab0x00SECTION<unknown>DEFAULT17
          .symtab0x00SECTION<unknown>DEFAULT18
          .symtab0x00SECTION<unknown>DEFAULT19
          .symtab0x00SECTION<unknown>DEFAULT20
          .symtab0x00SECTION<unknown>DEFAULT21
          .symtab0x00SECTION<unknown>DEFAULT22
          .symtab0x00SECTION<unknown>DEFAULT23
          .symtab0x00SECTION<unknown>DEFAULT24
          .symtab0x00SECTION<unknown>DEFAULT25
          $a.symtab0x80d40NOTYPE<unknown>DEFAULT1
          $a.symtab0x1cdec0NOTYPE<unknown>DEFAULT3
          $a.symtab0x80e00NOTYPE<unknown>DEFAULT1
          $a.symtab0x1cdf80NOTYPE<unknown>DEFAULT3
          $a.symtab0x80f00NOTYPE<unknown>DEFAULT2
          $a.symtab0x81340NOTYPE<unknown>DEFAULT2
          $a.symtab0x81940NOTYPE<unknown>DEFAULT2
          $a.symtab0x81d00NOTYPE<unknown>DEFAULT2
          $a.symtab0x822c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x83280NOTYPE<unknown>DEFAULT2
          $a.symtab0x85440NOTYPE<unknown>DEFAULT2
          $a.symtab0x85b00NOTYPE<unknown>DEFAULT2
          $a.symtab0x86200NOTYPE<unknown>DEFAULT2
          $a.symtab0x8b8c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x91a80NOTYPE<unknown>DEFAULT2
          $a.symtab0x96940NOTYPE<unknown>DEFAULT2
          $a.symtab0x9cb00NOTYPE<unknown>DEFAULT2
          $a.symtab0xa35c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xaa080NOTYPE<unknown>DEFAULT2
          $a.symtab0xb1000NOTYPE<unknown>DEFAULT2
          $a.symtab0xb7ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0xba4c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xbcfc0NOTYPE<unknown>DEFAULT2
          $a.symtab0xbf9c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xc6300NOTYPE<unknown>DEFAULT2
          $a.symtab0xca680NOTYPE<unknown>DEFAULT2
          $a.symtab0xd0d40NOTYPE<unknown>DEFAULT2
          $a.symtab0xd1280NOTYPE<unknown>DEFAULT2
          $a.symtab0xd8dc0NOTYPE<unknown>DEFAULT2
          $a.symtab0xe0900NOTYPE<unknown>DEFAULT2
          $a.symtab0xe3b80NOTYPE<unknown>DEFAULT2
          $a.symtab0xe6ec0NOTYPE<unknown>DEFAULT2
          $a.symtab0xe73c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xe7e00NOTYPE<unknown>DEFAULT2
          $a.symtab0xed740NOTYPE<unknown>DEFAULT2
          $a.symtab0xf5200NOTYPE<unknown>DEFAULT2
          $a.symtab0xf5380NOTYPE<unknown>DEFAULT2
          $a.symtab0xf5800NOTYPE<unknown>DEFAULT2
          $a.symtab0xf6700NOTYPE<unknown>DEFAULT2
          $a.symtab0xfdd00NOTYPE<unknown>DEFAULT2
          $a.symtab0xfe2c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xfe940NOTYPE<unknown>DEFAULT2
          $a.symtab0xff640NOTYPE<unknown>DEFAULT2
          $a.symtab0x100400NOTYPE<unknown>DEFAULT2
          $a.symtab0x101080NOTYPE<unknown>DEFAULT2
          $a.symtab0x102680NOTYPE<unknown>DEFAULT2
          $a.symtab0x1034c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x125f00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1301c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x132380NOTYPE<unknown>DEFAULT2
          $a.symtab0x1325c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x132fc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1339c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1383c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x138640NOTYPE<unknown>DEFAULT2
          $a.symtab0x138ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x138d00NOTYPE<unknown>DEFAULT2
          $a.symtab0x138f40NOTYPE<unknown>DEFAULT2
          $a.symtab0x139600NOTYPE<unknown>DEFAULT2
          $a.symtab0x13a9c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x13af80NOTYPE<unknown>DEFAULT2
          $a.symtab0x13b8c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x13c1c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x13c9c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x13d980NOTYPE<unknown>DEFAULT2
          $a.symtab0x13eac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x13ec00NOTYPE<unknown>DEFAULT2
          $a.symtab0x13f580NOTYPE<unknown>DEFAULT2
          $a.symtab0x1404c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x140600NOTYPE<unknown>DEFAULT2
          $a.symtab0x141400NOTYPE<unknown>DEFAULT2
          $a.symtab0x141780NOTYPE<unknown>DEFAULT2
          $a.symtab0x141bc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x141fc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x142400NOTYPE<unknown>DEFAULT2
          $a.symtab0x142c40NOTYPE<unknown>DEFAULT2
          $a.symtab0x143040NOTYPE<unknown>DEFAULT2
          $a.symtab0x143900NOTYPE<unknown>DEFAULT2
          $a.symtab0x143c00NOTYPE<unknown>DEFAULT2
          $a.symtab0x144000NOTYPE<unknown>DEFAULT2
          $a.symtab0x145100NOTYPE<unknown>DEFAULT2
          $a.symtab0x145e00NOTYPE<unknown>DEFAULT2
          $a.symtab0x146a40NOTYPE<unknown>DEFAULT2
          $a.symtab0x147540NOTYPE<unknown>DEFAULT2
          $a.symtab0x1483c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1485c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x148900NOTYPE<unknown>DEFAULT2
          $a.symtab0x148a00NOTYPE<unknown>DEFAULT2
          $a.symtab0x148b00NOTYPE<unknown>DEFAULT2
          $a.symtab0x149500NOTYPE<unknown>DEFAULT2
          $a.symtab0x149740NOTYPE<unknown>DEFAULT2
          $a.symtab0x1499c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x149e00NOTYPE<unknown>DEFAULT2
          $a.symtab0x14a240NOTYPE<unknown>DEFAULT2
          $a.symtab0x14a980NOTYPE<unknown>DEFAULT2
          $a.symtab0x14adc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x14b240NOTYPE<unknown>DEFAULT2
          $a.symtab0x14b640NOTYPE<unknown>DEFAULT2
          $a.symtab0x14ba80NOTYPE<unknown>DEFAULT2
          $a.symtab0x14c180NOTYPE<unknown>DEFAULT2
          $a.symtab0x14c600NOTYPE<unknown>DEFAULT2
          $a.symtab0x14ce80NOTYPE<unknown>DEFAULT2
          $a.symtab0x14d2c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x14d9c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x14de80NOTYPE<unknown>DEFAULT2
          $a.symtab0x14e700NOTYPE<unknown>DEFAULT2
          $a.symtab0x14eb80NOTYPE<unknown>DEFAULT2
          $a.symtab0x14efc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x14f4c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x14f600NOTYPE<unknown>DEFAULT2
          $a.symtab0x150240NOTYPE<unknown>DEFAULT2
          $a.symtab0x150900NOTYPE<unknown>DEFAULT2
          $a.symtab0x15a400NOTYPE<unknown>DEFAULT2
          $a.symtab0x15b800NOTYPE<unknown>DEFAULT2
          $a.symtab0x15f400NOTYPE<unknown>DEFAULT2
          $a.symtab0x163e00NOTYPE<unknown>DEFAULT2
          $a.symtab0x164200NOTYPE<unknown>DEFAULT2
          $a.symtab0x165480NOTYPE<unknown>DEFAULT2
          $a.symtab0x165600NOTYPE<unknown>DEFAULT2
          $a.symtab0x166040NOTYPE<unknown>DEFAULT2
          $a.symtab0x166bc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1677c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x168200NOTYPE<unknown>DEFAULT2
          $a.symtab0x168b00NOTYPE<unknown>DEFAULT2
          $a.symtab0x169880NOTYPE<unknown>DEFAULT2
          $a.symtab0x16a800NOTYPE<unknown>DEFAULT2
          $a.symtab0x16b6c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x16b8c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x16ba80NOTYPE<unknown>DEFAULT2
          $a.symtab0x16d800NOTYPE<unknown>DEFAULT2
          $a.symtab0x16e440NOTYPE<unknown>DEFAULT2
          $a.symtab0x16f900NOTYPE<unknown>DEFAULT2
          $a.symtab0x175b40NOTYPE<unknown>DEFAULT2
          $a.symtab0x179800NOTYPE<unknown>DEFAULT2
          $a.symtab0x17a180NOTYPE<unknown>DEFAULT2
          $a.symtab0x17a600NOTYPE<unknown>DEFAULT2
          $a.symtab0x17b500NOTYPE<unknown>DEFAULT2
          $a.symtab0x17c840NOTYPE<unknown>DEFAULT2
          $a.symtab0x17cdc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x17ce40NOTYPE<unknown>DEFAULT2
          $a.symtab0x17d140NOTYPE<unknown>DEFAULT2
          $a.symtab0x17d6c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x17d740NOTYPE<unknown>DEFAULT2
          $a.symtab0x17da40NOTYPE<unknown>DEFAULT2
          $a.symtab0x17dfc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x17e040NOTYPE<unknown>DEFAULT2
          $a.symtab0x17e340NOTYPE<unknown>DEFAULT2
          $a.symtab0x17e8c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x17e940NOTYPE<unknown>DEFAULT2
          $a.symtab0x17ec00NOTYPE<unknown>DEFAULT2
          $a.symtab0x17f480NOTYPE<unknown>DEFAULT2
          $a.symtab0x180240NOTYPE<unknown>DEFAULT2
          $a.symtab0x180e40NOTYPE<unknown>DEFAULT2
          $a.symtab0x181380NOTYPE<unknown>DEFAULT2
          $a.symtab0x181900NOTYPE<unknown>DEFAULT2
          $a.symtab0x1857c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x185f80NOTYPE<unknown>DEFAULT2
          $a.symtab0x186240NOTYPE<unknown>DEFAULT2
          $a.symtab0x186ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x186b40NOTYPE<unknown>DEFAULT2
          $a.symtab0x186c00NOTYPE<unknown>DEFAULT2
          $a.symtab0x186d00NOTYPE<unknown>DEFAULT2
          $a.symtab0x186e00NOTYPE<unknown>DEFAULT2
          $a.symtab0x187200NOTYPE<unknown>DEFAULT2
          $a.symtab0x187880NOTYPE<unknown>DEFAULT2
          $a.symtab0x187ec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1888c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x188b80NOTYPE<unknown>DEFAULT2
          $a.symtab0x188cc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x188e00NOTYPE<unknown>DEFAULT2
          $a.symtab0x188f40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1891c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x189540NOTYPE<unknown>DEFAULT2
          $a.symtab0x189940NOTYPE<unknown>DEFAULT2
          $a.symtab0x189a80NOTYPE<unknown>DEFAULT2
          $a.symtab0x189ec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x18a2c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x18a6c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x18acc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x18b380NOTYPE<unknown>DEFAULT2
          $a.symtab0x18b4c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x18cc40NOTYPE<unknown>DEFAULT2
          $a.symtab0x18db00NOTYPE<unknown>DEFAULT2
          $a.symtab0x191540NOTYPE<unknown>DEFAULT2
          $a.symtab0x194840NOTYPE<unknown>DEFAULT2
          $a.symtab0x194a40NOTYPE<unknown>DEFAULT2
          $a.symtab0x199040NOTYPE<unknown>DEFAULT2
          $a.symtab0x199840NOTYPE<unknown>DEFAULT2
          $a.symtab0x19ae80NOTYPE<unknown>DEFAULT2
          $a.symtab0x19b180NOTYPE<unknown>DEFAULT2
          $a.symtab0x19c5c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x19d780NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a0280NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a3d40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a5000NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a5a00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1aa300NOTYPE<unknown>DEFAULT2
          $a.symtab0x1aa500NOTYPE<unknown>DEFAULT2
          $a.symtab0x1aab00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1aba00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ac8c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1acd00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ad200NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ad6c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ad900NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ae0c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1af040NOTYPE<unknown>DEFAULT2
          $a.symtab0x1af7c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1afe40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b2380NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b2440NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b27c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b2d40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b32c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b3380NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b4800NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b4d80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b5b40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b5e40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b6880NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b6ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b6ec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b75c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b8a00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b8ec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b9380NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b9400NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b9440NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b9700NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b97c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b9880NOTYPE<unknown>DEFAULT2
          $a.symtab0x1bba80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1bcf80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1bd140NOTYPE<unknown>DEFAULT2
          $a.symtab0x1bd740NOTYPE<unknown>DEFAULT2
          $a.symtab0x1bde00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1be980NOTYPE<unknown>DEFAULT2
          $a.symtab0x1beb80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1bffc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c5440NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c54c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c5540NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c55c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c6180NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c65c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1cd700NOTYPE<unknown>DEFAULT2
          $a.symtab0x1cdb80NOTYPE<unknown>DEFAULT2
          $d.symtab0x81280NOTYPE<unknown>DEFAULT2
          $d.symtab0x264680NOTYPE<unknown>DEFAULT10
          $d.symtab0x81800NOTYPE<unknown>DEFAULT2
          $d.symtab0x264640NOTYPE<unknown>DEFAULT9
          $d.symtab0x81c40NOTYPE<unknown>DEFAULT2
          $d.symtab0x83200NOTYPE<unknown>DEFAULT2
          $d.symtab0x8b400NOTYPE<unknown>DEFAULT2
          $d.symtab0x91a40NOTYPE<unknown>DEFAULT2
          $d.symtab0x96900NOTYPE<unknown>DEFAULT2
          $d.symtab0x9cac0NOTYPE<unknown>DEFAULT2
          $d.symtab0xa3580NOTYPE<unknown>DEFAULT2
          $d.symtab0xaa040NOTYPE<unknown>DEFAULT2
          $d.symtab0xb0fc0NOTYPE<unknown>DEFAULT2
          $d.symtab0xb7a80NOTYPE<unknown>DEFAULT2
          $d.symtab0xbcf80NOTYPE<unknown>DEFAULT2
          $d.symtab0xc62c0NOTYPE<unknown>DEFAULT2
          $d.symtab0xca640NOTYPE<unknown>DEFAULT2
          $d.symtab0xd0c40NOTYPE<unknown>DEFAULT2
          $d.symtab0xd1200NOTYPE<unknown>DEFAULT2
          $d.symtab0xd8d80NOTYPE<unknown>DEFAULT2
          $d.symtab0xe08c0NOTYPE<unknown>DEFAULT2
          $d.symtab0xe3b40NOTYPE<unknown>DEFAULT2
          $d.symtab0xe6d40NOTYPE<unknown>DEFAULT2
          $d.symtab0x1d87c0NOTYPE<unknown>DEFAULT4
          $d.symtab0xed700NOTYPE<unknown>DEFAULT2
          $d.symtab0xf5100NOTYPE<unknown>DEFAULT2
          $d.symtab0xf5300NOTYPE<unknown>DEFAULT2
          $d.symtab0xf5780NOTYPE<unknown>DEFAULT2
          $d.symtab0xf66c0NOTYPE<unknown>DEFAULT2
          $d.symtab0xfd9c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x265180NOTYPE<unknown>DEFAULT13
          $d.symtab0x2651c0NOTYPE<unknown>DEFAULT13
          $d.symtab0x265200NOTYPE<unknown>DEFAULT13
          $d.symtab0xfe1c0NOTYPE<unknown>DEFAULT2
          $d.symtab0xfe840NOTYPE<unknown>DEFAULT2
          $d.symtab0xff540NOTYPE<unknown>DEFAULT2
          $d.symtab0x100300NOTYPE<unknown>DEFAULT2
          $d.symtab0x101040NOTYPE<unknown>DEFAULT2
          $d.symtab0x1025c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x102b00NOTYPE<unknown>DEFAULT2
          $d.symtab0x125cc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x12fe80NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ddb70NOTYPE<unknown>DEFAULT4
          $d.symtab0x1ddc00NOTYPE<unknown>DEFAULT4
          $d.symtab0x132580NOTYPE<unknown>DEFAULT2
          $d.symtab0x132f40NOTYPE<unknown>DEFAULT2
          $d.symtab0x133940NOTYPE<unknown>DEFAULT2
          $d.symtab0x137c00NOTYPE<unknown>DEFAULT2
          $d.symtab0x265240NOTYPE<unknown>DEFAULT13
          $d.symtab0x00NOTYPE<unknown>DEFAULT21
          $d.symtab0x200NOTYPE<unknown>DEFAULT21
          $d.symtab0x260NOTYPE<unknown>DEFAULT21
          $d.symtab0x13f500NOTYPE<unknown>DEFAULT2
          $d.symtab0x1403c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x141300NOTYPE<unknown>DEFAULT2
          $d.symtab0x141740NOTYPE<unknown>DEFAULT2
          $d.symtab0x141b80NOTYPE<unknown>DEFAULT2
          $d.symtab0x141f80NOTYPE<unknown>DEFAULT2
          $d.symtab0x1423c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x142bc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x143000NOTYPE<unknown>DEFAULT2
          $d.symtab0x1438c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x143fc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x144f40NOTYPE<unknown>DEFAULT2
          $d.symtab0x145d80NOTYPE<unknown>DEFAULT2
          $d.symtab0x146980NOTYPE<unknown>DEFAULT2
          $d.symtab0x1474c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1df580NOTYPE<unknown>DEFAULT4
          $d.symtab0x148280NOTYPE<unknown>DEFAULT2
          $d.symtab0x148580NOTYPE<unknown>DEFAULT2
          $d.symtab0x1488c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x149d80NOTYPE<unknown>DEFAULT2
          $d.symtab0x14a1c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x14a900NOTYPE<unknown>DEFAULT2
          $d.symtab0x14ad40NOTYPE<unknown>DEFAULT2
          $d.symtab0x14b1c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x14b600NOTYPE<unknown>DEFAULT2
          $d.symtab0x14ba00NOTYPE<unknown>DEFAULT2
          $d.symtab0x14c100NOTYPE<unknown>DEFAULT2
          $d.symtab0x14c5c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x14ce00NOTYPE<unknown>DEFAULT2
          $d.symtab0x14d240NOTYPE<unknown>DEFAULT2
          $d.symtab0x14d940NOTYPE<unknown>DEFAULT2
          $d.symtab0x14de00NOTYPE<unknown>DEFAULT2
          $d.symtab0x14e680NOTYPE<unknown>DEFAULT2
          $d.symtab0x14eb00NOTYPE<unknown>DEFAULT2
          $d.symtab0x14ef40NOTYPE<unknown>DEFAULT2
          $d.symtab0x14f480NOTYPE<unknown>DEFAULT2
          $d.symtab0x150180NOTYPE<unknown>DEFAULT2
          $d.symtab0x15a1c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x265280NOTYPE<unknown>DEFAULT13
          $d.symtab0x15b640NOTYPE<unknown>DEFAULT2
          $d.symtab0x15f200NOTYPE<unknown>DEFAULT2
          $d.symtab0x163c40NOTYPE<unknown>DEFAULT2
          $d.symtab0x164180NOTYPE<unknown>DEFAULT2
          $d.symtab0x165340NOTYPE<unknown>DEFAULT2
          $d.symtab0x265400NOTYPE<unknown>DEFAULT13
          $d.symtab0x165e80NOTYPE<unknown>DEFAULT2
          $d.symtab0x166a00NOTYPE<unknown>DEFAULT2
          $d.symtab0x167600NOTYPE<unknown>DEFAULT2
          $d.symtab0x168040NOTYPE<unknown>DEFAULT2
          $d.symtab0x265580NOTYPE<unknown>DEFAULT13
          $d.symtab0x265f00NOTYPE<unknown>DEFAULT13
          $d.symtab0x168ac0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1697c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x16a700NOTYPE<unknown>DEFAULT2
          $d.symtab0x16b600NOTYPE<unknown>DEFAULT2
          $d.symtab0x1df700NOTYPE<unknown>DEFAULT4
          $d.symtab0x16d700NOTYPE<unknown>DEFAULT2
          $d.symtab0x16e240NOTYPE<unknown>DEFAULT2
          $d.symtab0x266040NOTYPE<unknown>DEFAULT13
          $d.symtab0x16f6c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x175880NOTYPE<unknown>DEFAULT2
          $d.symtab0x179580NOTYPE<unknown>DEFAULT2
          $d.symtab0x17b440NOTYPE<unknown>DEFAULT2
          $d.symtab0x17c700NOTYPE<unknown>DEFAULT2
          $d.symtab0x17c800NOTYPE<unknown>DEFAULT2
          $d.symtab0x17d100NOTYPE<unknown>DEFAULT2
          $d.symtab0x17da00NOTYPE<unknown>DEFAULT2
          $d.symtab0x17e300NOTYPE<unknown>DEFAULT2
          $d.symtab0x1801c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x180d00NOTYPE<unknown>DEFAULT2
          $d.symtab0x181300NOTYPE<unknown>DEFAULT2
          $d.symtab0x181840NOTYPE<unknown>DEFAULT2
          $d.symtab0x185300NOTYPE<unknown>DEFAULT2
          $d.symtab0x2661c0NOTYPE<unknown>DEFAULT13
          $d.symtab0x185f00NOTYPE<unknown>DEFAULT2
          $d.symtab0x186200NOTYPE<unknown>DEFAULT2
          $d.symtab0x186a00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1871c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x187800NOTYPE<unknown>DEFAULT2
          $d.symtab0x187e80NOTYPE<unknown>DEFAULT2
          $d.symtab0x188880NOTYPE<unknown>DEFAULT2
          $d.symtab0x189140NOTYPE<unknown>DEFAULT2
          $d.symtab0x189500NOTYPE<unknown>DEFAULT2
          $d.symtab0x189900NOTYPE<unknown>DEFAULT2
          $d.symtab0x189e80NOTYPE<unknown>DEFAULT2
          $d.symtab0x18a280NOTYPE<unknown>DEFAULT2
          $d.symtab0x18a680NOTYPE<unknown>DEFAULT2
          $d.symtab0x18ac40NOTYPE<unknown>DEFAULT2
          $d.symtab0x18b300NOTYPE<unknown>DEFAULT2
          $d.symtab0x18d9c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1914c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x194740NOTYPE<unknown>DEFAULT2
          $d.symtab0x198d00NOTYPE<unknown>DEFAULT2
          $d.symtab0x199740NOTYPE<unknown>DEFAULT2
          $d.symtab0x19acc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x266340NOTYPE<unknown>DEFAULT13
          $d.symtab0x266300NOTYPE<unknown>DEFAULT13
          $d.symtab0x1a00c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1a3bc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1a4f80NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ab980NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ac840NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ae080NOTYPE<unknown>DEFAULT2
          $d.symtab0x1aefc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1af640NOTYPE<unknown>DEFAULT2
          $d.symtab0x1afd40NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b2100NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b2700NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b3200NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b4780NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b5b00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b6840NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b7580NOTYPE<unknown>DEFAULT2
          $d.symtab0x2c0NOTYPE<unknown>DEFAULT21
          $d.symtab0x4c0NOTYPE<unknown>DEFAULT21
          $d.symtab0x530NOTYPE<unknown>DEFAULT21
          $d.symtab0x1bb8c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c5340NOTYPE<unknown>DEFAULT2
          $d.symtab0x580NOTYPE<unknown>DEFAULT21
          $d.symtab0x00NOTYPE<unknown>DEFAULT23
          $d.symtab0x23c0NOTYPE<unknown>DEFAULT21
          $d.symtab0xe390NOTYPE<unknown>DEFAULT23
          $d.symtab0x266280NOTYPE<unknown>DEFAULT13
          $d.symtab0x1e0000NOTYPE<unknown>DEFAULT4
          C.11.5548.symtab0x1dfdc12OBJECT<unknown>DEFAULT4
          C.36.5097.symtab0x1d87c1024OBJECT<unknown>DEFAULT4
          C.43.5743.symtab0x1ddc03OBJECT<unknown>DEFAULT4
          C.44.5744.symtab0x1ddb79OBJECT<unknown>DEFAULT4
          C.5.5083.symtab0x1df5824OBJECT<unknown>DEFAULT4
          C.7.5370.symtab0x1dfe812OBJECT<unknown>DEFAULT4
          C.7.6109.symtab0x1e32412OBJECT<unknown>DEFAULT4
          C.7.6182.symtab0x1e30012OBJECT<unknown>DEFAULT4
          C.8.6110.symtab0x1e31812OBJECT<unknown>DEFAULT4
          C.9.6119.symtab0x1e30c12OBJECT<unknown>DEFAULT4
          LOCAL_ADDR.symtab0x292544OBJECT<unknown>DEFAULT14
          Laligned.symtab0x1aa780NOTYPE<unknown>DEFAULT2
          Llastword.symtab0x1aa940NOTYPE<unknown>DEFAULT2
          _Exit.symtab0x18720104FUNC<unknown>DEFAULT2
          _GLOBAL_OFFSET_TABLE_.symtab0x264700OBJECT<unknown>HIDDEN12
          _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _Unwind_Complete.symtab0x1b9404FUNC<unknown>HIDDEN2
          _Unwind_DeleteException.symtab0x1b94444FUNC<unknown>HIDDEN2
          _Unwind_ForcedUnwind.symtab0x1c5f436FUNC<unknown>HIDDEN2
          _Unwind_GetCFA.symtab0x1b9388FUNC<unknown>HIDDEN2
          _Unwind_GetDataRelBase.symtab0x1b97c12FUNC<unknown>HIDDEN2
          _Unwind_GetLanguageSpecificData.symtab0x1c61868FUNC<unknown>HIDDEN2
          _Unwind_GetRegionStart.symtab0x1cdb852FUNC<unknown>HIDDEN2
          _Unwind_GetTextRelBase.symtab0x1b97012FUNC<unknown>HIDDEN2
          _Unwind_RaiseException.symtab0x1c58836FUNC<unknown>HIDDEN2
          _Unwind_Resume.symtab0x1c5ac36FUNC<unknown>HIDDEN2
          _Unwind_Resume_or_Rethrow.symtab0x1c5d036FUNC<unknown>HIDDEN2
          _Unwind_VRS_Get.symtab0x1b8a076FUNC<unknown>HIDDEN2
          _Unwind_VRS_Pop.symtab0x1beb8324FUNC<unknown>HIDDEN2
          _Unwind_VRS_Set.symtab0x1b8ec76FUNC<unknown>HIDDEN2
          _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __C_ctype_b.symtab0x266284OBJECT<unknown>DEFAULT13
          __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __C_ctype_b_data.symtab0x1e000768OBJECT<unknown>DEFAULT4
          __EH_FRAME_BEGIN__.symtab0x264600OBJECT<unknown>DEFAULT7
          __FRAME_END__.symtab0x264600OBJECT<unknown>DEFAULT7
          __GI___C_ctype_b.symtab0x266284OBJECT<unknown>HIDDEN13
          __GI___close.symtab0x17ca0100FUNC<unknown>HIDDEN2
          __GI___close_nocancel.symtab0x17c8424FUNC<unknown>HIDDEN2
          __GI___ctype_b.symtab0x2662c4OBJECT<unknown>HIDDEN13
          __GI___errno_location.symtab0x1483c32FUNC<unknown>HIDDEN2
          __GI___fcntl_nocancel.symtab0x13ec0152FUNC<unknown>HIDDEN2
          __GI___fgetc_unlocked.symtab0x1a3d4300FUNC<unknown>HIDDEN2
          __GI___libc_close.symtab0x17ca0100FUNC<unknown>HIDDEN2
          __GI___libc_fcntl.symtab0x13f58244FUNC<unknown>HIDDEN2
          __GI___libc_open.symtab0x17d30100FUNC<unknown>HIDDEN2
          __GI___libc_read.symtab0x17e50100FUNC<unknown>HIDDEN2
          __GI___libc_write.symtab0x17dc0100FUNC<unknown>HIDDEN2
          __GI___open.symtab0x17d30100FUNC<unknown>HIDDEN2
          __GI___open_nocancel.symtab0x17d1424FUNC<unknown>HIDDEN2
          __GI___read.symtab0x17e50100FUNC<unknown>HIDDEN2
          __GI___read_nocancel.symtab0x17e3424FUNC<unknown>HIDDEN2
          __GI___sigaddset.symtab0x1504836FUNC<unknown>HIDDEN2
          __GI___sigdelset.symtab0x1506c36FUNC<unknown>HIDDEN2
          __GI___sigismember.symtab0x1502436FUNC<unknown>HIDDEN2
          __GI___uClibc_fini.symtab0x18068124FUNC<unknown>HIDDEN2
          __GI___uClibc_init.symtab0x1813888FUNC<unknown>HIDDEN2
          __GI___write.symtab0x17dc0100FUNC<unknown>HIDDEN2
          __GI___write_nocancel.symtab0x17da424FUNC<unknown>HIDDEN2
          __GI__exit.symtab0x18720104FUNC<unknown>HIDDEN2
          __GI_abort.symtab0x16420296FUNC<unknown>HIDDEN2
          __GI_atoi.symtab0x16b6c32FUNC<unknown>HIDDEN2
          __GI_bind.symtab0x1499c68FUNC<unknown>HIDDEN2
          __GI_brk.symtab0x1b2d488FUNC<unknown>HIDDEN2
          __GI_close.symtab0x17ca0100FUNC<unknown>HIDDEN2
          __GI_closedir.symtab0x14400272FUNC<unknown>HIDDEN2
          __GI_config_close.symtab0x190d852FUNC<unknown>HIDDEN2
          __GI_config_open.symtab0x1910c72FUNC<unknown>HIDDEN2
          __GI_config_read.symtab0x18db0808FUNC<unknown>HIDDEN2
          __GI_connect.symtab0x14a24116FUNC<unknown>HIDDEN2
          __GI_exit.symtab0x16d80196FUNC<unknown>HIDDEN2
          __GI_fclose.symtab0x19154816FUNC<unknown>HIDDEN2
          __GI_fcntl.symtab0x13f58244FUNC<unknown>HIDDEN2
          __GI_fflush_unlocked.symtab0x1a028940FUNC<unknown>HIDDEN2
          __GI_fgetc.symtab0x19b18324FUNC<unknown>HIDDEN2
          __GI_fgetc_unlocked.symtab0x1a3d4300FUNC<unknown>HIDDEN2
          __GI_fgets.symtab0x19c5c284FUNC<unknown>HIDDEN2
          __GI_fgets_unlocked.symtab0x1a500160FUNC<unknown>HIDDEN2
          __GI_fopen.symtab0x1948432FUNC<unknown>HIDDEN2
          __GI_fork.symtab0x175b4972FUNC<unknown>HIDDEN2
          __GI_fstat.symtab0x18788100FUNC<unknown>HIDDEN2
          __GI_getc_unlocked.symtab0x1a3d4300FUNC<unknown>HIDDEN2
          __GI_getdtablesize.symtab0x1888c44FUNC<unknown>HIDDEN2
          __GI_getegid.symtab0x188b820FUNC<unknown>HIDDEN2
          __GI_geteuid.symtab0x188cc20FUNC<unknown>HIDDEN2
          __GI_getgid.symtab0x188e020FUNC<unknown>HIDDEN2
          __GI_getpagesize.symtab0x188f440FUNC<unknown>HIDDEN2
          __GI_getpid.symtab0x17a1872FUNC<unknown>HIDDEN2
          __GI_getrlimit.symtab0x1891c56FUNC<unknown>HIDDEN2
          __GI_getsockname.symtab0x14a9868FUNC<unknown>HIDDEN2
          __GI_gettimeofday.symtab0x1895464FUNC<unknown>HIDDEN2
          __GI_getuid.symtab0x1899420FUNC<unknown>HIDDEN2
          __GI_inet_addr.symtab0x1497440FUNC<unknown>HIDDEN2
          __GI_inet_aton.symtab0x1ae0c248FUNC<unknown>HIDDEN2
          __GI_initstate_r.symtab0x16988248FUNC<unknown>HIDDEN2
          __GI_ioctl.symtab0x14060224FUNC<unknown>HIDDEN2
          __GI_isatty.symtab0x1ad6c36FUNC<unknown>HIDDEN2
          __GI_kill.symtab0x1414056FUNC<unknown>HIDDEN2
          __GI_listen.symtab0x14b2464FUNC<unknown>HIDDEN2
          __GI_lseek64.symtab0x1b6ec112FUNC<unknown>HIDDEN2
          __GI_memcpy.symtab0x148904FUNC<unknown>HIDDEN2
          __GI_memmove.symtab0x148a04FUNC<unknown>HIDDEN2
          __GI_mempcpy.symtab0x1b68836FUNC<unknown>HIDDEN2
          __GI_memset.symtab0x148b0156FUNC<unknown>HIDDEN2
          __GI_mmap.symtab0x1857c124FUNC<unknown>HIDDEN2
          __GI_mremap.symtab0x189a868FUNC<unknown>HIDDEN2
          __GI_munmap.symtab0x189ec64FUNC<unknown>HIDDEN2
          __GI_nanosleep.symtab0x18a6c96FUNC<unknown>HIDDEN2
          __GI_open.symtab0x17d30100FUNC<unknown>HIDDEN2
          __GI_opendir.symtab0x145e0196FUNC<unknown>HIDDEN2
          __GI_raise.symtab0x17a60240FUNC<unknown>HIDDEN2
          __GI_random.symtab0x16560164FUNC<unknown>HIDDEN2
          __GI_random_r.symtab0x16820144FUNC<unknown>HIDDEN2
          __GI_read.symtab0x17e50100FUNC<unknown>HIDDEN2
          __GI_readdir.symtab0x14754232FUNC<unknown>HIDDEN2
          __GI_readdir64.symtab0x18cc4236FUNC<unknown>HIDDEN2
          __GI_readlink.symtab0x141bc64FUNC<unknown>HIDDEN2
          __GI_recv.symtab0x14ba8112FUNC<unknown>HIDDEN2
          __GI_recvfrom.symtab0x14c60136FUNC<unknown>HIDDEN2
          __GI_sbrk.symtab0x18acc108FUNC<unknown>HIDDEN2
          __GI_select.symtab0x14240132FUNC<unknown>HIDDEN2
          __GI_send.symtab0x14d2c112FUNC<unknown>HIDDEN2
          __GI_sendto.symtab0x14de8136FUNC<unknown>HIDDEN2
          __GI_setsid.symtab0x142c464FUNC<unknown>HIDDEN2
          __GI_setsockopt.symtab0x14e7072FUNC<unknown>HIDDEN2
          __GI_setstate_r.symtab0x16a80236FUNC<unknown>HIDDEN2
          __GI_sigaction.symtab0x18624136FUNC<unknown>HIDDEN2
          __GI_sigaddset.symtab0x14efc80FUNC<unknown>HIDDEN2
          __GI_sigemptyset.symtab0x14f4c20FUNC<unknown>HIDDEN2
          __GI_signal.symtab0x14f60196FUNC<unknown>HIDDEN2
          __GI_sigprocmask.symtab0x14304140FUNC<unknown>HIDDEN2
          __GI_sleep.symtab0x17b50300FUNC<unknown>HIDDEN2
          __GI_socket.symtab0x14eb868FUNC<unknown>HIDDEN2
          __GI_srandom_r.symtab0x168b0216FUNC<unknown>HIDDEN2
          __GI_strchr.symtab0x1aab0240FUNC<unknown>HIDDEN2
          __GI_strchrnul.symtab0x1aba0236FUNC<unknown>HIDDEN2
          __GI_strcmp.symtab0x1aa3028FUNC<unknown>HIDDEN2
          __GI_strcoll.symtab0x1aa3028FUNC<unknown>HIDDEN2
          __GI_strcpy.symtab0x1495036FUNC<unknown>HIDDEN2
          __GI_strcspn.symtab0x1ac8c68FUNC<unknown>HIDDEN2
          __GI_strlen.symtab0x1aa5096FUNC<unknown>HIDDEN2
          __GI_strrchr.symtab0x1acd080FUNC<unknown>HIDDEN2
          __GI_strspn.symtab0x1ad2076FUNC<unknown>HIDDEN2
          __GI_strtol.symtab0x16b8c28FUNC<unknown>HIDDEN2
          __GI_sysconf.symtab0x16f901572FUNC<unknown>HIDDEN2
          __GI_tcgetattr.symtab0x1ad90124FUNC<unknown>HIDDEN2
          __GI_time.symtab0x1439048FUNC<unknown>HIDDEN2
          __GI_times.symtab0x18b3820FUNC<unknown>HIDDEN2
          __GI_unlink.symtab0x143c064FUNC<unknown>HIDDEN2
          __GI_write.symtab0x17dc0100FUNC<unknown>HIDDEN2
          __JCR_END__.symtab0x2646c0OBJECT<unknown>DEFAULT11
          __JCR_LIST__.symtab0x2646c0OBJECT<unknown>DEFAULT11
          ___Unwind_ForcedUnwind.symtab0x1c5f436FUNC<unknown>HIDDEN2
          ___Unwind_RaiseException.symtab0x1c58836FUNC<unknown>HIDDEN2
          ___Unwind_Resume.symtab0x1c5ac36FUNC<unknown>HIDDEN2
          ___Unwind_Resume_or_Rethrow.symtab0x1c5d036FUNC<unknown>HIDDEN2
          __aeabi_idiv.symtab0x1b75c0FUNC<unknown>HIDDEN2
          __aeabi_idivmod.symtab0x1b88824FUNC<unknown>HIDDEN2
          __aeabi_read_tp.symtab0x186d08FUNC<unknown>DEFAULT2
          __aeabi_uidiv.symtab0x13d980FUNC<unknown>HIDDEN2
          __aeabi_uidivmod.symtab0x13e9424FUNC<unknown>HIDDEN2
          __aeabi_unwind_cpp_pr0.symtab0x1c5548FUNC<unknown>HIDDEN2
          __aeabi_unwind_cpp_pr1.symtab0x1c54c8FUNC<unknown>HIDDEN2
          __aeabi_unwind_cpp_pr2.symtab0x1c5448FUNC<unknown>HIDDEN2
          __app_fini.symtab0x26cec4OBJECT<unknown>HIDDEN14
          __atexit_lock.symtab0x2660424OBJECT<unknown>DEFAULT13
          __bss_end__.symtab0x2972c0NOTYPE<unknown>DEFAULTSHN_ABS
          __bss_start.symtab0x267180NOTYPE<unknown>DEFAULTSHN_ABS
          __bss_start__.symtab0x267180NOTYPE<unknown>DEFAULTSHN_ABS
          __check_one_fd.symtab0x180e484FUNC<unknown>DEFAULT2
          __close.symtab0x17ca0100FUNC<unknown>DEFAULT2
          __close_nocancel.symtab0x17c8424FUNC<unknown>DEFAULT2
          __ctype_b.symtab0x2662c4OBJECT<unknown>DEFAULT13
          __curbrk.symtab0x292504OBJECT<unknown>HIDDEN14
          __cxa_begin_cleanup.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __cxa_call_unexpected.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __cxa_type_match.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __data_start.symtab0x265180NOTYPE<unknown>DEFAULT13
          __default_rt_sa_restorer.symtab0x186c40FUNC<unknown>DEFAULT2
          __default_sa_restorer.symtab0x186b80FUNC<unknown>DEFAULT2
          __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __div0.symtab0x13eac20FUNC<unknown>HIDDEN2
          __divsi3.symtab0x1b75c300FUNC<unknown>HIDDEN2
          __do_global_dtors_aux.symtab0x80f00FUNC<unknown>DEFAULT2
          __do_global_dtors_aux_fini_array_entry.symtab0x264680OBJECT<unknown>DEFAULT10
          __end__.symtab0x2972c0NOTYPE<unknown>DEFAULTSHN_ABS
          __environ.symtab0x26ce44OBJECT<unknown>DEFAULT14
          __errno_location.symtab0x1483c32FUNC<unknown>DEFAULT2
          __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __exidx_end.symtab0x1e4600NOTYPE<unknown>DEFAULTSHN_ABS
          __exidx_start.symtab0x1e3480NOTYPE<unknown>DEFAULTSHN_ABS
          __exit_cleanup.symtab0x267944OBJECT<unknown>HIDDEN14
          __fcntl_nocancel.symtab0x13ec0152FUNC<unknown>DEFAULT2
          __fgetc_unlocked.symtab0x1a3d4300FUNC<unknown>DEFAULT2
          __fini_array_end.symtab0x2646c0NOTYPE<unknown>HIDDEN10
          __fini_array_start.symtab0x264680NOTYPE<unknown>HIDDEN10
          __fork.symtab0x175b4972FUNC<unknown>DEFAULT2
          __fork_generation_pointer.symtab0x296f84OBJECT<unknown>HIDDEN14
          __fork_handlers.symtab0x296fc4OBJECT<unknown>HIDDEN14
          __fork_lock.symtab0x267984OBJECT<unknown>HIDDEN14
          __frame_dummy_init_array_entry.symtab0x264640OBJECT<unknown>DEFAULT9
          __getdents.symtab0x187ec160FUNC<unknown>HIDDEN2
          __getdents64.symtab0x1b338328FUNC<unknown>HIDDEN2
          __getpagesize.symtab0x188f440FUNC<unknown>DEFAULT2
          __getpid.symtab0x17a1872FUNC<unknown>DEFAULT2
          __gnu_Unwind_Find_exidx.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __gnu_Unwind_ForcedUnwind.symtab0x1bcf828FUNC<unknown>HIDDEN2
          __gnu_Unwind_RaiseException.symtab0x1bde0184FUNC<unknown>HIDDEN2
          __gnu_Unwind_Restore_VFP.symtab0x1c5780FUNC<unknown>HIDDEN2
          __gnu_Unwind_Resume.symtab0x1bd74108FUNC<unknown>HIDDEN2
          __gnu_Unwind_Resume_or_Rethrow.symtab0x1be9832FUNC<unknown>HIDDEN2
          __gnu_Unwind_Save_VFP.symtab0x1c5800FUNC<unknown>HIDDEN2
          __gnu_unwind_execute.symtab0x1c65c1812FUNC<unknown>HIDDEN2
          __gnu_unwind_frame.symtab0x1cd7072FUNC<unknown>HIDDEN2
          __gnu_unwind_pr_common.symtab0x1bffc1352FUNC<unknown>DEFAULT2
          __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __init_array_end.symtab0x264680NOTYPE<unknown>HIDDEN9
          __init_array_start.symtab0x264640NOTYPE<unknown>HIDDEN9
          __libc_close.symtab0x17ca0100FUNC<unknown>DEFAULT2
          __libc_connect.symtab0x14a24116FUNC<unknown>DEFAULT2
          __libc_disable_asynccancel.symtab0x17ec0136FUNC<unknown>HIDDEN2
          __libc_enable_asynccancel.symtab0x17f48220FUNC<unknown>HIDDEN2
          __libc_errno.symtab0x04TLS<unknown>HIDDEN8
          __libc_fcntl.symtab0x13f58244FUNC<unknown>DEFAULT2
          __libc_fork.symtab0x175b4972FUNC<unknown>DEFAULT2
          __libc_h_errno.symtab0x44TLS<unknown>HIDDEN8
          __libc_multiple_threads.symtab0x297004OBJECT<unknown>HIDDEN14
          __libc_nanosleep.symtab0x18a6c96FUNC<unknown>DEFAULT2
          __libc_open.symtab0x17d30100FUNC<unknown>DEFAULT2
          __libc_read.symtab0x17e50100FUNC<unknown>DEFAULT2
          __libc_recv.symtab0x14ba8112FUNC<unknown>DEFAULT2
          __libc_recvfrom.symtab0x14c60136FUNC<unknown>DEFAULT2
          __libc_select.symtab0x14240132FUNC<unknown>DEFAULT2
          __libc_send.symtab0x14d2c112FUNC<unknown>DEFAULT2
          __libc_sendto.symtab0x14de8136FUNC<unknown>DEFAULT2
          __libc_setup_tls.symtab0x1b008560FUNC<unknown>DEFAULT2
          __libc_sigaction.symtab0x18624136FUNC<unknown>DEFAULT2
          __libc_stack_end.symtab0x26ce04OBJECT<unknown>DEFAULT14
          __libc_write.symtab0x17dc0100FUNC<unknown>DEFAULT2
          __lll_lock_wait_private.symtab0x17980152FUNC<unknown>HIDDEN2
          __malloc_consolidate.symtab0x15ff0436FUNC<unknown>HIDDEN2
          __malloc_largebin_index.symtab0x15090120FUNC<unknown>DEFAULT2
          __malloc_lock.symtab0x2652824OBJECT<unknown>DEFAULT13
          __malloc_state.symtab0x29380888OBJECT<unknown>DEFAULT14
          __malloc_trim.symtab0x15f40176FUNC<unknown>DEFAULT2
          __nptl_deallocate_tsd.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __nptl_nthreads.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __open.symtab0x17d30100FUNC<unknown>DEFAULT2
          __open_nocancel.symtab0x17d1424FUNC<unknown>DEFAULT2
          __pagesize.symtab0x26ce84OBJECT<unknown>DEFAULT14
          __preinit_array_end.symtab0x264640NOTYPE<unknown>HIDDEN8
          __preinit_array_start.symtab0x264640NOTYPE<unknown>HIDDEN8
          __progname.symtab0x266204OBJECT<unknown>DEFAULT13
          __progname_full.symtab0x266244OBJECT<unknown>DEFAULT13
          __pthread_initialize_minimal.symtab0x1b23812FUNC<unknown>DEFAULT2
          __pthread_mutex_init.symtab0x1802c8FUNC<unknown>DEFAULT2
          __pthread_mutex_lock.symtab0x180248FUNC<unknown>DEFAULT2
          __pthread_mutex_trylock.symtab0x180248FUNC<unknown>DEFAULT2
          __pthread_mutex_unlock.symtab0x180248FUNC<unknown>DEFAULT2
          __pthread_return_0.symtab0x180248FUNC<unknown>DEFAULT2
          __pthread_unwind.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __read.symtab0x17e50100FUNC<unknown>DEFAULT2
          __read_nocancel.symtab0x17e3424FUNC<unknown>DEFAULT2
          __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __restore_core_regs.symtab0x1c55c28FUNC<unknown>HIDDEN2
          __rtld_fini.symtab0x26cf04OBJECT<unknown>HIDDEN14
          __sigaddset.symtab0x1504836FUNC<unknown>DEFAULT2
          __sigdelset.symtab0x1506c36FUNC<unknown>DEFAULT2
          __sigismember.symtab0x1502436FUNC<unknown>DEFAULT2
          __sigjmp_save.symtab0x1b6ac64FUNC<unknown>HIDDEN2
          __sigsetjmp.symtab0x1b32c12FUNC<unknown>DEFAULT2
          __stdin.symtab0x266404OBJECT<unknown>DEFAULT13
          __stdio_READ.symtab0x1b48088FUNC<unknown>HIDDEN2
          __stdio_WRITE.symtab0x1b4d8220FUNC<unknown>HIDDEN2
          __stdio_rfill.symtab0x1b5b448FUNC<unknown>HIDDEN2
          __stdio_trans2r_o.symtab0x1b5e4164FUNC<unknown>HIDDEN2
          __stdio_wcommit.symtab0x19ae848FUNC<unknown>HIDDEN2
          __stdout.symtab0x266444OBJECT<unknown>DEFAULT13
          __sys_connect.symtab0x149e068FUNC<unknown>DEFAULT2
          __sys_recv.symtab0x14b6468FUNC<unknown>DEFAULT2
          __sys_recvfrom.symtab0x14c1872FUNC<unknown>DEFAULT2
          __sys_send.symtab0x14ce868FUNC<unknown>DEFAULT2
          __sys_sendto.symtab0x14d9c76FUNC<unknown>DEFAULT2
          __syscall_error.symtab0x185f844FUNC<unknown>HIDDEN2
          __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __syscall_nanosleep.symtab0x18a2c64FUNC<unknown>DEFAULT2
          __syscall_rt_sigaction.symtab0x186e064FUNC<unknown>DEFAULT2
          __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __syscall_select.symtab0x141fc68FUNC<unknown>DEFAULT2
          __tls_get_addr.symtab0x1afe436FUNC<unknown>DEFAULT2
          __uClibc_fini.symtab0x18068124FUNC<unknown>DEFAULT2
          __uClibc_init.symtab0x1813888FUNC<unknown>DEFAULT2
          __uClibc_main.symtab0x181901004FUNC<unknown>DEFAULT2
          __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __uclibc_progname.symtab0x2661c4OBJECT<unknown>HIDDEN13
          __udivsi3.symtab0x13d98252FUNC<unknown>HIDDEN2
          __write.symtab0x17dc0100FUNC<unknown>DEFAULT2
          __write_nocancel.symtab0x17da424FUNC<unknown>DEFAULT2
          __xstat32_conv.symtab0x18c18172FUNC<unknown>HIDDEN2
          __xstat64_conv.symtab0x18b4c204FUNC<unknown>HIDDEN2
          _bss_end__.symtab0x2972c0NOTYPE<unknown>DEFAULTSHN_ABS
          _dl_aux_init.symtab0x1b24456FUNC<unknown>DEFAULT2
          _dl_nothread_init_static_tls.symtab0x1b27c88FUNC<unknown>HIDDEN2
          _dl_phdr.symtab0x297244OBJECT<unknown>DEFAULT14
          _dl_phnum.symtab0x297284OBJECT<unknown>DEFAULT14
          _dl_tls_dtv_gaps.symtab0x297181OBJECT<unknown>DEFAULT14
          _dl_tls_dtv_slotinfo_list.symtab0x297144OBJECT<unknown>DEFAULT14
          _dl_tls_generation.symtab0x2971c4OBJECT<unknown>DEFAULT14
          _dl_tls_max_dtv_idx.symtab0x2970c4OBJECT<unknown>DEFAULT14
          _dl_tls_setup.symtab0x1af7c104FUNC<unknown>DEFAULT2
          _dl_tls_static_align.symtab0x297084OBJECT<unknown>DEFAULT14
          _dl_tls_static_nelem.symtab0x297204OBJECT<unknown>DEFAULT14
          _dl_tls_static_size.symtab0x297104OBJECT<unknown>DEFAULT14
          _dl_tls_static_used.symtab0x297044OBJECT<unknown>DEFAULT14
          _edata.symtab0x267180NOTYPE<unknown>DEFAULTSHN_ABS
          _end.symtab0x2972c0NOTYPE<unknown>DEFAULTSHN_ABS
          _exit.symtab0x18720104FUNC<unknown>DEFAULT2
          _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _fini.symtab0x1cdec0FUNC<unknown>DEFAULT3
          _fixed_buffers.symtab0x26d148192OBJECT<unknown>DEFAULT14
          _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _init.symtab0x80d40FUNC<unknown>DEFAULT1
          _memcpy.symtab0x1a5a00FUNC<unknown>HIDDEN2
          _pthread_cleanup_pop_restore.symtab0x1803c44FUNC<unknown>DEFAULT2
          _pthread_cleanup_push_defer.symtab0x180348FUNC<unknown>DEFAULT2
          _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _setjmp.symtab0x186ac8FUNC<unknown>DEFAULT2
          _sigintr.symtab0x293788OBJECT<unknown>HIDDEN14
          _start.symtab0x81940FUNC<unknown>DEFAULT2
          _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _stdio_fopen.symtab0x194a41120FUNC<unknown>HIDDEN2
          _stdio_init.symtab0x19904128FUNC<unknown>HIDDEN2
          _stdio_openlist.symtab0x266484OBJECT<unknown>DEFAULT13
          _stdio_openlist_add_lock.symtab0x26cf412OBJECT<unknown>DEFAULT14
          _stdio_openlist_dec_use.symtab0x19d78688FUNC<unknown>HIDDEN2
          _stdio_openlist_del_count.symtab0x26d104OBJECT<unknown>DEFAULT14
          _stdio_openlist_del_lock.symtab0x26d0012OBJECT<unknown>DEFAULT14
          _stdio_openlist_use_count.symtab0x26d0c4OBJECT<unknown>DEFAULT14
          _stdio_streams.symtab0x2664c204OBJECT<unknown>DEFAULT13
          _stdio_term.symtab0x19984356FUNC<unknown>HIDDEN2
          _stdio_user_locking.symtab0x266304OBJECT<unknown>DEFAULT13
          _stdlib_strto_l.symtab0x16ba8472FUNC<unknown>HIDDEN2
          _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          abort.symtab0x16420296FUNC<unknown>DEFAULT2
          abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          add_auth_entry.symtab0x10108352FUNC<unknown>DEFAULT2
          anti_gdb_entry.symtab0xf52024FUNC<unknown>DEFAULT2
          atoi.symtab0x16b6c32FUNC<unknown>DEFAULT2
          atol.symtab0x16b6c32FUNC<unknown>DEFAULT2
          atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          attack.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          attack_get_opt_int.symtab0x85b0112FUNC<unknown>DEFAULT2
          attack_get_opt_ip.symtab0x8544108FUNC<unknown>DEFAULT2
          attack_get_opt_str.symtab0x81d092FUNC<unknown>DEFAULT2
          attack_init.symtab0x86201388FUNC<unknown>DEFAULT2
          attack_method.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          attack_method_asyn.symtab0x8b8c1564FUNC<unknown>DEFAULT2
          attack_method_greeth.symtab0xbf9c1684FUNC<unknown>DEFAULT2
          attack_method_greip.symtab0x96941564FUNC<unknown>DEFAULT2
          attack_method_ice.symtab0xb7ac672FUNC<unknown>DEFAULT2
          attack_method_randhex.symtab0xe090808FUNC<unknown>DEFAULT2
          attack_method_stdhex.symtab0xe3b8820FUNC<unknown>DEFAULT2
          attack_method_tcpack.symtab0xaa081784FUNC<unknown>DEFAULT2
          attack_method_tcpall.symtab0xa35c1708FUNC<unknown>DEFAULT2
          attack_method_tcpfrag.symtab0x9cb01708FUNC<unknown>DEFAULT2
          attack_method_tcpstomp.symtab0xd8dc1972FUNC<unknown>DEFAULT2
          attack_method_tcpsyn.symtab0xb1001708FUNC<unknown>DEFAULT2
          attack_method_tcpxmas.symtab0xd1281972FUNC<unknown>DEFAULT2
          attack_method_udpdns.symtab0xca681728FUNC<unknown>DEFAULT2
          attack_method_udpgeneric.symtab0x91a81260FUNC<unknown>DEFAULT2
          attack_method_udphex.symtab0xba4c688FUNC<unknown>DEFAULT2
          attack_method_udpplain.symtab0xbcfc672FUNC<unknown>DEFAULT2
          attack_method_udpvse.symtab0xc6301080FUNC<unknown>DEFAULT2
          attack_parse.symtab0x8328540FUNC<unknown>DEFAULT2
          attack_start.symtab0x822c252FUNC<unknown>DEFAULT2
          auth_table.symtab0x267844OBJECT<unknown>DEFAULT14
          auth_table_len.symtab0x267584OBJECT<unknown>DEFAULT14
          auth_table_max_weight.symtab0x267882OBJECT<unknown>DEFAULT14
          been_there_done_that.symtab0x267904OBJECT<unknown>DEFAULT14
          bind.symtab0x1499c68FUNC<unknown>DEFAULT2
          bind.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          brk.symtab0x1b2d488FUNC<unknown>DEFAULT2
          brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          bsd_signal.symtab0x14f60196FUNC<unknown>DEFAULT2
          calloc.symtab0x15a40320FUNC<unknown>DEFAULT2
          calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          checksum.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          checksum_generic.symtab0xe6ec80FUNC<unknown>DEFAULT2
          checksum_tcpudp.symtab0xe73c164FUNC<unknown>DEFAULT2
          clock.symtab0x1485c52FUNC<unknown>DEFAULT2
          clock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          close.symtab0x17ca0100FUNC<unknown>DEFAULT2
          closedir.symtab0x14400272FUNC<unknown>DEFAULT2
          closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          completed.5105.symtab0x267181OBJECT<unknown>DEFAULT14
          conn_table.symtab0x292584OBJECT<unknown>DEFAULT14
          connect.symtab0x14a24116FUNC<unknown>DEFAULT2
          connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          environ.symtab0x26ce44OBJECT<unknown>DEFAULT14
          errno.symtab0x04TLS<unknown>DEFAULT8
          errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          exit.symtab0x16d80196FUNC<unknown>DEFAULT2
          exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fake_time.symtab0x2678c4OBJECT<unknown>DEFAULT14
          fclose.symtab0x19154816FUNC<unknown>DEFAULT2
          fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fcntl.symtab0x13f58244FUNC<unknown>DEFAULT2
          fd_ctrl.symtab0x265184OBJECT<unknown>DEFAULT13
          fd_serv.symtab0x2651c4OBJECT<unknown>DEFAULT13
          fd_to_DIR.symtab0x14510208FUNC<unknown>DEFAULT2
          fdopendir.symtab0x146a4176FUNC<unknown>DEFAULT2
          fflush_unlocked.symtab0x1a028940FUNC<unknown>DEFAULT2
          fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgetc.symtab0x19b18324FUNC<unknown>DEFAULT2
          fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgetc_unlocked.symtab0x1a3d4300FUNC<unknown>DEFAULT2
          fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgets.symtab0x19c5c284FUNC<unknown>DEFAULT2
          fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgets_unlocked.symtab0x1a500160FUNC<unknown>DEFAULT2
          fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fopen.symtab0x1948432FUNC<unknown>DEFAULT2
          fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fork.symtab0x175b4972FUNC<unknown>DEFAULT2
          fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fork_handler_pool.symtab0x2679c1348OBJECT<unknown>DEFAULT14
          frame_dummy.symtab0x81340FUNC<unknown>DEFAULT2
          free.symtab0x161a4572FUNC<unknown>DEFAULT2
          free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fstat.symtab0x18788100FUNC<unknown>DEFAULT2
          fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          get_eit_entry.symtab0x1b988544FUNC<unknown>DEFAULT2
          getc.symtab0x19b18324FUNC<unknown>DEFAULT2
          getc_unlocked.symtab0x1a3d4300FUNC<unknown>DEFAULT2
          getdents.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getdtablesize.symtab0x1888c44FUNC<unknown>DEFAULT2
          getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getegid.symtab0x188b820FUNC<unknown>DEFAULT2
          getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          geteuid.symtab0x188cc20FUNC<unknown>DEFAULT2
          geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getgid.symtab0x188e020FUNC<unknown>DEFAULT2
          getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getpagesize.symtab0x188f440FUNC<unknown>DEFAULT2
          getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getpid.symtab0x17a1872FUNC<unknown>DEFAULT2
          getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getppid.symtab0x1404c20FUNC<unknown>DEFAULT2
          getppid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getrlimit.symtab0x1891c56FUNC<unknown>DEFAULT2
          getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getsockname.symtab0x14a9868FUNC<unknown>DEFAULT2
          getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getsockopt.symtab0x14adc72FUNC<unknown>DEFAULT2
          getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          gettimeofday.symtab0x1895464FUNC<unknown>DEFAULT2
          gettimeofday.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getuid.symtab0x1899420FUNC<unknown>DEFAULT2
          getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          h_errno.symtab0x44TLS<unknown>DEFAULT8
          hnap_scanner.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          huawei.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          index.symtab0x1aab0240FUNC<unknown>DEFAULT2
          inet_addr.symtab0x1497440FUNC<unknown>DEFAULT2
          inet_aton.symtab0x1ae0c248FUNC<unknown>DEFAULT2
          inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          init_static_tls.symtab0x1af04120FUNC<unknown>DEFAULT2
          initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          initstate.symtab0x166bc192FUNC<unknown>DEFAULT2
          initstate_r.symtab0x16988248FUNC<unknown>DEFAULT2
          ioctl.symtab0x14060224FUNC<unknown>DEFAULT2
          ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          isatty.symtab0x1ad6c36FUNC<unknown>DEFAULT2
          isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          kill.symtab0x1414056FUNC<unknown>DEFAULT2
          kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          killer.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          killer_init.symtab0xed741964FUNC<unknown>DEFAULT2
          killer_kill_by_port.symtab0xe7e01428FUNC<unknown>DEFAULT2
          killer_pid.symtab0x292604OBJECT<unknown>DEFAULT14
          killer_realpath.symtab0x2925c4OBJECT<unknown>DEFAULT14
          killer_realpath_len.symtab0x2673c4OBJECT<unknown>DEFAULT14
          libc-cancellation.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          libc-lowlevellock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          libc-tls.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          libc_multiple_threads.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          listen.symtab0x14b2464FUNC<unknown>DEFAULT2
          listen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          lseek64.symtab0x1b6ec112FUNC<unknown>DEFAULT2
          main.symtab0xf6701888FUNC<unknown>DEFAULT2
          main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          malloc.symtab0x151082360FUNC<unknown>DEFAULT2
          malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          malloc_trim.symtab0x163e064FUNC<unknown>DEFAULT2
          memcpy.symtab0x148904FUNC<unknown>DEFAULT2
          memmove.symtab0x148a04FUNC<unknown>DEFAULT2
          mempcpy.symtab0x1b68836FUNC<unknown>DEFAULT2
          mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          memset.symtab0x148b0156FUNC<unknown>DEFAULT2
          methods.symtab0x267384OBJECT<unknown>DEFAULT14
          methods_len.symtab0x267341OBJECT<unknown>DEFAULT14
          mmap.symtab0x1857c124FUNC<unknown>DEFAULT2
          mmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          mremap.symtab0x189a868FUNC<unknown>DEFAULT2
          mremap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          munmap.symtab0x189ec64FUNC<unknown>DEFAULT2
          munmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          mylock.symtab0x2654024OBJECT<unknown>DEFAULT13
          mylock.symtab0x2655824OBJECT<unknown>DEFAULT13
          nanosleep.symtab0x18a6c96FUNC<unknown>DEFAULT2
          nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          nprocessors_onln.symtab0x16e44332FUNC<unknown>DEFAULT2
          object.5113.symtab0x2671c24OBJECT<unknown>DEFAULT14
          open.symtab0x17d30100FUNC<unknown>DEFAULT2
          opendir.symtab0x145e0196FUNC<unknown>DEFAULT2
          opendir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          parse_config.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          pending_connection.symtab0x267441OBJECT<unknown>DEFAULT14
          pr-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          prctl.symtab0x1417868FUNC<unknown>DEFAULT2
          prctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          program_invocation_name.symtab0x266244OBJECT<unknown>DEFAULT13
          program_invocation_short_name.symtab0x266204OBJECT<unknown>DEFAULT13
          raise.symtab0x17a60240FUNC<unknown>DEFAULT2
          raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          rand.symtab0x1654824FUNC<unknown>DEFAULT2
          rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          rand_alpha_str.symtab0xfe94208FUNC<unknown>DEFAULT2
          rand_init.symtab0xfe2c104FUNC<unknown>DEFAULT2
          rand_next.symtab0xfdd092FUNC<unknown>DEFAULT2
          rand_str.symtab0xff64220FUNC<unknown>DEFAULT2
          random.symtab0x16560164FUNC<unknown>DEFAULT2
          random.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          random_poly_info.symtab0x1df7040OBJECT<unknown>DEFAULT4
          random_r.symtab0x16820144FUNC<unknown>DEFAULT2
          random_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          randtbl.symtab0x26570128OBJECT<unknown>DEFAULT13
          read.symtab0x17e50100FUNC<unknown>DEFAULT2
          readdir.symtab0x14754232FUNC<unknown>DEFAULT2
          readdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          readdir64.symtab0x18cc4236FUNC<unknown>DEFAULT2
          readdir64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          readlink.symtab0x141bc64FUNC<unknown>DEFAULT2
          readlink.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          realloc.symtab0x15b80960FUNC<unknown>DEFAULT2
          realloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          realtek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          recv.symtab0x14ba8112FUNC<unknown>DEFAULT2
          recv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          recvfrom.symtab0x14c60136FUNC<unknown>DEFAULT2
          recvfrom.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          register-atfork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          resolv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          resolve_cnc_addr.symtab0xf53872FUNC<unknown>DEFAULT2
          resolve_func.symtab0x265204OBJECT<unknown>DEFAULT13
          restore_core_regs.symtab0x1c55c28FUNC<unknown>HIDDEN2
          rindex.symtab0x1acd080FUNC<unknown>DEFAULT2
          rsck.symtab0x292744OBJECT<unknown>DEFAULT14
          rsck_out.symtab0x2927c4OBJECT<unknown>DEFAULT14
          sbrk.symtab0x18acc108FUNC<unknown>DEFAULT2
          sbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          scanner.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          scanner_init.symtab0x1026812240FUNC<unknown>DEFAULT2

          Network Behavior

          Network Port Distribution

          UDP Packets

          TimestampSource PortDest PortSource IPDest IP
          Jan 12, 2025 20:58:00.291654110 CET3741753192.168.2.151.1.1.1
          Jan 12, 2025 20:58:00.291654110 CET3867053192.168.2.151.1.1.1
          Jan 12, 2025 20:58:00.298546076 CET53386701.1.1.1192.168.2.15
          Jan 12, 2025 20:58:00.299057961 CET53374171.1.1.1192.168.2.15

          DNS Queries

          TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
          Jan 12, 2025 20:58:00.291654110 CET192.168.2.151.1.1.10xdf2eStandard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
          Jan 12, 2025 20:58:00.291654110 CET192.168.2.151.1.1.10x3905Standard query (0)daisy.ubuntu.com28IN (0x0001)false

          DNS Answers

          TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
          Jan 12, 2025 20:58:00.299057961 CET1.1.1.1192.168.2.150xdf2eNo error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false
          Jan 12, 2025 20:58:00.299057961 CET1.1.1.1192.168.2.150xdf2eNo error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false

          System Behavior

          General

          Start time (UTC):19:57:57
          Start date (UTC):12/01/2025
          Path:/tmp/Cinquento.arm7.elf
          Arguments:/tmp/Cinquento.arm7.elf
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Chronological Activities