Play interactive tour

Edit tour

Linux Analysis Report 8c04DrlaKW

Overview

General Information

Sample Name:	8c04DrlaKW
Analysis ID:	529886
MD5:	1357047ade31a3bb812aa63c2cc3cecc
SHA1:	88e2ee75ef854d109476942aa227d27000baa414
SHA256:	c1d7e35779f616a3501ef54cf63a0f63c36865548499be224e87170640c2fed3
Tags:	32armelfgafgyt
Infos:
Most interesting Screenshot:

Detection

Gafgyt Mirai

Score:	80
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected Mirai

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Detected TCP or UDP traffic on non-standard ports

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures

All HTTP servers contacted by the sample do not answer. Likely the sample is an old dropper which does no longer work

Static ELF header machine description suggests that the sample might not execute correctly on this machine

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	529886
Start date:	28.11.2021
Start time:	15:37:54
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	8c04DrlaKW
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Detection:	MAL
Classification:	mal80.spre.troj.lin@0/0@0/0

Process Tree

system is lnxubuntu20

8c04DrlaKW (PID: 5439, Parent: 5359, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/8c04DrlaKW

8c04DrlaKW New Fork (PID: 5441, Parent: 5439)

8c04DrlaKW New Fork (PID: 5443, Parent: 5441)

cleanup

Yara Overview

Initial Sample

Source	Rule	Description	Author	Strings
8c04DrlaKW	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
8c04DrlaKW	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Memory Dumps

Source	Rule	Description	Author
5441.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5441.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5439.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5439.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus / Scanner detection for submitted sample

Show sources

Source: 8c04DrlaKW

Avira: detected

Multi AV Scanner detection for submitted file

Show sources

Source: 8c04DrlaKW	Virustotal: Detection: 57%	Perma Link
Source: 8c04DrlaKW	Metadefender: Detection: 48%	Perma Link
Source: 8c04DrlaKW	ReversingLabs: Detection: 60%

Spreading:

Opens /proc/net/* files useful for finding connected devices and routers

Show sources

Source: /tmp/8c04DrlaKW (PID: 5439)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443

Source: global traffic

TCP traffic: 192.168.2.23:35644 -> 45.95.169.133:717

Source: unknown

Network traffic detected: HTTP traffic on port 42836 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133

Source: 8c04DrlaKW	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: 8c04DrlaKW	String found in binary or memory: http://feedback.redkolibri.com/
Source: 8c04DrlaKW	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: 8c04DrlaKW	String found in binary or memory: http://www.billybobbot.com/crawler/)

System Summary:

Contains symbols with names commonly found in malware

Show sources

Source: ELF static info symbol of initial sample

Name: vseattack

Source: classification engine

Classification label: mal80.spre.troj.lin@0/0@0/0

Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/_memcpy.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/bcopy.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/memcpy.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/memmove.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/memset.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/strcmp.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/strlen.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/arm/crt1.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/arm/crti.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/arm/crtn.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/arm/sigrestorer.S

Source: /tmp/8c04DrlaKW (PID: 5439)

Queries kernel information via 'uname':

Jump to behavior

Source: 8c04DrlaKW, 5439.1.000000000df874a6.000000000e88dbbd.rw-.sdmp, 8c04DrlaKW, 5441.1.000000000df874a6.000000000e88dbbd.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: 8c04DrlaKW, 5439.1.000000000df874a6.000000000e88dbbd.rw-.sdmp, 8c04DrlaKW, 5441.1.000000000df874a6.000000000e88dbbd.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: 8c04DrlaKW, 5439.1.00000000d10ee9b5.00000000170e4c8e.rw-.sdmp, 8c04DrlaKW, 5441.1.00000000d10ee9b5.00000000170e4c8e.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: 8c04DrlaKW, 5439.1.00000000d10ee9b5.00000000170e4c8e.rw-.sdmp, 8c04DrlaKW, 5441.1.00000000d10ee9b5.00000000170e4c8e.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/8c04DrlaKWSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/8c04DrlaKW

Stealing of Sensitive Information:

Yara detected Mirai

Show sources

Source: Yara match	File source: 8c04DrlaKW, type: SAMPLE
Source: Yara match	File source: 5441.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5439.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp, type: MEMORY

Yara detected Gafgyt

Show sources

Source: Yara match	File source: 8c04DrlaKW, type: SAMPLE
Source: Yara match	File source: 5441.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5439.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp, type: MEMORY

Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; de) Opera 11.01
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Source: Initial sample	User agent string found: Mozilla/5.0 (iPhone; CPU iPhone OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.3; HTC_0PCV2 Build/KTU84L) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; X11; Linux x86_64; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Firefox/24.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality:

Yara detected Mirai

Show sources

Source: Yara match	File source: 8c04DrlaKW, type: SAMPLE
Source: Yara match	File source: 5441.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5439.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp, type: MEMORY

Yara detected Gafgyt

Show sources

Source: Yara match	File source: 8c04DrlaKW, type: SAMPLE
Source: Yara match	File source: 5441.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5439.1.000000002797acd2.00000000dc1aaaf1.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	Security Software Discovery11	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Data Obfuscation1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Remote System Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Encrypted Channel1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Standard Port1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol1	SIM Card Swap		Carrier Billing Fraud

Malware Configuration

No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
8c04DrlaKW	58%	Virustotal		Browse
8c04DrlaKW	49%	Metadefender		Browse
8c04DrlaKW	60%	ReversingLabs	Linux.Trojan.LnxGafgyt
8c04DrlaKW	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.billybobbot.com/crawler/)	0%	URL Reputation	safe
http://fast.no/support/crawler.asp)	0%	URL Reputation	safe
http://feedback.redkolibri.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.billybobbot.com/crawler/)	8c04DrlaKW	false	URL Reputation: safe	unknown
http://fast.no/support/crawler.asp)	8c04DrlaKW	false	URL Reputation: safe	unknown
http://feedback.redkolibri.com/	8c04DrlaKW	false	URL Reputation: safe	unknown
http://www.baidu.com/search/spider.htm)	8c04DrlaKW	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
45.95.169.133	unknown	Croatia (LOCAL Name: Hrvatska)		42864	GIGANET-HUGigaNetInternetServiceProviderCoHU	false
91.189.91.43	unknown	United Kingdom		41231	CANONICAL-ASGB	false

Runtime Messages

Command:	/tmp/8c04DrlaKW
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
45.95.169.133	p83YE1DOnx	Get hash	malicious	Browse
	wofmOxWHfG	Get hash	malicious	Browse
	4Ii4J4DIxt	Get hash	malicious	Browse
	dPNmxIxa36	Get hash	malicious	Browse
	AAVv6nd497	Get hash	malicious	Browse
	e9BE1FK860	Get hash	malicious	Browse
	Gd18OVeWM9	Get hash	malicious	Browse
91.189.91.43	p83YE1DOnx	Get hash	malicious	Browse
	wofmOxWHfG	Get hash	malicious	Browse
	4Ii4J4DIxt	Get hash	malicious	Browse
	pQV3T0fVIo	Get hash	malicious	Browse
	EsuHzv9n8N	Get hash	malicious	Browse
	dPNmxIxa36	Get hash	malicious	Browse
	AAVv6nd497	Get hash	malicious	Browse
	e9BE1FK860	Get hash	malicious	Browse
	wriRgGnavY	Get hash	malicious	Browse
	Hs7hqIukmH	Get hash	malicious	Browse
	Gd18OVeWM9	Get hash	malicious	Browse
	v8qiTISjUU	Get hash	malicious	Browse
	Bu8Mj7TcLL	Get hash	malicious	Browse
	SPWv1xQJN2	Get hash	malicious	Browse
	C7FpC2RDAj	Get hash	malicious	Browse
	ptDMShZLZh	Get hash	malicious	Browse
	NH4nR1N8wk	Get hash	malicious	Browse
	p5DTKpaxTE	Get hash	malicious	Browse
	Vc90gP8W1b	Get hash	malicious	Browse
	9l4aoLWfPs	Get hash	malicious	Browse

Domains

No context

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CANONICAL-ASGB	p83YE1DOnx	Get hash	malicious	Browse	91.189.91.42
	wofmOxWHfG	Get hash	malicious	Browse	91.189.91.42
	4Ii4J4DIxt	Get hash	malicious	Browse	91.189.91.42
	pQV3T0fVIo	Get hash	malicious	Browse	91.189.91.42
	EsuHzv9n8N	Get hash	malicious	Browse	91.189.91.42
	dPNmxIxa36	Get hash	malicious	Browse	91.189.91.42
	AAVv6nd497	Get hash	malicious	Browse	91.189.91.42
	e9BE1FK860	Get hash	malicious	Browse	91.189.91.42
	wriRgGnavY	Get hash	malicious	Browse	91.189.91.42
	Hs7hqIukmH	Get hash	malicious	Browse	91.189.91.42
	Gd18OVeWM9	Get hash	malicious	Browse	91.189.91.42
	v8qiTISjUU	Get hash	malicious	Browse	91.189.91.42
	Bu8Mj7TcLL	Get hash	malicious	Browse	91.189.91.42
	SPWv1xQJN2	Get hash	malicious	Browse	91.189.91.42
	C7FpC2RDAj	Get hash	malicious	Browse	91.189.91.42
	ptDMShZLZh	Get hash	malicious	Browse	91.189.91.42
	NH4nR1N8wk	Get hash	malicious	Browse	91.189.91.42
	p5DTKpaxTE	Get hash	malicious	Browse	91.189.91.42
	Vc90gP8W1b	Get hash	malicious	Browse	91.189.91.42
	9l4aoLWfPs	Get hash	malicious	Browse	91.189.91.42
GIGANET-HUGigaNetInternetServiceProviderCoHU	p83YE1DOnx	Get hash	malicious	Browse	45.95.169.133
	wofmOxWHfG	Get hash	malicious	Browse	45.95.169.133
	4Ii4J4DIxt	Get hash	malicious	Browse	45.95.169.133
	dPNmxIxa36	Get hash	malicious	Browse	45.95.169.133
	AAVv6nd497	Get hash	malicious	Browse	45.95.169.133
	e9BE1FK860	Get hash	malicious	Browse	45.95.169.133
	Gd18OVeWM9	Get hash	malicious	Browse	45.95.169.133
	P2MNIRJ4gJ	Get hash	malicious	Browse	45.95.169.115
	sE1xgTiVhl	Get hash	malicious	Browse	45.95.169.115
	IVpX0wAyep	Get hash	malicious	Browse	45.95.169.115
	jmDafm8And	Get hash	malicious	Browse	45.95.169.115
	6Pw7ywG1Rx	Get hash	malicious	Browse	45.95.169.115
	U8HSORd9Sz	Get hash	malicious	Browse	45.95.169.115
	xz9rffd17J	Get hash	malicious	Browse	45.95.169.115
	K3j3e3MgZW	Get hash	malicious	Browse	45.95.169.115
	Eu5R5GFRQv	Get hash	malicious	Browse	45.95.169.115
	NvwKITeL1Y	Get hash	malicious	Browse	45.95.169.115
	89qfrZ4qCR	Get hash	malicious	Browse	45.95.169.115
	Lmgm44M8oX	Get hash	malicious	Browse	45.95.169.115
	57KgFrJHk5	Get hash	malicious	Browse	45.95.169.115

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

No created / dropped files found

Static File Info

General
File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
Entropy (8bit):	6.147734471032472
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	8c04DrlaKW
File size:	118931
MD5:	1357047ade31a3bb812aa63c2cc3cecc
SHA1:	88e2ee75ef854d109476942aa227d27000baa414
SHA256:	c1d7e35779f616a3501ef54cf63a0f63c36865548499be224e87170640c2fed3
SHA512:	8fd0ddc93d03a3bfee1e06174bdcdcbe6ace4b7191be3fa2b73493fcc572e5414bec52b43e462d6e1a2bbbe9267f9d60e77445f0d6e2fcf7a8e0fe21a8969eb5
SSDEEP:	3072:posaWhJgdWSCQ4ToFhSWT6iGToPTbTmVZqQ7Dk4EqXj5e:JJrgdWNvToFhhT6itTmVZqQ7DXEqXj5e
File Content Preview:	.ELF...a..........(.........4....k......4. ...(......................S...S...............S...S...S.......g..........Q.td..................................-...L."....=..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x2
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	92944
Section Header Size:	40
Number of Section Headers:	20
Header String Table Index:	17

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80b0	0xb0	0xf77c	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1782c	0xf82c	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x17840	0xf840	0x5b5c	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x1d39c	0x1539c	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x253a0	0x153a0	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x253a8	0x153a8	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x253b0	0x153b0	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x253b4	0x153b4	0x478	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x2582c	0x1582c	0x6358	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x1582c	0xaa2	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x162d0	0xa0	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x16370	0x30c	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1667c	0x64	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x166e0	0x2e7	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x169c8	0xa0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x16a68	0xa8	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x16e30	0x4080	0x10	0x0		19	586	4
.strtab	STRTAB	0x0	0x1aeb0	0x21e3	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x153a0	0x153a0	3.9798	0x5	R E	0x8000	.init .text .fini .rodata .eh_frame
LOAD	0x153a0	0x253a0	0x253a0	0x48c	0x67e4	2.1032	0x6	RW	0x8000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1782c	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x17840	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1d39c	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x253a0	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x253a8	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x253b0	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x253b4	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2582c	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
$a	.symtab	0x8094	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1782c	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17838	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x177f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17824	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x80a8	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1783c	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x83d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x87f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x94ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x95d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x99ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa9ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xab24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb220	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb3cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb6bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb820	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbb28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbcbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc538	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd4d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd4ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe550	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf3a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfba8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfcb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfd84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfebc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1002c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10054	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x100ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x100fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1021c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10248	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1027c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10294	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10308	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x103b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10428	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x104f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10520	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10be4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10cb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11360	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11394	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11440	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11450	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11460	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11500	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11520	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11688	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x116a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11784	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1187c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11890	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11978	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ffc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1202c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12110	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1217c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x122d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x123c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12454	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1257c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12744	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x127d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12868	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x128e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ff8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13064	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13104	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13350	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13434	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1343c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13468	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13518	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1359c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x135f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1361c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13628	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13678	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13754	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13810	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13948	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13abc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13af0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14060	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x142b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14740	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14750	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1484c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14864	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14950	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14abc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ba8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x153b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15688	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1570c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15748	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15774	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1590c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ec4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16004	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x161e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16280	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16338	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16450	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16480	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1675c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x168c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16cc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17168	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x171cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17200	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17330	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17454	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17520	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1756c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x175c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x175f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x176b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x253a0	0	NOTYPE	<unknown>	DEFAULT	6
$d	.symtab	0x253a8	0	NOTYPE	<unknown>	DEFAULT	7
$d	.symtab	0x253bc	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8174	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17820	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x253c0	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x253c4	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x87e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x94e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x95d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x99e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa9d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xab20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb21c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a8e0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xb3c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb6b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb81c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb980	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbb24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbcb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc374	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc534	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcdd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd314	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd4c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd4e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe4fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf398	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfb8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10190	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10290	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x102c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x254c8	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x254d0	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x102d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10424	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x104e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x254d8	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1c344	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10bd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10e4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10e90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1133c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11680	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1177c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11970	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11980	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11b08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11b6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11ecc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1210c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x122b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25614	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x123a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x126b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2571c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1272c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x127b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12850	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x128cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25734	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x129a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12af4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12bc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cf70	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12d70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12dec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x257e8	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x12fa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ff4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13054	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1331c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25800	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1342c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13598	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2ba90	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x13624	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14028	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cfb8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x14844	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14948	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ba4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15380	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15648	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25808	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x15704	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15744	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x158d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15dd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15eb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15fdc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x161c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16330	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16758	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x168bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16b18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16e34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17164	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x171fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25820	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1732c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x173a8	0	NOTYPE	<unknown>	DEFAULT	2
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.139.5305	.symtab	0x1a8e0	36	OBJECT	<unknown>	DEFAULT	4
C.146.5372	.symtab	0x1ab64	104	OBJECT	<unknown>	DEFAULT	4
C.194.5709	.symtab	0x1b014	24	OBJECT	<unknown>	DEFAULT	4
C.199.5749	.symtab	0x1b774	1128	OBJECT	<unknown>	DEFAULT	4
Hrandstrings	.symtab	0x253d0	8	OBJECT	<unknown>	DEFAULT	9
Laligned	.symtab	0x11548	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x11564	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x2585c	16384	OBJECT	<unknown>	DEFAULT	10
Randhex	.symtab	0xc378	448	FUNC	<unknown>	DEFAULT	2
SHEX	.symtab	0xb220	428	FUNC	<unknown>	DEFAULT	2
SNFO	.symtab	0xc1d4	420	FUNC	<unknown>	DEFAULT	2
SendHTTPHex	.symtab	0xd170	432	FUNC	<unknown>	DEFAULT	2
SendSTD	.symtab	0xb518	420	FUNC	<unknown>	DEFAULT	2
UDPRAW	.symtab	0xb820	356	FUNC	<unknown>	DEFAULT	2
Zrandstrings	.symtab	0x253c4	12	OBJECT	<unknown>	DEFAULT	9
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x253a4	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x253a0	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x254c8	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1bd44	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x25820	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x1d09c	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x254d0	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1c044	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x253ac	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x253a8	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x1d39c	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x1d39c	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x254c8	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x1bd44	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x25820	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x1d09c	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x254d0	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x1c044	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x254cc	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x25824	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x254d4	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x102c8	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x17200	304	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x1187c	20	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x1361c	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xfebc	116	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0xff30	80	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x10128	92	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x12ff8	108	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x130a8	92	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x11890	232	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xff80	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1257c	328	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x12bc8	12	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x12bc8	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1570c	60	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xffa8	44	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0xffd4	44	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x11ee8	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x2ba90	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x12d74	148	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x15774	384	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xfebc	116	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0xff30	80	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x16004	484	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x17200	304	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x15e30	148	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x161e8	152	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x158f4	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x10000	44	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x11360	52	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x15900	12	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1590c	304	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x11394	172	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x17200	304	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1002c	40	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x13468	44	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x13494	44	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x134c0	44	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x11b30	68	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x11b74	884	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x10054	44	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x10080	44	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x11f14	44	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x134ec	44	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x2ba94	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x11b0c	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x14abc	236	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x11b00	12	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x11a80	128	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x168c0	608	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x1654c	528	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x12b00	200	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x100ac	80	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x11984	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x100fc	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x17168	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x14750	252	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x11450	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x14740	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1484c	24	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x14864	236	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x11460	156	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x13518	44	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x10128	92	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x15748	44	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x156d0	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x126c8	124	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x129a4	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x16280	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x10194	44	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x11f70	44	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x13544	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x101c0	48	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x11f9c	44	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x11fc8	52	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x101f0	44	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x11ffc	48	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x128e4	192	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x13350	228	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x12058	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1359c	84	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x12e08	420	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x1202c	44	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x102d4	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x12a34	204	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x17330	124	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x11580	264	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x11500	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x11500	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x11688	28	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x16450	48	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x11520	96	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x16338	200	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x14950	184	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x116a4	224	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x14a7c	64	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x16400	80	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x11784	248	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x11978	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x14a08	116	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x12bd4	8	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x119a4	108	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x1021c	44	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x171cc	52	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x10294	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x10308	176	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x135f0	44	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x10248	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x13628	80	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x13698	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x13678	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x10250	44	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x253b0	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x253b0	0	OBJECT	<unknown>	DEFAULT	8
__aeabi_idiv	.symtab	0x176b0	0	FUNC	<unknown>	DEFAULT	2
__aeabi_idiv0	.symtab	0xfe68	4	FUNC	<unknown>	DEFAULT	2
__aeabi_idivmod	.symtab	0x177d8	24	FUNC	<unknown>	DEFAULT	2
__aeabi_ldiv0	.symtab	0xfe68	4	FUNC	<unknown>	DEFAULT	2
__aeabi_uidiv	.symtab	0xfba8	0	FUNC	<unknown>	DEFAULT	2
__aeabi_uidivmod	.symtab	0xfca0	24	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x2ba84	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x257e8	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x12058	184	FUNC	<unknown>	HIDDEN	2
__bss_end__	.symtab	0x2bb84	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x2582c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x2582c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x13070	56	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x254cc	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x25824	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x254d4	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x2bab4	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x253b4	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x16d30	220	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x17454	204	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x16c08	184	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x13438	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x13434	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xfe68	4	FUNC	<unknown>	DEFAULT	2
__divsi3	.symtab	0x176b0	296	FUNC	<unknown>	DEFAULT	2
__dns_lookup	.symtab	0x14ba8	2060	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x177f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x253b8	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x173ac	168	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x16b20	232	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x16cc0	92	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x2bb84	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2ba7c	4	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x102c8	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2ba74	4	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x17200	304	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x253a0	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x253a0	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x15688	72	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x1187c	20	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x1361c	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x123c0	148	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x12488	244	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x12454	32	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x12474	20	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x253a0	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x253a0	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x17520	76	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x16d1c	20	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0xffd4	44	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x11ee8	44	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x10184	16	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0xfebc	116	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0xff30	80	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x10000	44	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x10054	44	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x17168	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x13518	44	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x10128	92	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x15748	44	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x10194	44	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x11f70	44	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x101c0	48	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x11f9c	44	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x11fc8	52	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x13350	228	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2ba78	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x10248	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x10250	44	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x25614	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x2ba58	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x2bb40	24	OBJECT	<unknown>	DEFAULT	10
__modsi3	.symtab	0xfd84	228	FUNC	<unknown>	DEFAULT	2
__muldi3	.symtab	0xfe6c	80	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x2bb68	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x2bb74	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x16e0c	52	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x153b4	724	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x2ba80	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x253a0	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x253a0	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x13064	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x13064	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x13064	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x13064	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x13064	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x1306c	4	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x156d0	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x16e40	808	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x25808	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x2ba88	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x2bb58	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x2bb78	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x12134	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x12158	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x12110	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x254e4	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x1756c	92	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x13754	188	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x15a3c	204	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x13810	312	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x10428	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3929	.symtab	0x1c344	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x175c8	44	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x15e00	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x175f4	188	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x13948	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x104f0	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x254e8	4	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x1343c	44	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x12ff8	108	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x130a8	92	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x13104	588	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x25800	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3	.symtab	0xfba8	248	FUNC	<unknown>	DEFAULT	2
__umodsi3	.symtab	0xfcb8	204	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x11890	232	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_end__	.symtab	0x2bb84	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x10520	76	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x156e8	36	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x2bb7c	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x2bb80	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x2582c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2bb84	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x2ba90	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0xff80	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1782c	4	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x29864	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x1056c	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x13c40	1640	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x2ba94	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x8094	4	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x13a4c	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x142b0	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x10be4	152	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x10e9c	1220	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x10c7c	56	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x10cb4	412	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x10e50	76	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1306c	4	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x1306c	4	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2bac0	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x8190	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x15b08	760	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x103b8	112	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x254ec	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x254f0	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x15ec4	320	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x29860	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x25508	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x2985c	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x25524	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x10438	184	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x25520	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x12bdc	408	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x13abc	52	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1c414	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x13af0	336	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x105f0	1524	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1257c	328	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atcp	.symtab	0xa37c	1648	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x12bc8	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x12bc8	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x9d68	1556	FUNC	<unknown>	DEFAULT	2
audprand3	.symtab	0xb984	420	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0x11440	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x2ba70	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2789	.symtab	0x2ba8c	4	OBJECT	<unknown>	DEFAULT	10
brk	.symtab	0x1570c	60	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x12058	184	FUNC	<unknown>	DEFAULT	2
buf.2613	.symtab	0x2b868	16	OBJECT	<unknown>	DEFAULT	10
buf.4901	.symtab	0x2b878	460	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x254c0	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x17824	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x8128	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x8188	0	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0xffa8	44	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
client.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0xffd4	44	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x253d8	4	OBJECT	<unknown>	DEFAULT	9
completed.2555	.symtab	0x2582c	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x11ee8	44	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x95d4	640	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x10184	16	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x99ec	344	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x254bc	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x253c0	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns	.symtab	0x253dc	4	OBJECT	<unknown>	DEFAULT	9
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x2ba7c	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x2ba90	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x12d74	148	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x1cfb8	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x15774	384	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xfebc	116	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0xff30	80	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x8438	208	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x16004	484	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x17200	304	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x15e30	148	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x161e8	152	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
findRandIP	.symtab	0x9574	96	FUNC	<unknown>	DEFAULT	2
fmt	.symtab	0x1cfa4	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x158f4	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
force_to_data	.symtab	0x253b4	0	OBJECT	<unknown>	DEFAULT	9
force_to_data	.symtab	0x25828	0	OBJECT	<unknown>	DEFAULT	9
fork	.symtab	0x10000	44	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x11360	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x122d0	240	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x15900	12	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x15900	12	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x1590c	304	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x11394	172	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0xd4d0	28	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x91b4	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8508	748	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x83d8	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x17200	304	FUNC	<unknown>	DEFAULT	2
getdtablesize	.symtab	0x1002c	40	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x13468	44	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x13494	44	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x134c0	44	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x11b30	68	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x11b74	884	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x10054	44	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x10080	44	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x11f14	44	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x11f40	48	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x134ec	44	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h.4900	.symtab	0x2ba44	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x2ba94	4	OBJECT	<unknown>	DEFAULT	10
hazard1	.symtab	0xbb28	404	FUNC	<unknown>	DEFAULT	2
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0x11a48	36	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x11a6c	20	FUNC	<unknown>	DEFAULT	2
i.4125	.symtab	0x254c4	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x11580	264	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x11b0c	36	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x14abc	236	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x11b00	12	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x11a80	128	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x168c0	608	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x1675c	356	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x1654c	528	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x16480	204	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xf218	396	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81cc	212	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x25618	260	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x127d0	152	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x12b00	200	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x100ac	80	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x11984	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x1027c	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x100fc	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bcopy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memmove.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x9854	408	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x17168	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x25854	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0xf3a4	2052	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x25848	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0x9c54	276	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x94ec	136	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0xa9ec	312	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x1217c	340	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x14750	252	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x11450	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x14740	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x1484c	24	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x14864	236	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x11460	156	FUNC	<unknown>	DEFAULT	2
mylock	.symtab	0x2571c	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x25734	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x2ba98	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x13518	44	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1066	.symtab	0x2b864	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0x11a10	36	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x11a34	20	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x2584c	8	OBJECT	<unknown>	DEFAULT	10
object.2636	.symtab	0x25830	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x10128	92	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x2bab8	4	OBJECT	<unknown>	DEFAULT	10
ovhl7	.symtab	0xc538	3128	FUNC	<unknown>	DEFAULT	2
p.2553	.symtab	0x253bc	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x2babc	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x15748	44	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4141	.symtab	0x1c36c	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x8cfc	1008	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x8924	108	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8b14	488	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8990	388	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0xd4ec	7468	FUNC	<unknown>	DEFAULT	2
qual_chars.4147	.symtab	0x1c380	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x156d0	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x126c4	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x82a0	312	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x126c8	124	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x1cf70	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x129a4	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x25768	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x16280	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x10194	44	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x11f70	44	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x9218	724	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x13544	88	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x101c0	48	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x11f9c	44	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendHTTPtwo	.symtab	0xd320	432	FUNC	<unknown>	DEFAULT	2
sendJUNK	.symtab	0xbcbc	1304	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x11fc8	52	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x101f0	44	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x11ffc	48	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x12744	140	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x128e4	192	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x13350	228	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x12058	184	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x1359c	84	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x12e08	420	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x1202c	44	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0xb3cc	332	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x90ec	200	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4146	.symtab	0x1c394	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4140	.symtab	0x1c378	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4143	.symtab	0x1c3c0	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4142	.symtab	0x1c3d8	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4145	.symtab	0x1c3a4	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4144	.symtab	0x1c3b4	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x102d4	52	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x12868	124	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x12868	124	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x12a34	204	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x25804	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x2bab0	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x254e0	4	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x254d8	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x254dc	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x17330	124	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x11580	264	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x11500	28	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x11500	28	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x11688	28	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x16450	48	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x11890	232	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x11520	96	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x16338	200	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x14950	184	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x116a4	224	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x14a7c	64	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x16400	80	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x11784	248	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x11978	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x14a08	116	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x12bd4	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x119a4	108	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x9b44	272	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x1021c	44	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x171cc	52	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x10294	52	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x87f4	304	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x1c3e0	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x1c3f8	12	OBJECT	<unknown>	DEFAULT	4
unknown.1088	.symtab	0x1c404	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x2574c	28	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x253e0	220	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x12fac	76	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0xab24	1788	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x10308	176	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x135f0	44	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x10248	8	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x13628	80	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 28, 2021 15:39:51.123287916 CET	35644	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:39:51.161051035 CET	717	35644	45.95.169.133	192.168.2.23
Nov 28, 2021 15:39:51.161241055 CET	35644	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:39:51.164644003 CET	35644	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:39:51.202387094 CET	717	35644	45.95.169.133	192.168.2.23
Nov 28, 2021 15:39:55.327308893 CET	42836	443	192.168.2.23	91.189.91.43
Nov 28, 2021 15:40:45.948687077 CET	717	35644	45.95.169.133	192.168.2.23
Nov 28, 2021 15:40:45.949301004 CET	35644	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:40:45.987098932 CET	717	35644	45.95.169.133	192.168.2.23
Nov 28, 2021 15:40:45.987315893 CET	35644	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:41:45.956888914 CET	717	35644	45.95.169.133	192.168.2.23
Nov 28, 2021 15:41:45.957343102 CET	35644	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:41:45.994992971 CET	717	35644	45.95.169.133	192.168.2.23
Nov 28, 2021 15:41:45.995274067 CET	35644	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:42:45.964519024 CET	717	35644	45.95.169.133	192.168.2.23
Nov 28, 2021 15:42:45.964899063 CET	35644	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:42:46.002327919 CET	717	35644	45.95.169.133	192.168.2.23
Nov 28, 2021 15:42:46.002521038 CET	35644	717	192.168.2.23	45.95.169.133

System Behavior

Analysis Process: 8c04DrlaKW PID: 5439 Parent PID: 5359

General

Start time:	15:39:50
Start date:	28/11/2021
Path:	/tmp/8c04DrlaKW
Arguments:	/tmp/8c04DrlaKW
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: 8c04DrlaKW PID: 5441 Parent PID: 5439

General

Start time:	15:39:50
Start date:	28/11/2021
Path:	/tmp/8c04DrlaKW
Arguments:	n/a
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: 8c04DrlaKW PID: 5443 Parent PID: 5441

General

Start time:	15:39:50
Start date:	28/11/2021
Path:	/tmp/8c04DrlaKW
Arguments:	n/a
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net . Adversaries may also use local host files (ex: `C:\Windows\System32\Drivers\etc\hosts` or `/etc/hosts` ) in order to discover the hostname to IP address mappings of remote systems.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Linux Analysis Report 8c04DrlaKW

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Process Tree

Yara Overview

Initial Sample

Memory Dumps

Jbx Signature Overview

AV Detection:

Spreading:

Networking:

System Summary:

Malware Analysis System Evasion:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

Contacted IPs

Public

Runtime Messages

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: 8c04DrlaKW PID: 5439 Parent PID: 5359

General

Chronological Activities

Analysis Process: 8c04DrlaKW PID: 5441 Parent PID: 5439

General

Chronological Activities

Analysis Process: 8c04DrlaKW PID: 5443 Parent PID: 5441

General