Linux
Analysis Report
sshd.elf
Overview
General Information
Detection
Score: | 56 |
Range: | 0 - 100 |
Signatures
Classification
Joe Sandbox version: | 42.0.0 Malachite |
Analysis ID: | 1631461 |
Start date and time: | 2025-03-07 06:42:12 +01:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 10m 31s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | defaultlinuxfilecookbook.jbs |
Analysis system description: | Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11) |
Analysis Mode: | default |
Sample name: | sshd.elf |
Detection: | MAL |
Classification: | mal56.linELF@0/0@2/0 |
Cookbook Comments: |
|
Command: | /tmp/sshd.elf |
PID: | 5506 |
Exit Code: | 255 |
Exit Code Info: | |
Killed: | False |
Standard Output: | |
Standard Error: | /lib/ld-linux-armhf.so.3: No such file or directory |
- • AV Detection
- • Networking
- • System Summary
- • Persistence and Installation Behavior
- • Malware Analysis System Evasion
Click to jump to signature section
AV Detection |
---|
Source: | Avira: |
Source: | ReversingLabs: |
Source: | TCP traffic: |
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: |
Source: | DNS traffic detected: |
Source: | ELF static info symbol of initial sample: | ||
Source: | ELF static info symbol of initial sample: | ||
Source: | ELF static info symbol of initial sample: | ||
Source: | ELF static info symbol of initial sample: |
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: |
Source: | Network traffic detected: |
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: | ||
Source: | Potential command found: |
Source: | .symtab present: |
Source: | Classification label: |
Source: | Rm executable: | Jump to behavior | ||
Source: | Rm executable: | Jump to behavior |
Source: | Symbol name: |
Source: | Queries kernel information via 'uname': | Jump to behavior |
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | 1 Command and Scripting Interpreter | Path Interception | Path Interception | 1 Virtualization/Sandbox Evasion | OS Credential Dumping | 11 Security Software Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | Boot or Logon Initialization Scripts | 1 File Deletion | LSASS Memory | 1 Virtualization/Sandbox Evasion | Remote Desktop Protocol | Data from Removable Media | 1 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | Obfuscated Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 2 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
21% | ReversingLabs | Linux.Trojan.SSHDoor | ||
100% | Avira | LINUX/GM.SSHDoor.GB |
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
daisy.ubuntu.com | 162.213.35.24 | true | false | high |
Name | Source | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|
false | high | |||
false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
185.125.190.26 | unknown | United Kingdom | 41231 | CANONICAL-ASGB | false |
Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
---|---|---|---|---|---|---|
185.125.190.26 | Get hash | malicious | Mirai | Browse | ||
Get hash | malicious | Prometei | Browse | |||
Get hash | malicious | Unknown | Browse | |||
Get hash | malicious | Mirai | Browse | |||
Get hash | malicious | Unknown | Browse | |||
Get hash | malicious | Unknown | Browse | |||
Get hash | malicious | Unknown | Browse | |||
Get hash | malicious | Mirai | Browse | |||
Get hash | malicious | Prometei | Browse | |||
Get hash | malicious | Gafgyt, Mirai | Browse |
Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
---|---|---|---|---|---|---|
daisy.ubuntu.com | Get hash | malicious | Unknown | Browse |
| |
Get hash | malicious | Unknown | Browse |
| ||
Get hash | malicious | Unknown | Browse |
| ||
Get hash | malicious | Mirai | Browse |
| ||
Get hash | malicious | Mirai | Browse |
| ||
Get hash | malicious | Mirai | Browse |
| ||
Get hash | malicious | Mirai | Browse |
| ||
Get hash | malicious | Mirai | Browse |
| ||
Get hash | malicious | Mirai | Browse |
|
Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
---|---|---|---|---|---|---|
CANONICAL-ASGB | Get hash | malicious | Prometei | Browse |
| |
Get hash | malicious | Prometei | Browse |
| ||
Get hash | malicious | Prometei | Browse |
| ||
Get hash | malicious | Prometei | Browse |
| ||
Get hash | malicious | Prometei | Browse |
| ||
Get hash | malicious | Prometei | Browse |
| ||
Get hash | malicious | Unknown | Browse |
| ||
Get hash | malicious | Prometei | Browse |
| ||
Get hash | malicious | Prometei | Browse |
| ||
Get hash | malicious | Unknown | Browse |
|
File type: | |
Entropy (8bit): | 6.236011298679337 |
TrID: |
|
File name: | sshd.elf |
File size: | 1'110'304 bytes |
MD5: | 3930d070675bf708c5c5e5437cf2fbab |
SHA1: | 9476ff56f44f1d4dac38617184564dd398c613b7 |
SHA256: | bf605b8fbcd01f2bbcf19561cba42628a1e0f75964953aff9595837b16b2e0e9 |
SHA512: | f2683bdd70942211b02d3693f42034f2fdc19d20737f74cb49580beab5888608755311799dddec4ec0f0b602beb625fba70c0d0c4cc7c850f90c77e4a81eda1e |
SSDEEP: | 12288:s8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:s8dbbsO38+TfgRinIVvv |
TLSH: | FB356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B982 |
File Content Preview: | .ELF..............(......d..4...p.......4. ...(........p\...\...\.......................4...4...4... ... ...............T...T...T...................................h...h...........................0....m..........................(...(...............p...p.. |
ELF header | |
---|---|
Class: | |
Data: | |
Version: | |
Machine: | |
Version Number: | |
Type: | |
OS/ABI: | |
ABI Version: | 0 |
Entry Point Address: | |
Flags: | |
ELF Header Size: | 52 |
Program Header Offset: | 52 |
Program Header Size: | 32 |
Number of Program Headers: | 9 |
Section Header Offset: | 1109104 |
Section Header Size: | 40 |
Number of Section Headers: | 30 |
Header String Table Index: | 29 |
Name | Type | Address | Offset | Size | EntSize | Flags | Flags Description | Link | Info | Align |
---|---|---|---|---|---|---|---|---|---|---|
NULL | 0x0 | 0x0 | 0x0 | 0x0 | 0x0 | 0 | 0 | 0 | ||
.interp | PROGBITS | 0x10154 | 0x154 | 0x19 | 0x0 | 0x2 | A | 0 | 0 | 1 |
.note.ABI-tag | NOTE | 0x10170 | 0x170 | 0x20 | 0x0 | 0x2 | A | 0 | 0 | 4 |
.hash | HASH | 0x10190 | 0x190 | 0x738 | 0x4 | 0x2 | A | 5 | 0 | 4 |
.gnu.hash | GNU_HASH | 0x108c8 | 0x8c8 | 0x830 | 0x4 | 0x2 | A | 5 | 0 | 4 |
.dynsym | DYNSYM | 0x110f8 | 0x10f8 | 0x1070 | 0x10 | 0x2 | A | 6 | 1 | 4 |
.dynstr | STRTAB | 0x12168 | 0x2168 | 0x90e | 0x0 | 0x2 | A | 0 | 0 | 1 |
.gnu.version | VERSYM | 0x12a76 | 0x2a76 | 0x20e | 0x2 | 0x2 | A | 5 | 0 | 2 |
.gnu.version_r | VERNEED | 0x12c84 | 0x2c84 | 0xe0 | 0x0 | 0x2 | A | 6 | 4 | 4 |
.rel.dyn | REL | 0x12d64 | 0x2d64 | 0x38 | 0x8 | 0x2 | A | 5 | 0 | 4 |
.rel.plt | REL | 0x12d9c | 0x2d9c | 0x768 | 0x8 | 0x42 | AI | 5 | 22 | 4 |
.init | PROGBITS | 0x13504 | 0x3504 | 0xc | 0x0 | 0x6 | AX | 0 | 0 | 4 |
.plt | PROGBITS | 0x13510 | 0x3510 | 0xb30 | 0x4 | 0x6 | AX | 0 | 0 | 4 |
.text | PROGBITS | 0x14040 | 0x4040 | 0xb5594 | 0x0 | 0x6 | AX | 0 | 0 | 8 |
.fini | PROGBITS | 0xc95d4 | 0xb95d4 | 0x8 | 0x0 | 0x6 | AX | 0 | 0 | 4 |
.rodata | PROGBITS | 0xc95e0 | 0xb95e0 | 0x53f7c | 0x0 | 0x2 | A | 0 | 0 | 8 |
.ARM.exidx | ARM_EXIDX | 0x11d55c | 0x10d55c | 0x8 | 0x0 | 0x82 | AL | 13 | 0 | 4 |
.eh_frame | PROGBITS | 0x11d564 | 0x10d564 | 0x4 | 0x0 | 0x2 | A | 0 | 0 | 4 |
.init_array | INIT_ARRAY | 0x12deb4 | 0x10deb4 | 0x4 | 0x4 | 0x3 | WA | 0 | 0 | 4 |
.fini_array | FINI_ARRAY | 0x12deb8 | 0x10deb8 | 0x4 | 0x4 | 0x3 | WA | 0 | 0 | 4 |
.data.rel.ro | PROGBITS | 0x12debc | 0x10debc | 0x1c | 0x0 | 0x3 | WA | 0 | 0 | 4 |
.dynamic | DYNAMIC | 0x12ded8 | 0x10ded8 | 0x128 | 0x8 | 0x3 | WA | 6 | 0 | 4 |
.got | PROGBITS | 0x12e000 | 0x10e000 | 0x3d4 | 0x4 | 0x3 | WA | 0 | 0 | 4 |
.data | PROGBITS | 0x12e3d4 | 0x10e3d4 | 0x610 | 0x0 | 0x3 | WA | 0 | 0 | 4 |
.bss | NOBITS | 0x12e9e8 | 0x10e9e4 | 0x6260 | 0x0 | 0x3 | WA | 0 | 0 | 8 |
.comment | PROGBITS | 0x0 | 0x10e9e4 | 0x55 | 0x1 | 0x30 | MS | 0 | 0 | 1 |
.ARM.attributes | ARM_ATTRIBUTES | 0x0 | 0x10ea39 | 0x35 | 0x0 | 0x0 | 0 | 0 | 1 | |
.miscpath | PROGBITS | 0x0 | 0x10ea6e | 0x0 | 0x0 | 0x0 | 0 | 0 | 1 | |
.dhsec | PROGBITS | 0x0 | 0x10ea6e | 0x100 | 0x0 | 0x0 | 0 | 0 | 1 | |
.shstrtab | STRTAB | 0x0 | 0x10eb6e | 0x100 | 0x0 | 0x0 | 0 | 0 | 1 |
Type | Offset | Virtual Address | Physical Address | File Size | Memory Size | Entropy | Flags | Flags Description | Align | Prog Interpreter | Section Mappings |
---|---|---|---|---|---|---|---|---|---|---|---|
EXIDX | 0x10d55c | 0x11d55c | 0x11d55c | 0x8 | 0x8 | 2.4056 | 0x4 | R | 0x4 | .ARM.exidx | |
PHDR | 0x34 | 0x10034 | 0x10034 | 0x120 | 0x120 | 2.8001 | 0x4 | R | 0x4 | ||
INTERP | 0x154 | 0x10154 | 0x10154 | 0x19 | 0x19 | 4.1337 | 0x4 | R | 0x1 | /lib/ld-linux-armhf.so.3 | .interp |
LOAD | 0x0 | 0x10000 | 0x10000 | 0x10d568 | 0x10d568 | 6.2489 | 0x5 | R E | 0x10000 | .interp .note.ABI-tag .hash .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rel.dyn .rel.plt .init .plt .text .fini .rodata .ARM.exidx .eh_frame | |
LOAD | 0x10deb4 | 0x12deb4 | 0x12deb4 | 0xb30 | 0x6d94 | 3.7317 | 0x6 | RW | 0x10000 | .init_array .fini_array .data.rel.ro .dynamic .got .data .bss | |
DYNAMIC | 0x10ded8 | 0x12ded8 | 0x12ded8 | 0x128 | 0x128 | 2.6816 | 0x6 | RW | 0x4 | .dynamic | |
NOTE | 0x170 | 0x10170 | 0x10170 | 0x20 | 0x20 | 1.5613 | 0x4 | R | 0x4 | .note.ABI-tag | |
GNU_STACK | 0x0 | 0x0 | 0x0 | 0x0 | 0x0 | 0.0000 | 0x6 | RW | 0x10 | ||
GNU_RELRO | 0x10deb4 | 0x12deb4 | 0x12deb4 | 0x14c | 0x14c | 3.0143 | 0x4 | R | 0x1 | .init_array .fini_array .data.rel.ro .dynamic |
Type | Meta | Value | Tag |
---|---|---|---|
DT_NEEDED | sharedlib | librt.so.1 | 0x1 |
DT_NEEDED | sharedlib | libdl.so.2 | 0x1 |
DT_NEEDED | sharedlib | libutil.so.1 | 0x1 |
DT_NEEDED | sharedlib | libcrypt.so.1 | 0x1 |
DT_NEEDED | sharedlib | libresolv.so.2 | 0x1 |
DT_NEEDED | sharedlib | libz.so.1 | 0x1 |
DT_NEEDED | sharedlib | libm.so.6 | 0x1 |
DT_NEEDED | sharedlib | libc.so.6 | 0x1 |
DT_INIT | value | 0x13504 | 0xc |
DT_FINI | value | 0xc95d4 | 0xd |
DT_INIT_ARRAY | value | 0x12deb4 | 0x19 |
DT_INIT_ARRAYSZ | bytes | 4 | 0x1b |
DT_FINI_ARRAY | value | 0x12deb8 | 0x1a |
DT_FINI_ARRAYSZ | bytes | 4 | 0x1c |
DT_HASH | value | 0x10190 | 0x4 |
DT_GNU_HASH | value | 0x108c8 | 0x6ffffef5 |
DT_STRTAB | value | 0x12168 | 0x5 |
DT_SYMTAB | value | 0x110f8 | 0x6 |
DT_STRSZ | bytes | 2318 | 0xa |
DT_SYMENT | bytes | 16 | 0xb |
DT_DEBUG | value | 0x0 | 0x15 |
DT_PLTGOT | value | 0x12e000 | 0x3 |
DT_PLTRELSZ | bytes | 1896 | 0x2 |
DT_PLTREL | pltrel | DT_REL | 0x14 |
DT_JMPREL | value | 0x12d9c | 0x17 |
DT_REL | value | 0x12d64 | 0x11 |
DT_RELSZ | bytes | 56 | 0x12 |
DT_RELENT | bytes | 8 | 0x13 |
DT_VERNEED | value | 0x12c84 | 0x6ffffffe |
DT_VERNEEDNUM | value | 4 | 0x6fffffff |
DT_VERSYM | value | 0x12a76 | 0x6ffffff0 |
DT_NULL | value | 0x0 | 0x0 |
Name | Version Info Name | Version Info File Name | Section Name | Value | Size | Symbol Type | Symbol Bind | Symbol Visibility | Ndx |
---|---|---|---|---|---|---|---|---|---|
.dynsym | 0x0 | 0 | NOTYPE | <unknown> | DEFAULT | SHN_UNDEF | |||
_ITM_deregisterTMCloneTable | .dynsym | 0x0 | 0 | NOTYPE | <unknown> | DEFAULT | SHN_UNDEF | ||
_ITM_registerTMCloneTable | .dynsym | 0x0 | 0 | NOTYPE | <unknown> | DEFAULT | SHN_UNDEF | ||
__assert_fail | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__b64_ntop | .dynsym | 0x655f8 | 284 | FUNC | <unknown> | DEFAULT | 13 | ||
__b64_pton | .dynsym | 0x65714 | 472 | FUNC | <unknown> | DEFAULT | 13 | ||
__ctype_b_loc | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__ctype_tolower_loc | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__environ | GLIBC_2.4 | libc.so.6 | .dynsym | 0x12e9ec | 4 | OBJECT | <unknown> | DEFAULT | 24 |
__errno_location | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__explicit_bzero_chk | GLIBC_2.25 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__fprintf_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__fxstat | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__fxstat64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__gmon_start__ | .dynsym | 0x0 | 0 | NOTYPE | <unknown> | DEFAULT | SHN_UNDEF | ||
__isoc99_sscanf | GLIBC_2.7 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__libc_start_main | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__lxstat64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__memcpy_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__memmove_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__memset_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__poll_chk | GLIBC_2.16 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__printf_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__progname | GLIBC_2.4 | libc.so.6 | .dynsym | 0x12e9e8 | 4 | OBJECT | <unknown> | DEFAULT | 24 |
__read_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__realpath_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__snprintf_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__sprintf_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__strcat_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__strcpy_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__strncpy_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__syslog_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__vasprintf_chk | GLIBC_2.8 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__vsnprintf_chk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
__xstat64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
_exit | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
abort | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
accept | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
access | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
alarm | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
atoi | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
bind | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
calloc | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
cfsetispeed | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
cfsetospeed | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
chdir | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
chmod | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
chown | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
chroot | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
clock_gettime | GLIBC_2.4 | librt.so.1 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
close | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
closedir | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
closelog | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
connect | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
crypt | GLIBC_2.4 | libcrypt.so.1 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
ctime | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
daemon | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
deflate | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF | ||
deflateEnd | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF | ||
deflateInit_ | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF | ||
dirfd | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
dirname | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
dup | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
dup2 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
endgrent | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
endpwent | .dynsym | 0xc7f88 | 40 | FUNC | <unknown> | DEFAULT | 13 | ||
environ | GLIBC_2.4 | libc.so.6 | .dynsym | 0x12e9ec | 4 | OBJECT | <unknown> | DEFAULT | 24 |
error | .dynsym | 0x3f2c4 | 44 | FUNC | <unknown> | DEFAULT | 13 | ||
execl | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
execv | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
execve | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
exit | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fchmod | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fchown | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fclose | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fcntl64 | GLIBC_2.28 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fdopen | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
feof | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
ferror | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fflush | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fgetc | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fgetpwent_r | .dynsym | 0xc79cc | 52 | FUNC | <unknown> | DEFAULT | 13 | ||
fgets | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fileno | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
flock | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fopen | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fopen64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fork | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fprintf | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fputc | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fputs | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fread | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
free | GLIBC_2.4 | libc.so.6 | .dynsym | 0x138e4 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
freeaddrinfo | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fscanf | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fseek | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fstatvfs64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fsync | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
ftell | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
ftruncate64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
futimes | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
fwrite | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
gai_strerror | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getaddrinfo | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getcwd | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getegid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getenv | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
geteuid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getgid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getgrgid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getgrnam | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getgrouplist | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getgroups | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
gethostname | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getnameinfo | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getpeername | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getpgid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getpid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getppid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getpw | .dynsym | 0xc7ee4 | 140 | FUNC | <unknown> | DEFAULT | 13 | ||
getpwent | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getpwent_r | .dynsym | 0xc7fb0 | 144 | FUNC | <unknown> | DEFAULT | 13 | ||
getpwnam | .dynsym | 0xc7e7c | 52 | FUNC | <unknown> | DEFAULT | 13 | ||
getpwnam_r | .dynsym | 0xc7adc | 168 | FUNC | <unknown> | DEFAULT | 13 | ||
getpwuid | .dynsym | 0xc7e14 | 52 | FUNC | <unknown> | DEFAULT | 13 | ||
getpwuid_r | .dynsym | 0xc7cd4 | 160 | FUNC | <unknown> | DEFAULT | 13 | ||
getsid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getsockname | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getsockopt | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getspnam | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
gettimeofday | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
getuid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
inet_ntoa | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
inet_ntop | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
inflate | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF | ||
inflateEnd | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF | ||
inflateInit_ | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF | ||
initgroups | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
innetgr | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
ioctl | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
isspace | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
kill | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
link | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
listen | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
localtime | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
localtime_r | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
login | GLIBC_2.4 | libutil.so.1 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
logout | GLIBC_2.4 | libutil.so.1 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
logwtmp | GLIBC_2.4 | libutil.so.1 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
lseek64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
malloc | GLIBC_2.4 | libc.so.6 | .dynsym | 0x13c44 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
memchr | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
memcmp | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
memcpy | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
memmove | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
memset | GLIBC_2.4 | libc.so.6 | .dynsym | 0x13800 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
mkdir | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
mkdtemp | .dynsym | 0x66ea0 | 36 | FUNC | <unknown> | DEFAULT | 13 | ||
mkstemp64 | .dynsym | 0x66e8c | 12 | FUNC | <unknown> | DEFAULT | 13 | ||
mkstemps64 | .dynsym | 0x66e98 | 8 | FUNC | <unknown> | DEFAULT | 13 | ||
open | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
open64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
opendir | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
openlog | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
openpty | GLIBC_2.4 | libutil.so.1 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
pclose | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
perror | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
pipe | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
poll | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
popen | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
prctl | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
printf | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
putchar | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
putpwent | .dynsym | 0xc8310 | 112 | FUNC | <unknown> | DEFAULT | 13 | ||
puts | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
qsort | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
raise | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
rand | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
read | GLIBC_2.4 | libc.so.6 | .dynsym | 0x138fc | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
readdir64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
readlink | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
reallocarray | GLIBC_2.26 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
recvmsg | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
remove | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
rename | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
rewind | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
rmdir | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
select | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
sendmsg | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
setegid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
setenv | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
seteuid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
setgid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
setgroups | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
setlogin | .dynsym | 0x653d8 | 8 | FUNC | <unknown> | DEFAULT | 13 | ||
setpwent | .dynsym | 0xc7f70 | 24 | FUNC | <unknown> | DEFAULT | 13 | ||
setresgid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
setresuid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
setrlimit64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
setsid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
setsockopt | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
setuid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
shutdown | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
sigaction | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
sigaddset | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
sigemptyset | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
signal | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
sigprocmask | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
snprintf | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
socket | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
socketpair | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
sprintf | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
srand | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
sscanf | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
statvfs64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
stderr | GLIBC_2.4 | libc.so.6 | .dynsym | 0x12e9f8 | 4 | OBJECT | <unknown> | DEFAULT | 24 |
stdin | GLIBC_2.4 | libc.so.6 | .dynsym | 0x12e9f0 | 4 | OBJECT | <unknown> | DEFAULT | 24 |
stdout | GLIBC_2.4 | libc.so.6 | .dynsym | 0x12e9f4 | 4 | OBJECT | <unknown> | DEFAULT | 24 |
strcasecmp | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strchr | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strcmp | GLIBC_2.4 | libc.so.6 | .dynsym | 0x13fbc | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strcpy | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strcspn | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strdup | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strerror | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strftime | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strlen | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strncasecmp | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strncmp | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strncpy | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strpbrk | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strrchr | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strsep | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strspn | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strstr | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strtod | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strtok | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strtok_r | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strtol | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strtoll | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
strtoul | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
symlink | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
syscall | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
sysconf | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
sysinfo | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
system | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
tcgetattr | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
tcsendbreak | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
tcsetattr | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
time | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
truncate64 | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
ttyname | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
umask | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
uncompress | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF | ||
unlink | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
unsetenv | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
usleep | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
utimes | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
vfprintf | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
vsnprintf | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
waitpid | GLIBC_2.4 | libc.so.6 | .dynsym | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
write | GLIBC_2.4 | libc.so.6 | .dynsym | 0x13908 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
zealloc | GLIBC_2.4 | libc.so.6 | .dynsym | 0x13ed8 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF |
Download Network PCAP: filtered – full
- Total Packets: 4
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Mar 7, 2025 06:43:05.519980907 CET | 46540 | 443 | 192.168.2.14 | 185.125.190.26 |
Mar 7, 2025 06:43:36.751266003 CET | 46540 | 443 | 192.168.2.14 | 185.125.190.26 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Mar 7, 2025 06:45:41.273905039 CET | 54073 | 53 | 192.168.2.14 | 8.8.8.8 |
Mar 7, 2025 06:45:41.273993969 CET | 36619 | 53 | 192.168.2.14 | 8.8.8.8 |
Mar 7, 2025 06:45:41.281878948 CET | 53 | 54073 | 8.8.8.8 | 192.168.2.14 |
Mar 7, 2025 06:45:41.281977892 CET | 53 | 36619 | 8.8.8.8 | 192.168.2.14 |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Mar 7, 2025 06:45:41.273905039 CET | 192.168.2.14 | 8.8.8.8 | 0x9076 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Mar 7, 2025 06:45:41.273993969 CET | 192.168.2.14 | 8.8.8.8 | 0xe976 | Standard query (0) | 28 | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Mar 7, 2025 06:45:41.281878948 CET | 8.8.8.8 | 192.168.2.14 | 0x9076 | No error (0) | 162.213.35.24 | A (IP address) | IN (0x0001) | false | ||
Mar 7, 2025 06:45:41.281878948 CET | 8.8.8.8 | 192.168.2.14 | 0x9076 | No error (0) | 162.213.35.25 | A (IP address) | IN (0x0001) | false |
System Behavior
Start time (UTC): | 05:42:47 |
Start date (UTC): | 07/03/2025 |
Path: | /usr/bin/dash |
Arguments: | - |
File size: | 129816 bytes |
MD5 hash: | 1e6b1c887c59a315edb7eb9a315fc84c |
Start time (UTC): | 05:42:47 |
Start date (UTC): | 07/03/2025 |
Path: | /usr/bin/rm |
Arguments: | rm -f /tmp/tmp.8ckqpK6FCm /tmp/tmp.iOXsQQVGL6 /tmp/tmp.nsM0UzwaOb |
File size: | 72056 bytes |
MD5 hash: | aa2b5496fdbfd88e38791ab81f90b95b |
Start time (UTC): | 05:42:48 |
Start date (UTC): | 07/03/2025 |
Path: | /usr/bin/dash |
Arguments: | - |
File size: | 129816 bytes |
MD5 hash: | 1e6b1c887c59a315edb7eb9a315fc84c |
Start time (UTC): | 05:42:48 |
Start date (UTC): | 07/03/2025 |
Path: | /usr/bin/rm |
Arguments: | rm -f /tmp/tmp.8ckqpK6FCm /tmp/tmp.iOXsQQVGL6 /tmp/tmp.nsM0UzwaOb |
File size: | 72056 bytes |
MD5 hash: | aa2b5496fdbfd88e38791ab81f90b95b |
Start time (UTC): | 05:42:56 |
Start date (UTC): | 07/03/2025 |
Path: | /tmp/sshd.elf |
Arguments: | /tmp/sshd.elf |
File size: | 4956856 bytes |
MD5 hash: | 5ebfcae4fe2471fcc5695c2394773ff1 |