Play interactive tour

Edit tour

Linux Analysis Report E5AplG09Ui

Overview

General Information

Sample Name:	E5AplG09Ui
Analysis ID:	529889
MD5:	816d015226a380348dccf654832d10a9
SHA1:	fa7e11dc89c5f764d04e53abd1587443634134fa
SHA256:	af58bbac7e009f9d16a82ba80f591a58d62fb4aace8fc0851ee3c90949e61b15
Tags:	32armelfgafgyt
Infos:

Detection

Gafgyt Mirai

Score:	76
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected Mirai

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Opens /proc/net/* files useful for finding connected devices and routers

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Detected TCP or UDP traffic on non-standard ports

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures

All HTTP servers contacted by the sample do not answer. Likely the sample is an old dropper which does no longer work

Static ELF header machine description suggests that the sample might not execute correctly on this machine

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	529889
Start date:	28.11.2021
Start time:	15:52:12
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	E5AplG09Ui
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Detection:	MAL
Classification:	mal76.spre.troj.lin@0/0@0/0

Process Tree

system is lnxubuntu20

E5AplG09Ui (PID: 5223, Parent: 5120, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/E5AplG09Ui

E5AplG09Ui New Fork (PID: 5225, Parent: 5223)

E5AplG09Ui New Fork (PID: 5227, Parent: 5225)

cleanup

Yara Overview

Initial Sample

Source	Rule	Description	Author	Strings
E5AplG09Ui	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
E5AplG09Ui	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Memory Dumps

Source	Rule	Description	Author
5223.1.0000000097797f45.000000003e13b28c.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5223.1.0000000097797f45.000000003e13b28c.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5225.1.0000000097797f45.000000003e13b28c.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5225.1.0000000097797f45.000000003e13b28c.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus / Scanner detection for submitted sample

Show sources

Source: E5AplG09Ui

Avira: detected

Multi AV Scanner detection for submitted file

Show sources

Source: E5AplG09Ui	Virustotal: Detection: 53%	Perma Link
Source: E5AplG09Ui	Metadefender: Detection: 54%	Perma Link
Source: E5AplG09Ui	ReversingLabs: Detection: 66%

Spreading:

Opens /proc/net/* files useful for finding connected devices and routers

Show sources

Source: /tmp/E5AplG09Ui (PID: 5223)

Opens: /proc/net/route

Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443

Source: global traffic

TCP traffic: 192.168.2.23:35642 -> 45.95.169.133:717

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.169.133

Source: E5AplG09Ui	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: E5AplG09Ui	String found in binary or memory: http://feedback.redkolibri.com/
Source: E5AplG09Ui	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: E5AplG09Ui	String found in binary or memory: http://www.billybobbot.com/crawler/)

Source: classification engine

Classification label: mal76.spre.troj.lin@0/0@0/0

Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/_memcpy.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/bcopy.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/memcpy.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/memmove.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/memset.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/strcmp.S
Source: ELF static info symbol of initial sample	FILE: libc/string/arm/strlen.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/arm/crt1.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/arm/crti.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/arm/crtn.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/arm/sigrestorer.S

Source: /tmp/E5AplG09Ui (PID: 5223)

Queries kernel information via 'uname':

Jump to behavior

Source: E5AplG09Ui, 5223.1.000000005e3d2608.000000004537d4ad.rw-.sdmp, E5AplG09Ui, 5225.1.000000005e3d2608.000000004537d4ad.rw-.sdmp	Binary or memory string: 'x86_64/usr/bin/qemu-arm/tmp/E5AplG09UiSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/E5AplG09Ui
Source: E5AplG09Ui, 5223.1.000000006a0983aa.0000000070e06d2c.rw-.sdmp, E5AplG09Ui, 5225.1.000000006a0983aa.0000000070e06d2c.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: E5AplG09Ui, 5223.1.000000006a0983aa.0000000070e06d2c.rw-.sdmp, E5AplG09Ui, 5225.1.000000006a0983aa.0000000070e06d2c.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: E5AplG09Ui, 5223.1.000000005e3d2608.000000004537d4ad.rw-.sdmp, E5AplG09Ui, 5225.1.000000005e3d2608.000000004537d4ad.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information:

Yara detected Mirai

Show sources

Source: Yara match	File source: E5AplG09Ui, type: SAMPLE
Source: Yara match	File source: 5223.1.0000000097797f45.000000003e13b28c.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5225.1.0000000097797f45.000000003e13b28c.r-x.sdmp, type: MEMORY

Yara detected Gafgyt

Show sources

Source: Yara match	File source: E5AplG09Ui, type: SAMPLE
Source: Yara match	File source: 5223.1.0000000097797f45.000000003e13b28c.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5225.1.0000000097797f45.000000003e13b28c.r-x.sdmp, type: MEMORY

Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; de) Opera 11.01
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Source: Initial sample	User agent string found: Mozilla/5.0 (iPhone; CPU iPhone OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.3; HTC_0PCV2 Build/KTU84L) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; X11; Linux x86_64; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Firefox/24.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality:

Yara detected Mirai

Show sources

Source: Yara match	File source: E5AplG09Ui, type: SAMPLE
Source: Yara match	File source: 5223.1.0000000097797f45.000000003e13b28c.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5225.1.0000000097797f45.000000003e13b28c.r-x.sdmp, type: MEMORY

Yara detected Gafgyt

Show sources

Source: Yara match	File source: E5AplG09Ui, type: SAMPLE
Source: Yara match	File source: 5223.1.0000000097797f45.000000003e13b28c.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5225.1.0000000097797f45.000000003e13b28c.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	Security Software Discovery11	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Data Obfuscation1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Remote System Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Encrypted Channel1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Standard Port1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol1	SIM Card Swap		Carrier Billing Fraud

Malware Configuration

No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
E5AplG09Ui	53%	Virustotal		Browse
E5AplG09Ui	54%	Metadefender		Browse
E5AplG09Ui	67%	ReversingLabs	Linux.Trojan.LnxGafgyt
E5AplG09Ui	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.billybobbot.com/crawler/)	0%	URL Reputation	safe
http://fast.no/support/crawler.asp)	0%	URL Reputation	safe
http://feedback.redkolibri.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.billybobbot.com/crawler/)	E5AplG09Ui	false	URL Reputation: safe	unknown
http://fast.no/support/crawler.asp)	E5AplG09Ui	false	URL Reputation: safe	unknown
http://feedback.redkolibri.com/	E5AplG09Ui	false	URL Reputation: safe	unknown
http://www.baidu.com/search/spider.htm)	E5AplG09Ui	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
45.95.169.133	unknown	Croatia (LOCAL Name: Hrvatska)	42864	GIGANET-HUGigaNetInternetServiceProviderCoHU	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Runtime Messages

Command:	/tmp/E5AplG09Ui
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
45.95.169.133	Mt4z5aD7mb	Get hash	malicious	Browse
	8c04DrlaKW	Get hash	malicious	Browse
	p83YE1DOnx	Get hash	malicious	Browse
	wofmOxWHfG	Get hash	malicious	Browse
	4Ii4J4DIxt	Get hash	malicious	Browse
	dPNmxIxa36	Get hash	malicious	Browse
	AAVv6nd497	Get hash	malicious	Browse
	e9BE1FK860	Get hash	malicious	Browse
	Gd18OVeWM9	Get hash	malicious	Browse
109.202.202.202	Mt4z5aD7mb	Get hash	malicious	Browse
	jwjC40x1mY	Get hash	malicious	Browse
	p83YE1DOnx	Get hash	malicious	Browse
	wofmOxWHfG	Get hash	malicious	Browse
	4Ii4J4DIxt	Get hash	malicious	Browse
	pQV3T0fVIo	Get hash	malicious	Browse
	EsuHzv9n8N	Get hash	malicious	Browse
	dPNmxIxa36	Get hash	malicious	Browse
	AAVv6nd497	Get hash	malicious	Browse
	e9BE1FK860	Get hash	malicious	Browse
	wriRgGnavY	Get hash	malicious	Browse
	Hs7hqIukmH	Get hash	malicious	Browse
	Gd18OVeWM9	Get hash	malicious	Browse
	v8qiTISjUU	Get hash	malicious	Browse
	Bu8Mj7TcLL	Get hash	malicious	Browse
	SPWv1xQJN2	Get hash	malicious	Browse
	C7FpC2RDAj	Get hash	malicious	Browse
	ptDMShZLZh	Get hash	malicious	Browse
	NH4nR1N8wk	Get hash	malicious	Browse
	p5DTKpaxTE	Get hash	malicious	Browse
91.189.91.43	Mt4z5aD7mb	Get hash	malicious	Browse
	jwjC40x1mY	Get hash	malicious	Browse
	8c04DrlaKW	Get hash	malicious	Browse
	p83YE1DOnx	Get hash	malicious	Browse
	wofmOxWHfG	Get hash	malicious	Browse
	4Ii4J4DIxt	Get hash	malicious	Browse
	pQV3T0fVIo	Get hash	malicious	Browse
	EsuHzv9n8N	Get hash	malicious	Browse
	dPNmxIxa36	Get hash	malicious	Browse
	AAVv6nd497	Get hash	malicious	Browse
	e9BE1FK860	Get hash	malicious	Browse
	wriRgGnavY	Get hash	malicious	Browse
	Hs7hqIukmH	Get hash	malicious	Browse
	Gd18OVeWM9	Get hash	malicious	Browse
	v8qiTISjUU	Get hash	malicious	Browse
	Bu8Mj7TcLL	Get hash	malicious	Browse
	SPWv1xQJN2	Get hash	malicious	Browse
	C7FpC2RDAj	Get hash	malicious	Browse
	ptDMShZLZh	Get hash	malicious	Browse
	NH4nR1N8wk	Get hash	malicious	Browse
91.189.91.42	Mt4z5aD7mb	Get hash	malicious	Browse
	jwjC40x1mY	Get hash	malicious	Browse
	p83YE1DOnx	Get hash	malicious	Browse
	wofmOxWHfG	Get hash	malicious	Browse
	4Ii4J4DIxt	Get hash	malicious	Browse
	pQV3T0fVIo	Get hash	malicious	Browse
	EsuHzv9n8N	Get hash	malicious	Browse
	dPNmxIxa36	Get hash	malicious	Browse
	AAVv6nd497	Get hash	malicious	Browse
	e9BE1FK860	Get hash	malicious	Browse
	wriRgGnavY	Get hash	malicious	Browse
	Hs7hqIukmH	Get hash	malicious	Browse
	Gd18OVeWM9	Get hash	malicious	Browse
	v8qiTISjUU	Get hash	malicious	Browse
	Bu8Mj7TcLL	Get hash	malicious	Browse
	SPWv1xQJN2	Get hash	malicious	Browse
	C7FpC2RDAj	Get hash	malicious	Browse
	ptDMShZLZh	Get hash	malicious	Browse
	NH4nR1N8wk	Get hash	malicious	Browse
	p5DTKpaxTE	Get hash	malicious	Browse

Domains

No context

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CANONICAL-ASGB	Mt4z5aD7mb	Get hash	malicious	Browse	91.189.91.42
	jwjC40x1mY	Get hash	malicious	Browse	91.189.91.42
	8c04DrlaKW	Get hash	malicious	Browse	91.189.91.43
	p83YE1DOnx	Get hash	malicious	Browse	91.189.91.42
	wofmOxWHfG	Get hash	malicious	Browse	91.189.91.42
	4Ii4J4DIxt	Get hash	malicious	Browse	91.189.91.42
	pQV3T0fVIo	Get hash	malicious	Browse	91.189.91.42
	EsuHzv9n8N	Get hash	malicious	Browse	91.189.91.42
	dPNmxIxa36	Get hash	malicious	Browse	91.189.91.42
	AAVv6nd497	Get hash	malicious	Browse	91.189.91.42
	e9BE1FK860	Get hash	malicious	Browse	91.189.91.42
	wriRgGnavY	Get hash	malicious	Browse	91.189.91.42
	Hs7hqIukmH	Get hash	malicious	Browse	91.189.91.42
	Gd18OVeWM9	Get hash	malicious	Browse	91.189.91.42
	v8qiTISjUU	Get hash	malicious	Browse	91.189.91.42
	Bu8Mj7TcLL	Get hash	malicious	Browse	91.189.91.42
	SPWv1xQJN2	Get hash	malicious	Browse	91.189.91.42
	C7FpC2RDAj	Get hash	malicious	Browse	91.189.91.42
	ptDMShZLZh	Get hash	malicious	Browse	91.189.91.42
	NH4nR1N8wk	Get hash	malicious	Browse	91.189.91.42
GIGANET-HUGigaNetInternetServiceProviderCoHU	Mt4z5aD7mb	Get hash	malicious	Browse	45.95.169.133
	8c04DrlaKW	Get hash	malicious	Browse	45.95.169.133
	p83YE1DOnx	Get hash	malicious	Browse	45.95.169.133
	wofmOxWHfG	Get hash	malicious	Browse	45.95.169.133
	4Ii4J4DIxt	Get hash	malicious	Browse	45.95.169.133
	dPNmxIxa36	Get hash	malicious	Browse	45.95.169.133
	AAVv6nd497	Get hash	malicious	Browse	45.95.169.133
	e9BE1FK860	Get hash	malicious	Browse	45.95.169.133
	Gd18OVeWM9	Get hash	malicious	Browse	45.95.169.133
	P2MNIRJ4gJ	Get hash	malicious	Browse	45.95.169.115
	sE1xgTiVhl	Get hash	malicious	Browse	45.95.169.115
	IVpX0wAyep	Get hash	malicious	Browse	45.95.169.115
	jmDafm8And	Get hash	malicious	Browse	45.95.169.115
	6Pw7ywG1Rx	Get hash	malicious	Browse	45.95.169.115
	U8HSORd9Sz	Get hash	malicious	Browse	45.95.169.115
	xz9rffd17J	Get hash	malicious	Browse	45.95.169.115
	K3j3e3MgZW	Get hash	malicious	Browse	45.95.169.115
	Eu5R5GFRQv	Get hash	malicious	Browse	45.95.169.115
	NvwKITeL1Y	Get hash	malicious	Browse	45.95.169.115
	89qfrZ4qCR	Get hash	malicious	Browse	45.95.169.115
INIT7CH	Mt4z5aD7mb	Get hash	malicious	Browse	109.202.202.202
	jwjC40x1mY	Get hash	malicious	Browse	109.202.202.202
	p83YE1DOnx	Get hash	malicious	Browse	109.202.202.202
	wofmOxWHfG	Get hash	malicious	Browse	109.202.202.202
	4Ii4J4DIxt	Get hash	malicious	Browse	109.202.202.202
	pQV3T0fVIo	Get hash	malicious	Browse	109.202.202.202
	EsuHzv9n8N	Get hash	malicious	Browse	109.202.202.202
	dPNmxIxa36	Get hash	malicious	Browse	109.202.202.202
	AAVv6nd497	Get hash	malicious	Browse	109.202.202.202
	e9BE1FK860	Get hash	malicious	Browse	109.202.202.202
	wriRgGnavY	Get hash	malicious	Browse	109.202.202.202
	Hs7hqIukmH	Get hash	malicious	Browse	109.202.202.202
	Gd18OVeWM9	Get hash	malicious	Browse	109.202.202.202
	v8qiTISjUU	Get hash	malicious	Browse	109.202.202.202
	Bu8Mj7TcLL	Get hash	malicious	Browse	109.202.202.202
	SPWv1xQJN2	Get hash	malicious	Browse	109.202.202.202
	C7FpC2RDAj	Get hash	malicious	Browse	109.202.202.202
	ptDMShZLZh	Get hash	malicious	Browse	109.202.202.202
	NH4nR1N8wk	Get hash	malicious	Browse	109.202.202.202
	p5DTKpaxTE	Get hash	malicious	Browse	109.202.202.202

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

No created / dropped files found

Static File Info

General
File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
Entropy (8bit):	6.1602814722037245
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	E5AplG09Ui
File size:	125549
MD5:	816d015226a380348dccf654832d10a9
SHA1:	fa7e11dc89c5f764d04e53abd1587443634134fa
SHA256:	af58bbac7e009f9d16a82ba80f591a58d62fb4aace8fc0851ee3c90949e61b15
SHA512:	0f8ffb5ce654e878b818c037352d56e4d652d9d2cff1f614122fea854578eb8fcb0962714754a1096299030f3759cec6a84591374d22b1749a98717aecd00d6f
SSDEEP:	3072:jogfqPdx1YA2eFhGS5iqvIwLmUwrQRhk4rNXhLe:0Pdx32eFh15immUwrQRhXrNXhLe
File Content Preview:	.ELF...a..........(.........4...........4. ...(......................_..._...............`...`...`.......g..........Q.td..................................-...L."....@..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	98436
Section Header Size:	40
Number of Section Headers:	20
Header String Table Index:	17

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80b0	0xb0	0x103b4	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x18464	0x10464	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x18478	0x10478	0x5b5c	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x1dfd4	0x15fd4	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x26000	0x16000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x26008	0x16008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x26010	0x16010	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x26014	0x16014	0x478	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x2648c	0x1648c	0x6358	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x1648c	0xaa2	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x16f30	0x120	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x17050	0x578	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x175c8	0xb4	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1767c	0x8bd	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x17f3c	0xa0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x17fdc	0xa8	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x183a4	0x4330	0x10	0x0		19	593	4
.strtab	STRTAB	0x0	0x1c6d4	0x2399	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x15fd8	0x15fd8	3.9626	0x5	R E	0x8000	.init .text .fini .rodata .eh_frame
LOAD	0x16000	0x26000	0x26000	0x48c	0x67e4	1.7676	0x6	RW	0x8000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x18464	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x18478	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1dfd4	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x26000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x26008	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x26010	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x26014	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2648c	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
$a	.symtab	0x8094	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x18464	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18470	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x18428	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1845c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x80a8	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x18474	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x83d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x87f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x94ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x95d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x99ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa9ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xab24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb220	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb3cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb6bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb820	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbb28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbcbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc538	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd4d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd4ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe550	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf3a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfba8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfcb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfd84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfebc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1002c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10054	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x100ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x100fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1021c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10248	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1027c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10294	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10308	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x103b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10428	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x104f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10520	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10be4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10cb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11360	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11394	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11440	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11450	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11460	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11500	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11520	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11688	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x116a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11784	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1187c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11890	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11978	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ffc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1202c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12110	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1217c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x122d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x123c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12454	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1257c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12744	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x127d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12868	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x128e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ff8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13064	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13104	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13350	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13434	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1343c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13468	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13518	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1359c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x135f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1361c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13628	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13678	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13754	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13810	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13948	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13abc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13af0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14440	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15818	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15878	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1589c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15904	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15bcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15fc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16054	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16410	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x164c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16590	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x165e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16610	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x168ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16cb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16eac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ec0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16fd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1735c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17390	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1753c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x175e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x176b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x176fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17758	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17784	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17840	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17d80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x183d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26000	0	NOTYPE	<unknown>	DEFAULT	6
$d	.symtab	0x26008	0	NOTYPE	<unknown>	DEFAULT	7
$d	.symtab	0x2601c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8174	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18458	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26020	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26024	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x87e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x94e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x95d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x99e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa9d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xab20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb21c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b518	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xb3c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb6b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb81c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb980	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbb24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbcb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc374	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc534	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcdd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd314	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd4c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd4e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe4fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf398	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfb8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10190	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10290	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x102c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26128	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x26130	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x102d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10424	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x104e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26138	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1cf7c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10bd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10e4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10e90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1133c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11680	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1177c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11970	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11980	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11b08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11b6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11ecc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1210c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x122b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26274	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x123a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x126b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2637c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1272c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x127b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12850	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x128cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26394	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x129a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12af4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12bc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1dba8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12d70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12dec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26448	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x12fa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ff4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13054	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1331c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26460	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1342c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13598	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c6f0	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x13624	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1440c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1dbf0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x149d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ad8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15510	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x157d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26468	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x15894	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x158d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15bbc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15f60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16044	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1616c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16354	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x164c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x168e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16a4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16ca8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16fc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x172f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1738c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26480	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x174bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17538	0	NOTYPE	<unknown>	DEFAULT	2
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.139.5305	.symtab	0x1b518	36	OBJECT	<unknown>	DEFAULT	4
C.146.5372	.symtab	0x1b79c	104	OBJECT	<unknown>	DEFAULT	4
C.194.5709	.symtab	0x1bc4c	24	OBJECT	<unknown>	DEFAULT	4
C.199.5749	.symtab	0x1c3ac	1128	OBJECT	<unknown>	DEFAULT	4
Hrandstrings	.symtab	0x26030	8	OBJECT	<unknown>	DEFAULT	9
Laligned	.symtab	0x11548	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x11564	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x264bc	16384	OBJECT	<unknown>	DEFAULT	10
Randhex	.symtab	0xc378	448	FUNC	<unknown>	DEFAULT	2
SHEX	.symtab	0xb220	428	FUNC	<unknown>	DEFAULT	2
SNFO	.symtab	0xc1d4	420	FUNC	<unknown>	DEFAULT	2
SendHTTPHex	.symtab	0xd170	432	FUNC	<unknown>	DEFAULT	2
SendSTD	.symtab	0xb518	420	FUNC	<unknown>	DEFAULT	2
UDPRAW	.symtab	0xb820	356	FUNC	<unknown>	DEFAULT	2
Zrandstrings	.symtab	0x26024	12	OBJECT	<unknown>	DEFAULT	9
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x26004	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x26000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x26128	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1c97c	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x26480	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x1dcd4	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x26130	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1cc7c	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x2600c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x26008	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x1dfd4	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x1dfd4	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x26128	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x1c97c	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x26480	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x1dcd4	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x26130	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x1cc7c	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x2612c	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x26484	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x26134	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x102c8	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x17390	304	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x1187c	20	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x1361c	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xfebc	116	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0xff30	80	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x10128	92	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x12ff8	108	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x130a8	92	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x11890	232	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xff80	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1257c	328	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x12bc8	12	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x12bc8	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1589c	60	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xffa8	44	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0xffd4	44	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x11ee8	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x2c6f0	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x12d74	148	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x15904	384	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xfebc	116	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0xff30	80	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x16194	484	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x17390	304	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x15fc0	148	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x16378	152	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x15a84	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x10000	44	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x11360	52	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x15a90	12	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x15a9c	304	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x11394	172	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x17390	304	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1002c	40	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x13468	44	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x13494	44	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x134c0	44	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x11b30	68	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x11b74	884	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x10054	44	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x10080	44	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x11f14	44	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x134ec	44	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x2c6f4	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x11b0c	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x14c4c	236	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x11b00	12	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x11a80	128	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x16a50	608	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x166dc	528	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x12b00	200	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x100ac	80	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x11984	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x100fc	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x172f8	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x148e0	252	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x11450	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x148d0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x149dc	24	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x149f4	236	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x11460	156	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x13518	44	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x10128	92	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x158d8	44	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x15860	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x126c8	124	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x129a4	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x16410	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x10194	44	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x11f70	44	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x13544	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x101c0	48	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x11f9c	44	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x11fc8	52	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x101f0	44	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x11ffc	48	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x128e4	192	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x13350	228	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x12058	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1359c	84	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x12e08	420	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x1202c	44	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x102d4	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x12a34	204	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x174c0	124	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x11580	264	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x11500	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x11500	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x11688	28	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x165e0	48	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x11520	96	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x164c8	200	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x14ae0	184	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x116a4	224	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x14c0c	64	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x16590	80	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x11784	248	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x11978	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x14b98	116	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x12bd4	8	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x119a4	108	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x1021c	44	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x1735c	52	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x10294	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x10308	176	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x135f0	44	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x10248	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x13628	80	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x13698	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x13678	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x10250	44	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x26010	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x26010	0	OBJECT	<unknown>	DEFAULT	8
__adddf3	.symtab	0x1798c	736	FUNC	<unknown>	DEFAULT	2
__aeabi_cdcmpeq	.symtab	0x1835c	20	FUNC	<unknown>	DEFAULT	2
__aeabi_cdcmple	.symtab	0x1835c	20	FUNC	<unknown>	DEFAULT	2
__aeabi_cdrcmple	.symtab	0x18340	48	FUNC	<unknown>	DEFAULT	2
__aeabi_d2uiz	.symtab	0x183d4	84	FUNC	<unknown>	DEFAULT	2
__aeabi_dadd	.symtab	0x1798c	736	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpeq	.symtab	0x18370	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpge	.symtab	0x183ac	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpgt	.symtab	0x183c0	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmple	.symtab	0x18398	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmplt	.symtab	0x18384	20	FUNC	<unknown>	DEFAULT	2
__aeabi_ddiv	.symtab	0x180a8	516	FUNC	<unknown>	DEFAULT	2
__aeabi_dmul	.symtab	0x17d80	808	FUNC	<unknown>	DEFAULT	2
__aeabi_drsub	.symtab	0x17980	0	FUNC	<unknown>	DEFAULT	2
__aeabi_dsub	.symtab	0x17988	740	FUNC	<unknown>	DEFAULT	2
__aeabi_f2d	.symtab	0x17cc0	64	FUNC	<unknown>	DEFAULT	2
__aeabi_i2d	.symtab	0x17c94	44	FUNC	<unknown>	DEFAULT	2
__aeabi_idiv	.symtab	0x17840	0	FUNC	<unknown>	DEFAULT	2
__aeabi_idiv0	.symtab	0xfe68	4	FUNC	<unknown>	DEFAULT	2
__aeabi_idivmod	.symtab	0x17968	24	FUNC	<unknown>	DEFAULT	2
__aeabi_l2d	.symtab	0x17d14	108	FUNC	<unknown>	DEFAULT	2
__aeabi_ldiv0	.symtab	0xfe68	4	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x17c6c	40	FUNC	<unknown>	DEFAULT	2
__aeabi_uidiv	.symtab	0xfba8	0	FUNC	<unknown>	DEFAULT	2
__aeabi_uidivmod	.symtab	0xfca0	24	FUNC	<unknown>	DEFAULT	2
__aeabi_ul2d	.symtab	0x17d00	128	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x2c6e4	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x26448	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x12058	184	FUNC	<unknown>	HIDDEN	2
__bss_end__	.symtab	0x2c7e4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x2648c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x2648c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x13070	56	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x182bc	132	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x2612c	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x26484	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x26134	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x2c714	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x26014	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x16ec0	220	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x175e4	204	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x16d98	184	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x13438	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x13434	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xfe68	4	FUNC	<unknown>	DEFAULT	2
__divdf3	.symtab	0x180a8	516	FUNC	<unknown>	DEFAULT	2
__divsi3	.symtab	0x17840	296	FUNC	<unknown>	DEFAULT	2
__dns_lookup	.symtab	0x14d38	2060	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x18428	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x26018	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x1753c	168	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x16cb0	232	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x16e50	92	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x2c7e4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2c6dc	4	OBJECT	<unknown>	DEFAULT	10
__eqdf2	.symtab	0x182bc	132	FUNC	<unknown>	DEFAULT	2
__errno_location	.symtab	0x102c8	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2c6d4	4	OBJECT	<unknown>	HIDDEN	10
__extendsfdf2	.symtab	0x17cc0	64	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x17390	304	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x26000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x26000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fixunsdfsi	.symtab	0x183d4	84	FUNC	<unknown>	DEFAULT	2
__floatdidf	.symtab	0x17d14	108	FUNC	<unknown>	DEFAULT	2
__floatsidf	.symtab	0x17c94	44	FUNC	<unknown>	DEFAULT	2
__floatundidf	.symtab	0x17d00	128	FUNC	<unknown>	DEFAULT	2
__floatunsidf	.symtab	0x17c6c	40	FUNC	<unknown>	DEFAULT	2
__gedf2	.symtab	0x182ac	148	FUNC	<unknown>	DEFAULT	2
__get_hosts_byname_r	.symtab	0x15818	72	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x1187c	20	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x182ac	148	FUNC	<unknown>	DEFAULT	2
__h_errno_location	.symtab	0x1361c	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x123c0	148	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x12488	244	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x12454	32	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x12474	20	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x26000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x26000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__ledf2	.symtab	0x182b4	140	FUNC	<unknown>	DEFAULT	2
__length_dotted	.symtab	0x176b0	76	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x16eac	20	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0xffd4	44	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x11ee8	44	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x10184	16	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0xfebc	116	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0xff30	80	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x10000	44	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x10054	44	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x172f8	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x13518	44	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x10128	92	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x158d8	44	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x10194	44	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x11f70	44	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x101c0	48	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x11f9c	44	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x11fc8	52	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x13350	228	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2c6d8	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x10248	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x10250	44	FUNC	<unknown>	DEFAULT	2
__ltdf2	.symtab	0x182b4	140	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x26274	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x2c6b8	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x2c7a0	24	OBJECT	<unknown>	DEFAULT	10
__modsi3	.symtab	0xfd84	228	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x17d80	808	FUNC	<unknown>	DEFAULT	2
__muldi3	.symtab	0xfe6c	80	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x2c7c8	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x2c7d4	4	OBJECT	<unknown>	HIDDEN	10
__nedf2	.symtab	0x182bc	132	FUNC	<unknown>	DEFAULT	2
__open_etc_hosts	.symtab	0x16f9c	52	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x15544	724	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x2c6e0	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x26000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x26000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x13064	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x13064	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x13064	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x13064	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x13064	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x1306c	4	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x15860	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x16fd0	808	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x26468	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x2c6e8	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x2c7b8	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x2c7d8	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x12134	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x12158	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x12110	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x26144	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x176fc	92	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x13754	188	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x15bcc	204	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x13810	312	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x10428	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3929	.symtab	0x1cf7c	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x17758	44	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x15f90	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x17784	188	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x13948	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x104f0	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x26148	4	OBJECT	<unknown>	DEFAULT	9
__subdf3	.symtab	0x17988	740	FUNC	<unknown>	DEFAULT	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x1343c	44	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x12ff8	108	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x130a8	92	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x13104	588	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x26460	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3	.symtab	0xfba8	248	FUNC	<unknown>	DEFAULT	2
__umodsi3	.symtab	0xfcb8	204	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x11890	232	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_end__	.symtab	0x2c7e4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x10520	76	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x15878	36	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x2c7dc	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x2c7e0	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x2648c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2c7e4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x2c6f0	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0xff80	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x18464	4	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x2a4c4	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x1056c	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x13c40	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x2c6f4	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x8094	4	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x13a4c	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x14440	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x10be4	152	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x10e9c	1220	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x10c7c	56	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x10cb4	412	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x10e50	76	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1306c	4	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x1306c	4	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2c720	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x8190	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x15c98	760	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x103b8	112	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x2614c	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x26150	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x16054	320	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x2a4c0	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x26168	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x2a4bc	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x26184	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x10438	184	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x26180	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x12bdc	408	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x13abc	52	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1d04c	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x13af0	336	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x105f0	1524	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1257c	328	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atcp	.symtab	0xa37c	1648	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x12bc8	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x12bc8	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x9d68	1556	FUNC	<unknown>	DEFAULT	2
audprand3	.symtab	0xb984	420	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0x11440	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x2c6d0	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2789	.symtab	0x2c6ec	4	OBJECT	<unknown>	DEFAULT	10
brk	.symtab	0x1589c	60	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x12058	184	FUNC	<unknown>	DEFAULT	2
buf.2613	.symtab	0x2c4c8	16	OBJECT	<unknown>	DEFAULT	10
buf.4901	.symtab	0x2c4d8	460	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x26120	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x1845c	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x8128	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x8188	0	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0xffa8	44	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
client.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0xffd4	44	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x26038	4	OBJECT	<unknown>	DEFAULT	9
completed.2555	.symtab	0x2648c	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x11ee8	44	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x95d4	640	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x10184	16	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x99ec	344	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x2611c	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x26020	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns	.symtab	0x2603c	4	OBJECT	<unknown>	DEFAULT	9
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x2c6dc	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x2c6f0	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x12d74	148	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x1dbf0	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x15904	384	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xfebc	116	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0xff30	80	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x8438	208	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x16194	484	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x17390	304	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x15fc0	148	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x16378	152	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
findRandIP	.symtab	0x9574	96	FUNC	<unknown>	DEFAULT	2
fmt	.symtab	0x1dbdc	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x15a84	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
force_to_data	.symtab	0x26014	0	OBJECT	<unknown>	DEFAULT	9
force_to_data	.symtab	0x26488	0	OBJECT	<unknown>	DEFAULT	9
fork	.symtab	0x10000	44	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x11360	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x122d0	240	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x15a90	12	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x15a90	12	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x15a9c	304	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x11394	172	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0xd4d0	28	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x91b4	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8508	748	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x83d8	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x17390	304	FUNC	<unknown>	DEFAULT	2
getdtablesize	.symtab	0x1002c	40	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x13468	44	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x13494	44	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x134c0	44	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x11b30	68	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x11b74	884	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x10054	44	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x10080	44	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x11f14	44	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x11f40	48	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x134ec	44	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h.4900	.symtab	0x2c6a4	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x2c6f4	4	OBJECT	<unknown>	DEFAULT	10
hazard1	.symtab	0xbb28	404	FUNC	<unknown>	DEFAULT	2
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0x11a48	36	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x11a6c	20	FUNC	<unknown>	DEFAULT	2
i.4125	.symtab	0x26124	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x11580	264	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x11b0c	36	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x14c4c	236	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x11b00	12	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x11a80	128	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x16a50	608	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x168ec	356	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x166dc	528	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x16610	204	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xf218	396	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81cc	212	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x26278	260	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x127d0	152	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x12b00	200	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x100ac	80	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x11984	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x1027c	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x100fc	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bcopy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memmove.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x9854	408	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x172f8	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x264b4	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0xf3a4	2052	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x264a8	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0x9c54	276	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x94ec	136	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0xa9ec	312	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x1217c	340	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x148e0	252	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x11450	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x148d0	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x149dc	24	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x149f4	236	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x11460	156	FUNC	<unknown>	DEFAULT	2
mylock	.symtab	0x2637c	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x26394	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x2c6f8	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x13518	44	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1066	.symtab	0x2c4c4	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0x11a10	36	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x11a34	20	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x264ac	8	OBJECT	<unknown>	DEFAULT	10
object.2636	.symtab	0x26490	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x10128	92	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x2c718	4	OBJECT	<unknown>	DEFAULT	10
ovhl7	.symtab	0xc538	3128	FUNC	<unknown>	DEFAULT	2
p.2553	.symtab	0x2601c	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x2c71c	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x158d8	44	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4141	.symtab	0x1cfa4	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x8cfc	1008	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x8924	108	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8b14	488	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8990	388	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0xd4ec	7468	FUNC	<unknown>	DEFAULT	2
qual_chars.4147	.symtab	0x1cfb8	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x15860	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x126c4	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x82a0	312	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x126c8	124	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x1dba8	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x129a4	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x263c8	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x16410	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x10194	44	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x11f70	44	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x9218	724	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x13544	88	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x101c0	48	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x11f9c	44	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendHTTPtwo	.symtab	0xd320	432	FUNC	<unknown>	DEFAULT	2
sendJUNK	.symtab	0xbcbc	1304	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x11fc8	52	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x101f0	44	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x11ffc	48	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x12744	140	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x128e4	192	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x13350	228	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x12058	184	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x1359c	84	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x12e08	420	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x1202c	44	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0xb3cc	332	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x90ec	200	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4146	.symtab	0x1cfcc	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4140	.symtab	0x1cfb0	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4143	.symtab	0x1cff8	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4142	.symtab	0x1d010	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4145	.symtab	0x1cfdc	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4144	.symtab	0x1cfec	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x102d4	52	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x12868	124	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x12868	124	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x12a34	204	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x26464	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x2c710	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x26140	4	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x26138	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x2613c	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x174c0	124	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x11580	264	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x11500	28	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x11500	28	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x11688	28	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x165e0	48	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x11890	232	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x11520	96	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x164c8	200	FUNC	<unknown>	DEFAULT	2

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 28, 2021 15:52:56.312925100 CET	35642	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:52:56.351133108 CET	717	35642	45.95.169.133	192.168.2.23
Nov 28, 2021 15:52:56.351233006 CET	35642	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:52:56.353534937 CET	35642	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:52:56.391726971 CET	717	35642	45.95.169.133	192.168.2.23
Nov 28, 2021 15:52:56.731236935 CET	42836	443	192.168.2.23	91.189.91.43
Nov 28, 2021 15:52:57.499207973 CET	42516	80	192.168.2.23	109.202.202.202
Nov 28, 2021 15:53:11.835114002 CET	43928	443	192.168.2.23	91.189.91.42
Nov 28, 2021 15:53:24.122916937 CET	42836	443	192.168.2.23	91.189.91.43
Nov 28, 2021 15:53:28.218921900 CET	42516	80	192.168.2.23	109.202.202.202
Nov 28, 2021 15:53:46.057863951 CET	717	35642	45.95.169.133	192.168.2.23
Nov 28, 2021 15:53:46.058193922 CET	35642	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:53:46.096304893 CET	717	35642	45.95.169.133	192.168.2.23
Nov 28, 2021 15:53:46.096573114 CET	35642	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:53:52.794502974 CET	43928	443	192.168.2.23	91.189.91.42
Nov 28, 2021 15:54:46.065200090 CET	717	35642	45.95.169.133	192.168.2.23
Nov 28, 2021 15:54:46.065597057 CET	35642	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:54:46.103789091 CET	717	35642	45.95.169.133	192.168.2.23
Nov 28, 2021 15:54:46.103945017 CET	35642	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:55:46.072772026 CET	717	35642	45.95.169.133	192.168.2.23
Nov 28, 2021 15:55:46.072973967 CET	35642	717	192.168.2.23	45.95.169.133
Nov 28, 2021 15:55:46.110963106 CET	717	35642	45.95.169.133	192.168.2.23
Nov 28, 2021 15:55:46.111174107 CET	35642	717	192.168.2.23	45.95.169.133

System Behavior

Analysis Process: E5AplG09Ui PID: 5223 Parent PID: 5120

General

Start time:	15:52:55
Start date:	28/11/2021
Path:	/tmp/E5AplG09Ui
Arguments:	/tmp/E5AplG09Ui
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: E5AplG09Ui PID: 5225 Parent PID: 5223

General

Start time:	15:52:55
Start date:	28/11/2021
Path:	/tmp/E5AplG09Ui
Arguments:	n/a
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: E5AplG09Ui PID: 5227 Parent PID: 5225

General

Start time:	15:52:55
Start date:	28/11/2021
Path:	/tmp/E5AplG09Ui
Arguments:	n/a
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net . Adversaries may also use local host files (ex: `C:\Windows\System32\Drivers\etc\hosts` or `/etc/hosts` ) in order to discover the hostname to IP address mappings of remote systems.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Linux Analysis Report E5AplG09Ui

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Process Tree

Yara Overview

Initial Sample

Memory Dumps

Jbx Signature Overview

AV Detection:

Spreading:

Networking:

System Summary:

Malware Analysis System Evasion:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

Contacted IPs

Public

Runtime Messages

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: E5AplG09Ui PID: 5223 Parent PID: 5120

General

Chronological Activities

Analysis Process: E5AplG09Ui PID: 5225 Parent PID: 5223

General

Chronological Activities

Analysis Process: E5AplG09Ui PID: 5227 Parent PID: 5225

General