Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:	na.elf
Analysis ID:	1532148
MD5:	bdc4463c2ff5e4ba7326a28c87657357
SHA1:	d923abe1d944c52d48a7d2497a6bffee0209b22b
SHA256:	2b273448e301b5cffa49faa820bfb0c8ae88e59bef062115ae31d31fba9469f8
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Contains symbols with names commonly found in malware

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Found strings indicative of a multi-platform dropper

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532148
Start date and time:	2024-10-12 16:27:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	na.elf
Detection:	MAL
Classification:	mal52.linELF@0/0@1/0

Runtime Messages

Command:	/tmp/na.elf
PID:	5525
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

na.elf (PID: 5525, Parent: 5441, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/na.elf

na.elf New Fork (PID: 5527, Parent: 5525)

na.elf New Fork (PID: 5533, Parent: 5527)

dash New Fork (PID: 5539, Parent: 3671)

rm (PID: 5539, Parent: 3671, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.ZZlBmvzIUL /tmp/tmp.MxMrwp3ptI /tmp/tmp.FLGVJ0vhfV

dash New Fork (PID: 5540, Parent: 3671)

cat (PID: 5540, Parent: 3671, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.ZZlBmvzIUL

dash New Fork (PID: 5541, Parent: 3671)

head (PID: 5541, Parent: 3671, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 5542, Parent: 3671)

tr (PID: 5542, Parent: 3671, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 5543, Parent: 3671)

cut (PID: 5543, Parent: 3671, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 5544, Parent: 3671)

cat (PID: 5544, Parent: 3671, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.ZZlBmvzIUL

dash New Fork (PID: 5545, Parent: 3671)

head (PID: 5545, Parent: 3671, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 5546, Parent: 3671)

tr (PID: 5546, Parent: 3671, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 5547, Parent: 3671)

cut (PID: 5547, Parent: 3671, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 5548, Parent: 3671)

rm (PID: 5548, Parent: 3671, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.ZZlBmvzIUL /tmp/tmp.MxMrwp3ptI /tmp/tmp.FLGVJ0vhfV

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: na.elf	ReversingLabs: Detection: 21%
Source: na.elf	Virustotal: Detection: 9%			Perma Link

Source: unknown

HTTPS traffic detected: 54.247.62.1:443 -> 192.168.2.15:52464 version: TLS 1.2

Source: na.elf

String: /lib//sbin//usr//proc//exeself/fd/fd/socket:/proc/proc//exewgetcurlftpmountabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789/proc/net/tcp/proc//exe/fd//proc//maps/lib/usr/lib

Source: global traffic

TCP traffic: 192.168.2.15:49412 -> 77.232.36.152:9583

Source: /tmp/na.elf (PID: 5525)

Socket: 127.0.0.1:45295

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.152
Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.152
Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.152
Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.152
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 54.247.62.1
Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.152
Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.152

Source: global traffic

DNS traffic detected: DNS query: xlabresearch.ru

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52464
Source: unknown	Network traffic detected: HTTP traffic on port 52464 -> 443

Source: unknown

HTTPS traffic detected: 54.247.62.1:443 -> 192.168.2.15:52464 version: TLS 1.2

System Summary

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: add_attack
Source: ELF static info symbol of initial sample	Name: attack_add_pid
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_ongoing
Source: ELF static info symbol of initial sample	Name: attack_parse
Source: ELF static info symbol of initial sample	Name: attack_remove_id
Source: ELF static info symbol of initial sample	Name: attack_start
Source: ELF static info symbol of initial sample	Name: attack_stop
Source: ELF static info symbol of initial sample	Name: attacks_ack
Source: ELF static info symbol of initial sample	Name: attacks_gre

Source: classification engine

Classification label: mal52.linELF@0/0@1/0

Source: na.elf	ELF static info symbol of initial sample: libc/string/mips/memcpy.S
Source: na.elf	ELF static info symbol of initial sample: libc/string/mips/memset.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crt1.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crti.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crtn.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/pipe.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/syscall_error.S

Source: /usr/bin/dash (PID: 5539)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.ZZlBmvzIUL /tmp/tmp.MxMrwp3ptI /tmp/tmp.FLGVJ0vhfV			Jump to behavior
Source: /usr/bin/dash (PID: 5548)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.ZZlBmvzIUL /tmp/tmp.MxMrwp3ptI /tmp/tmp.FLGVJ0vhfV			Jump to behavior

Source: /tmp/na.elf (PID: 5525)

Queries kernel information via 'uname':

Jump to behavior

Source: na.elf, 5525.1.00007ffe9631a000.00007ffe9633b000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mips/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
Source: na.elf, 5525.1.000056048b412000.000056048b499000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/mips
Source: na.elf, 5525.1.000056048b412000.000056048b499000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: na.elf, 5525.1.00007ffe9631a000.00007ffe9633b000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
na.elf	21%	ReversingLabs	Linux.Trojan.Generic
na.elf	9%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
xlabresearch.ru	unknown	unknown	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
77.232.36.152	unknown	Russian Federation		28968	EUT-ASEUTIPNetworkRU	false
54.247.62.1	unknown	United States		16509	AMAZON-02US	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
54.247.62.1	na.elf	Get hash	malicious	Mirai	Browse
	na.elf	Get hash	malicious	Unknown	Browse
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse
	bot.spc.elf	Get hash	malicious	Mirai, Okiru	Browse
	a-r.m-7.GHOUL.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	ueWOVhbaID.elf	Get hash	malicious	Unknown	Browse
	Nki4IIPCt5.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	iGs5wjZOhO.elf	Get hash	malicious	Unknown	Browse
	AcwqKijGh1.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	http://coin-have.c0m	Get hash	malicious	Unknown	Browse	34.210.170.212
	na.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	na.elf	Get hash	malicious	Unknown	Browse	34.249.145.219
	na.elf	Get hash	malicious	Unknown	Browse	34.249.145.219
	na.elf	Get hash	malicious	Unknown	Browse	34.249.145.219
	na.elf	Get hash	malicious	Unknown	Browse	34.254.182.186
	z198902873827.exe	Get hash	malicious	DBatLoader, FormBook	Browse	185.166.143.49
	http://myweatherradar.org./	Get hash	malicious	Unknown	Browse	34.249.211.147
	http://link.adultspace.com/link/67097a59d79290df75176b77/aHR0cHM6Ly93d3cuZnVja2Jvb2tkYXRpbmcubmV0L2VuL2F1dGg_dXNlcj00MzMwMDA4NzEmY29kZT0xZDE3OTYyMTE3YWUwMzNjN2QyOWFlOTdkZWFhZjY1MyZyZWRpcmVjdFBhZ2U9JTJGYWNjb3VudCZyZWRpcmVjdFBhZ2VQYXJhbXMlNUJ1c2VyJTVEPTQzMzAwMDg3MQ==?linkId=link_9	Get hash	malicious	Unknown	Browse	3.128.228.77
	http://link.adultspace.com/link/67097a59d79290df75176b77/aHR0cHM6Ly93d3cuZnVja2Jvb2tkYXRpbmcubmV0L2VuL2F1dGg_dXNlcj00MzMwMDA4NzEmY29kZT0xZDE3OTYyMTE3YWUwMzNjN2QyOWFlOTdkZWFhZjY1MyZyZWRpcmVjdFBhZ2U9JTJGYWNjb3VudCZyZWRpcmVjdFBhZ2VQYXJhbXMlNUJ1c2VyJTVEPTQzMzAwMDg3MQ==	Get hash	malicious	Unknown	Browse	3.128.228.77
EUT-ASEUTIPNetworkRU	https://stacksports.captainu.com	Get hash	malicious	Unknown	Browse	77.232.36.155
	http://blacksaltys.com	Get hash	malicious	Unknown	Browse	77.232.36.155
	https://imago-technologies.com/	Get hash	malicious	Unknown	Browse	77.232.36.155
	http://twbcompany.com	Get hash	malicious	Unknown	Browse	77.232.36.155
	http://www.twbcompany.com	Get hash	malicious	Unknown	Browse	77.232.36.155
	874A7cigvX.exe	Get hash	malicious	Tofsee	Browse	77.232.41.29
	RSno9EH0K9.exe	Get hash	malicious	Tofsee	Browse	77.232.41.29
	ODy57hA4Su.exe	Get hash	malicious	Tofsee	Browse	77.232.41.29
	Uc84uB877e.exe	Get hash	malicious	Tofsee	Browse	77.232.41.29
	qkkcfptf.exe	Get hash	malicious	Tofsee	Browse	77.232.41.29

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.040688983304855
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	na.elf
File size:	169'319 bytes
MD5:	bdc4463c2ff5e4ba7326a28c87657357
SHA1:	d923abe1d944c52d48a7d2497a6bffee0209b22b
SHA256:	2b273448e301b5cffa49faa820bfb0c8ae88e59bef062115ae31d31fba9469f8
SHA512:	ba2c404acb69caba695dcf24be0895469e120a4317c6555d5ae3e58e76fc8707e1df97ae12267deea80f39c136653aa6ef4b4e6ffcb60630a6cb62af74c05f2b
SSDEEP:	3072:1j6EKHF/Qd3862W1qUcFSjMsY6IVp179zKbA:1+EKHF/Q0S8pVpN
TLSH:	A0F3533E7E21BF7EE678863107F65FB0939621D227D19381E26CC7185EB128C489E794
File Content Preview:	.ELF.....................@.....4..:\|.....4. ...(....p........@...@...........................@...@...........................F...F........_.........dt.Q.................................................F..<...'......!'.......................<...'......!...

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4002b0
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	146044
Section Header Size:	40
Number of Section Headers:	22
Header String Table Index:	19

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.reginfo	MIPS_REGINFO	0x4000b4	0xb4	0x18	0x18	0x2	A	0	0	4
.init	PROGBITS	0x4000cc	0xcc	0x8c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400160	0x160	0x1d9c0	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x41db20	0x1db20	0x5c	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x41db80	0x1db80	0x1b38	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x460000	0x20000	0x4	0x0	0x3	WA	0	0	4
.ctors	PROGBITS	0x460004	0x20004	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x46000c	0x2000c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x460014	0x20014	0x4	0x0	0x3	WA	0	0	4
.data.rel.ro	PROGBITS	0x460018	0x20018	0x30	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x460050	0x20050	0x450	0x0	0x3	WA	0	0	16
.got	PROGBITS	0x4604a0	0x204a0	0x524	0x4	0x10000003	WAp	0	0	16
.sdata	PROGBITS	0x4609c4	0x209c4	0x4	0x0	0x10000003	WAp	0	0	4
.sbss	NOBITS	0x4609c8	0x209c8	0x8	0x0	0x10000003	WAp	0	0	4
.bss	NOBITS	0x4609d0	0x209c8	0x5600	0x0	0x3	WA	0	0	16
.comment	PROGBITS	0x0	0x209c8	0xc4e	0x0	0x0		0	0	1
.mdebug.abi32	PROGBITS	0xc4e	0x21616	0x0	0x0	0x0		0	0	1
.pdr	PROGBITS	0x0	0x21618	0x23c0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x239d8	0xa1	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x23dec	0x3320	0x10	0x0		21	345	4
.strtab	STRTAB	0x0	0x2710c	0x245b	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
<unknown>	0xb4	0x4000b4	0x4000b4	0x18	0x18	0.9834	0x4	R	0x4	.reginfo
LOAD	0x0	0x400000	0x400000	0x1f6b8	0x1f6b8	4.9770	0x5	R E	0x10000	.reginfo .init .text .fini .rodata
LOAD	0x20000	0x460000	0x460000	0x9c8	0x5fd0	4.1364	0x6	RW	0x10000	.eh_frame .ctors .dtors .jcr .data.rel.ro .data .got .sdata .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x4000cc	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x400160	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x41db20	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x41db80	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x460000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x460004	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x46000c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x460014	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x460018	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x460050	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x4604a0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x4609c4	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x4609c8	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x4609d0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0xc4e	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
C.0.3659	.symtab	0x460020	40	OBJECT	<unknown>	DEFAULT	10
C.1.3455	.symtab	0x41e170	24	OBJECT	<unknown>	DEFAULT	5
C.10.3902	.symtab	0x41df70	16	OBJECT	<unknown>	DEFAULT	5
C.10.3902	.symtab	0x41dfd8	12	OBJECT	<unknown>	DEFAULT	5
C.11.3903	.symtab	0x41df58	24	OBJECT	<unknown>	DEFAULT	5
C.11.3903	.symtab	0x41dfc4	20	OBJECT	<unknown>	DEFAULT	5
C.12.3904	.symtab	0x41df40	24	OBJECT	<unknown>	DEFAULT	5
C.12.3904	.symtab	0x41dfb0	20	OBJECT	<unknown>	DEFAULT	5
C.18.3923	.symtab	0x41df90	25	OBJECT	<unknown>	DEFAULT	5
C.18.3938	.symtab	0x41df24	16	OBJECT	<unknown>	DEFAULT	5
C.19.3948	.symtab	0x41df14	16	OBJECT	<unknown>	DEFAULT	5
C.22.3969	.symtab	0x41df10	2	OBJECT	<unknown>	DEFAULT	5
C.44.4856	.symtab	0x41db8c	8	OBJECT	<unknown>	DEFAULT	5
C.7.4485	.symtab	0x460018	8	OBJECT	<unknown>	DEFAULT	10
C.9.3901	.symtab	0x41df80	16	OBJECT	<unknown>	DEFAULT	5
C.9.3901	.symtab	0x41dfe4	12	OBJECT	<unknown>	DEFAULT	5
FRAMESZ	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
GPOFF	.symtab	0x18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
LOCALSZ	.symtab	0x3	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
RAOFF	.symtab	0x1c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
V0OFF	.symtab	0x14	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_Exit	.symtab	0x417f40	92	FUNC	<unknown>	DEFAULT	3
_GLOBAL_OFFSET_TABLE_	.symtab	0x4604a0	0	OBJECT	<unknown>	DEFAULT	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x460008	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x460004	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x460330	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x41e610	768	OBJECT	<unknown>	DEFAULT	5
__DTOR_END__	.symtab	0x460010	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x46000c	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x460000	0	OBJECT	<unknown>	DEFAULT	6
__FRAME_END__	.symtab	0x460000	0	OBJECT	<unknown>	DEFAULT	6
__GI___C_ctype_b	.symtab	0x460330	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_b	.symtab	0x460334	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x413100	24	FUNC	<unknown>	HIDDEN	3
__GI___fcntl_nocancel	.symtab	0x412908	136	FUNC	<unknown>	HIDDEN	3
__GI___fgetc_unlocked	.symtab	0x41ab00	388	FUNC	<unknown>	HIDDEN	3
__GI___glibc_strerror_r	.symtab	0x41b9b0	68	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl	.symtab	0x412880	136	FUNC	<unknown>	HIDDEN	3
__GI___sigaddset	.symtab	0x414548	44	FUNC	<unknown>	HIDDEN	3
__GI___sigdelset	.symtab	0x414574	48	FUNC	<unknown>	HIDDEN	3
__GI___sigismember	.symtab	0x414520	40	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_fini	.symtab	0x417110	204	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_init	.symtab	0x417264	140	FUNC	<unknown>	HIDDEN	3
__GI___xpg_strerror_r	.symtab	0x41ba00	388	FUNC	<unknown>	HIDDEN	3
__GI__exit	.symtab	0x417f40	92	FUNC	<unknown>	HIDDEN	3
__GI_abort	.symtab	0x415d30	408	FUNC	<unknown>	HIDDEN	3
__GI_atoi	.symtab	0x4166a0	28	FUNC	<unknown>	HIDDEN	3
__GI_bind	.symtab	0x413e90	88	FUNC	<unknown>	HIDDEN	3
__GI_brk	.symtab	0x41be40	112	FUNC	<unknown>	HIDDEN	3
__GI_clock_getres	.symtab	0x4177a0	88	FUNC	<unknown>	HIDDEN	3
__GI_close	.symtab	0x412b40	88	FUNC	<unknown>	HIDDEN	3
__GI_closedir	.symtab	0x412ba0	308	FUNC	<unknown>	HIDDEN	3
__GI_config_close	.symtab	0x418574	132	FUNC	<unknown>	HIDDEN	3
__GI_config_open	.symtab	0x4185f8	116	FUNC	<unknown>	HIDDEN	3
__GI_config_read	.symtab	0x4180b0	1220	FUNC	<unknown>	HIDDEN	3
__GI_connect	.symtab	0x413ef0	92	FUNC	<unknown>	HIDDEN	3
__GI_dup2	.symtab	0x412470	88	FUNC	<unknown>	HIDDEN	3
__GI_errno	.symtab	0x461ae0	4	OBJECT	<unknown>	HIDDEN	15
__GI_execve	.symtab	0x4124d0	88	FUNC	<unknown>	HIDDEN	3
__GI_exit	.symtab	0x416940	236	FUNC	<unknown>	HIDDEN	3
__GI_fclose	.symtab	0x418670	512	FUNC	<unknown>	HIDDEN	3
__GI_fcntl	.symtab	0x412880	136	FUNC	<unknown>	HIDDEN	3
__GI_fflush_unlocked	.symtab	0x41a86c	648	FUNC	<unknown>	HIDDEN	3
__GI_fgetc	.symtab	0x41a4e0	264	FUNC	<unknown>	HIDDEN	3
__GI_fgetc_unlocked	.symtab	0x41ab00	388	FUNC	<unknown>	HIDDEN	3
__GI_fgets	.symtab	0x41a5f0	212	FUNC	<unknown>	HIDDEN	3
__GI_fgets_unlocked	.symtab	0x41ac90	276	FUNC	<unknown>	HIDDEN	3
__GI_fopen	.symtab	0x418870	28	FUNC	<unknown>	HIDDEN	3
__GI_fork	.symtab	0x412660	88	FUNC	<unknown>	HIDDEN	3
__GI_fputs_unlocked	.symtab	0x41adb0	124	FUNC	<unknown>	HIDDEN	3
__GI_fseek	.symtab	0x41d730	68	FUNC	<unknown>	HIDDEN	3
__GI_fseeko64	.symtab	0x41d780	392	FUNC	<unknown>	HIDDEN	3
__GI_fstat	.symtab	0x417940	144	FUNC	<unknown>	HIDDEN	3
__GI_fwrite_unlocked	.symtab	0x41ae30	268	FUNC	<unknown>	HIDDEN	3
__GI_getc_unlocked	.symtab	0x41ab00	388	FUNC	<unknown>	HIDDEN	3
__GI_getdtablesize	.symtab	0x417d40	72	FUNC	<unknown>	HIDDEN	3
__GI_getegid	.symtab	0x417800	16	FUNC	<unknown>	HIDDEN	3
__GI_geteuid	.symtab	0x417810	16	FUNC	<unknown>	HIDDEN	3
__GI_getgid	.symtab	0x417a80	16	FUNC	<unknown>	HIDDEN	3
__GI_getpagesize	.symtab	0x417760	48	FUNC	<unknown>	HIDDEN	3
__GI_getpid	.symtab	0x4125c0	16	FUNC	<unknown>	HIDDEN	3
__GI_getrlimit	.symtab	0x41beb0	88	FUNC	<unknown>	HIDDEN	3
__GI_getsockname	.symtab	0x413f50	88	FUNC	<unknown>	HIDDEN	3
__GI_getuid	.symtab	0x417790	16	FUNC	<unknown>	HIDDEN	3
__GI_h_errno	.symtab	0x461ae4	4	OBJECT	<unknown>	HIDDEN	15
__GI_htonl	.symtab	0x413550	8	FUNC	<unknown>	HIDDEN	3
__GI_htons	.symtab	0x413558	8	FUNC	<unknown>	HIDDEN	3
__GI_inet_addr	.symtab	0x413e40	72	FUNC	<unknown>	HIDDEN	3
__GI_inet_aton	.symtab	0x41bcc0	244	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntop	.symtab	0x413ad0	868	FUNC	<unknown>	HIDDEN	3
__GI_inet_pton	.symtab	0x413648	704	FUNC	<unknown>	HIDDEN	3
__GI_initstate_r	.symtab	0x416550	328	FUNC	<unknown>	HIDDEN	3
__GI_ioctl	.symtab	0x41bf10	108	FUNC	<unknown>	HIDDEN	3
__GI_isatty	.symtab	0x41bbd0	60	FUNC	<unknown>	HIDDEN	3
__GI_kill	.symtab	0x412820	92	FUNC	<unknown>	HIDDEN	3
__GI_listen	.symtab	0x414030	88	FUNC	<unknown>	HIDDEN	3
__GI_lseek64	.symtab	0x41d680	168	FUNC	<unknown>	HIDDEN	3
__GI_memchr	.symtab	0x41d410	260	FUNC	<unknown>	HIDDEN	3
__GI_memcpy	.symtab	0x413220	308	FUNC	<unknown>	HIDDEN	3
__GI_memmove	.symtab	0x41af40	824	FUNC	<unknown>	HIDDEN	3
__GI_mempcpy	.symtab	0x41d630	76	FUNC	<unknown>	HIDDEN	3
__GI_memrchr	.symtab	0x41d520	260	FUNC	<unknown>	HIDDEN	3
__GI_memset	.symtab	0x413190	144	FUNC	<unknown>	HIDDEN	3
__GI_mmap	.symtab	0x4176b0	132	FUNC	<unknown>	HIDDEN	3
__GI_mremap	.symtab	0x417e50	124	FUNC	<unknown>	HIDDEN	3
__GI_munmap	.symtab	0x417d90	88	FUNC	<unknown>	HIDDEN	3
__GI_nanosleep	.symtab	0x417df0	92	FUNC	<unknown>	HIDDEN	3
__GI_ntohl	.symtab	0x413540	8	FUNC	<unknown>	HIDDEN	3
__GI_ntohs	.symtab	0x413548	8	FUNC	<unknown>	HIDDEN	3
__GI_open	.symtab	0x412540	124	FUNC	<unknown>	HIDDEN	3
__GI_opendir	.symtab	0x412df4	260	FUNC	<unknown>	HIDDEN	3
__GI_pipe	.symtab	0x4123d0	64	FUNC	<unknown>	HIDDEN	3
__GI_raise	.symtab	0x41bdc0	76	FUNC	<unknown>	HIDDEN	3
__GI_random	.symtab	0x415ef0	164	FUNC	<unknown>	HIDDEN	3
__GI_random_r	.symtab	0x416314	172	FUNC	<unknown>	HIDDEN	3
__GI_rawmemchr	.symtab	0x41b3e0	192	FUNC	<unknown>	HIDDEN	3
__GI_read	.symtab	0x4127c0	88	FUNC	<unknown>	HIDDEN	3
__GI_readdir	.symtab	0x412ff0	264	FUNC	<unknown>	HIDDEN	3
__GI_readdir64	.symtab	0x417fa0	272	FUNC	<unknown>	HIDDEN	3
__GI_readlink	.symtab	0x412760	88	FUNC	<unknown>	HIDDEN	3
__GI_recv	.symtab	0x414090	92	FUNC	<unknown>	HIDDEN	3
__GI_recvfrom	.symtab	0x414174	32	FUNC	<unknown>	HIDDEN	3
__GI_sbrk	.symtab	0x4179d0	164	FUNC	<unknown>	HIDDEN	3
__GI_select	.symtab	0x41273c	32	FUNC	<unknown>	HIDDEN	3
__GI_send	.symtab	0x4141a0	92	FUNC	<unknown>	HIDDEN	3
__GI_sendto	.symtab	0x414284	32	FUNC	<unknown>	HIDDEN	3
__GI_setsid	.symtab	0x4129f0	88	FUNC	<unknown>	HIDDEN	3
__GI_setsockopt	.symtab	0x4142b0	124	FUNC	<unknown>	HIDDEN	3
__GI_setstate_r	.symtab	0x4161d0	324	FUNC	<unknown>	HIDDEN	3
__GI_sigaction	.symtab	0x417740	28	FUNC	<unknown>	HIDDEN	3
__GI_sigaddset	.symtab	0x414390	104	FUNC	<unknown>	HIDDEN	3
__GI_sigemptyset	.symtab	0x414400	36	FUNC	<unknown>	HIDDEN	3
__GI_signal	.symtab	0x414430	236	FUNC	<unknown>	HIDDEN	3
__GI_sigprocmask	.symtab	0x412ae0	96	FUNC	<unknown>	HIDDEN	3
__GI_sleep	.symtab	0x416a30	288	FUNC	<unknown>	HIDDEN	3
__GI_socket	.symtab	0x414330	88	FUNC	<unknown>	HIDDEN	3
__GI_sprintf	.symtab	0x418890	80	FUNC	<unknown>	HIDDEN	3
__GI_srandom_r	.symtab	0x4163c0	400	FUNC	<unknown>	HIDDEN	3
__GI_stat	.symtab	0x412a50	144	FUNC	<unknown>	HIDDEN	3
__GI_strchr	.symtab	0x41b8b0	248	FUNC	<unknown>	HIDDEN	3
__GI_strchrnul	.symtab	0x41b780	248	FUNC	<unknown>	HIDDEN	3
__GI_strcmp	.symtab	0x41b5b0	44	FUNC	<unknown>	HIDDEN	3
__GI_strcoll	.symtab	0x41b5b0	44	FUNC	<unknown>	HIDDEN	3
__GI_strcpy	.symtab	0x41b880	36	FUNC	<unknown>	HIDDEN	3
__GI_strcspn	.symtab	0x41b350	144	FUNC	<unknown>	HIDDEN	3
__GI_strlen	.symtab	0x41b4f0	184	FUNC	<unknown>	HIDDEN	3
__GI_strncpy	.symtab	0x413460	188	FUNC	<unknown>	HIDDEN	3
__GI_strnlen	.symtab	0x41b680	248	FUNC	<unknown>	HIDDEN	3
__GI_strpbrk	.symtab	0x41bb90	64	FUNC	<unknown>	HIDDEN	3
__GI_strrchr	.symtab	0x41b5e0	160	FUNC	<unknown>	HIDDEN	3
__GI_strspn	.symtab	0x41b4a0	72	FUNC	<unknown>	HIDDEN	3
__GI_strstr	.symtab	0x413360	256	FUNC	<unknown>	HIDDEN	3
__GI_strtok	.symtab	0x413520	32	FUNC	<unknown>	HIDDEN	3
__GI_strtok_r	.symtab	0x41b280	208	FUNC	<unknown>	HIDDEN	3
__GI_strtol	.symtab	0x4166c0	28	FUNC	<unknown>	HIDDEN	3
__GI_sysconf	.symtab	0x416d4c	748	FUNC	<unknown>	HIDDEN	3
__GI_tcgetattr	.symtab	0x41bc10	176	FUNC	<unknown>	HIDDEN	3
__GI_time	.symtab	0x4125d0	16	FUNC	<unknown>	HIDDEN	3
__GI_times	.symtab	0x417ed0	16	FUNC	<unknown>	HIDDEN	3
__GI_vsnprintf	.symtab	0x4188e0	252	FUNC	<unknown>	HIDDEN	3
__GI_wcrtomb	.symtab	0x41c150	108	FUNC	<unknown>	HIDDEN	3
__GI_wcsnrtombs	.symtab	0x41c200	216	FUNC	<unknown>	HIDDEN	3
__GI_wcsrtombs	.symtab	0x41c1c0	64	FUNC	<unknown>	HIDDEN	3
__GI_write	.symtab	0x412990	88	FUNC	<unknown>	HIDDEN	3
__JCR_END__	.symtab	0x460014	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x460014	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x461acc	4	OBJECT	<unknown>	HIDDEN	15
__atexit_lock	.symtab	0x460300	24	OBJECT	<unknown>	DEFAULT	11
__bss_start	.symtab	0x4609c8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x4171dc	136	FUNC	<unknown>	DEFAULT	3
__ctype_b	.symtab	0x460334	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x463b10	4	OBJECT	<unknown>	HIDDEN	15
__data_start	.symtab	0x460060	0	OBJECT	<unknown>	DEFAULT	11
__deregister_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x41dab0	0	FUNC	<unknown>	DEFAULT	3
__do_global_dtors_aux	.symtab	0x400160	0	FUNC	<unknown>	DEFAULT	3
__dso_handle	.symtab	0x4609c4	0	OBJECT	<unknown>	HIDDEN	13
__environ	.symtab	0x461ac4	4	OBJECT	<unknown>	DEFAULT	15
__errno_location	.symtab	0x413100	24	FUNC	<unknown>	DEFAULT	3
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x461ab0	4	OBJECT	<unknown>	HIDDEN	15
__fcntl_nocancel	.symtab	0x412908	136	FUNC	<unknown>	DEFAULT	3
__fgetc_unlocked	.symtab	0x41ab00	388	FUNC	<unknown>	DEFAULT	3
__fini_array_end	.symtab	0x460004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x460004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__getdents	.symtab	0x417820	276	FUNC	<unknown>	HIDDEN	3
__getdents64	.symtab	0x41bf80	460	FUNC	<unknown>	HIDDEN	3
__getpagesize	.symtab	0x417760	48	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r	.symtab	0x41b9b0	68	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x460004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x460004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__libc_close	.symtab	0x412b40	88	FUNC	<unknown>	DEFAULT	3
__libc_connect	.symtab	0x413ef0	92	FUNC	<unknown>	DEFAULT	3
__libc_fcntl	.symtab	0x412880	136	FUNC	<unknown>	DEFAULT	3
__libc_fork	.symtab	0x412660	88	FUNC	<unknown>	DEFAULT	3
__libc_lseek64	.symtab	0x41d680	168	FUNC	<unknown>	DEFAULT	3
__libc_nanosleep	.symtab	0x417df0	92	FUNC	<unknown>	DEFAULT	3
__libc_open	.symtab	0x412540	124	FUNC	<unknown>	DEFAULT	3
__libc_read	.symtab	0x4127c0	88	FUNC	<unknown>	DEFAULT	3
__libc_recv	.symtab	0x414090	92	FUNC	<unknown>	DEFAULT	3
__libc_recvfrom	.symtab	0x414174	32	FUNC	<unknown>	DEFAULT	3
__libc_select	.symtab	0x41273c	32	FUNC	<unknown>	DEFAULT	3
__libc_send	.symtab	0x4141a0	92	FUNC	<unknown>	DEFAULT	3
__libc_sendto	.symtab	0x414284	32	FUNC	<unknown>	DEFAULT	3
__libc_sigaction	.symtab	0x417740	28	FUNC	<unknown>	DEFAULT	3
__libc_stack_end	.symtab	0x461ac0	4	OBJECT	<unknown>	DEFAULT	15
__libc_write	.symtab	0x412990	88	FUNC	<unknown>	DEFAULT	3
__malloc_consolidate	.symtab	0x415834	520	FUNC	<unknown>	HIDDEN	3
__malloc_largebin_index	.symtab	0x4145b0	140	FUNC	<unknown>	DEFAULT	3
__malloc_lock	.symtab	0x460200	24	OBJECT	<unknown>	DEFAULT	11
__malloc_state	.symtab	0x465c08	888	OBJECT	<unknown>	DEFAULT	15
__malloc_trim	.symtab	0x415710	292	FUNC	<unknown>	DEFAULT	3
__pagesize	.symtab	0x461ac8	4	OBJECT	<unknown>	DEFAULT	15
__preinit_array_end	.symtab	0x460004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x460004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__progname	.symtab	0x460324	4	OBJECT	<unknown>	DEFAULT	11
__progname_full	.symtab	0x460328	4	OBJECT	<unknown>	DEFAULT	11
__pthread_initialize_minimal	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x4170d8	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_lock	.symtab	0x4170d0	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_trylock	.symtab	0x4170d0	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_unlock	.symtab	0x4170d0	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_0	.symtab	0x4170d0	8	FUNC	<unknown>	DEFAULT	3
__register_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__rtld_fini	.symtab	0x461ad0	4	OBJECT	<unknown>	HIDDEN	15
__sigaddset	.symtab	0x414548	44	FUNC	<unknown>	DEFAULT	3
__sigdelset	.symtab	0x414574	48	FUNC	<unknown>	DEFAULT	3
__sigismember	.symtab	0x414520	40	FUNC	<unknown>	DEFAULT	3
__start	.symtab	0x4002b0	100	FUNC	<unknown>	DEFAULT	3
__stdin	.symtab	0x46038c	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x41c2e0	144	FUNC	<unknown>	HIDDEN	3
__stdio_WRITE	.symtab	0x41c370	296	FUNC	<unknown>	HIDDEN	3
__stdio_adjust_position	.symtab	0x41d910	292	FUNC	<unknown>	HIDDEN	3
__stdio_fwrite	.symtab	0x41c4a0	472	FUNC	<unknown>	HIDDEN	3
__stdio_init_mutex	.symtab	0x418e2c	32	FUNC	<unknown>	HIDDEN	3
__stdio_mutex_initializer.4474	.symtab	0x41e910	24	OBJECT	<unknown>	DEFAULT	5
__stdio_rfill	.symtab	0x41c680	88	FUNC	<unknown>	HIDDEN	3
__stdio_seek	.symtab	0x41da40	112	FUNC	<unknown>	HIDDEN	3
__stdio_trans2r_o	.symtab	0x41c6e0	228	FUNC	<unknown>	HIDDEN	3
__stdio_trans2w_o	.symtab	0x41c7d0	312	FUNC	<unknown>	HIDDEN	3
__stdio_wcommit	.symtab	0x418f80	100	FUNC	<unknown>	HIDDEN	3
__stdout	.symtab	0x460390	4	OBJECT	<unknown>	DEFAULT	11
__sys_recvfrom	.symtab	0x4140f0	132	FUNC	<unknown>	DEFAULT	3
__sys_sendto	.symtab	0x414200	132	FUNC	<unknown>	DEFAULT	3
__syscall_error	.symtab	0x412410	92	FUNC	<unknown>	DEFAULT	3
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x417ee0	88	FUNC	<unknown>	DEFAULT	3
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x4126c0	124	FUNC	<unknown>	DEFAULT	3
__uClibc_fini	.symtab	0x417110	204	FUNC	<unknown>	DEFAULT	3
__uClibc_init	.symtab	0x417264	140	FUNC	<unknown>	DEFAULT	3
__uClibc_main	.symtab	0x4172f0	948	FUNC	<unknown>	DEFAULT	3
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x460320	4	OBJECT	<unknown>	HIDDEN	11
__xpg_strerror_r	.symtab	0x41ba00	388	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x417b88	220	FUNC	<unknown>	HIDDEN	3
__xstat64_conv	.symtab	0x417a90	248	FUNC	<unknown>	HIDDEN	3
__xstat_conv	.symtab	0x417c64	220	FUNC	<unknown>	HIDDEN	3
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_atoi	.symtab	0x411154	204	FUNC	<unknown>	DEFAULT	3
_bss_custom_printf_spec	.symtab	0x463b00	10	OBJECT	<unknown>	DEFAULT	15
_charpad	.symtab	0x418ff0	156	FUNC	<unknown>	DEFAULT	3
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x465f80	40	OBJECT	<unknown>	HIDDEN	15
_custom_printf_handler	.symtab	0x465fa8	40	OBJECT	<unknown>	HIDDEN	15
_custom_printf_spec	.symtab	0x460490	4	OBJECT	<unknown>	HIDDEN	11
_dl_aux_init	.symtab	0x41be10	40	FUNC	<unknown>	DEFAULT	3
_dl_phdr	.symtab	0x4609c8	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x4609cc	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x4609c8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x465fd0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x461ae0	4	OBJECT	<unknown>	DEFAULT	15
_exit	.symtab	0x417f40	92	FUNC	<unknown>	DEFAULT	3
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fbss	.symtab	0x4609c8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_fdata	.symtab	0x460050	0	NOTYPE	<unknown>	DEFAULT	11
_fini	.symtab	0x41db20	28	FUNC	<unknown>	DEFAULT	4
_fixed_buffers	.symtab	0x461af8	8192	OBJECT	<unknown>	DEFAULT	15
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x41908c	232	FUNC	<unknown>	DEFAULT	3
_fpmaxtostr	.symtab	0x41cb40	2252	FUNC	<unknown>	HIDDEN	3
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ftext	.symtab	0x400160	0	NOTYPE	<unknown>	DEFAULT	3
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_gp	.symtab	0x468490	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_gp_disp	.symtab	0x0	0	OBJECT	<unknown>	DEFAULT	SHN_UNDEF
_h_errno	.symtab	0x461ae4	4	OBJECT	<unknown>	DEFAULT	15
_init	.symtab	0x4000cc	28	FUNC	<unknown>	DEFAULT	2
_load_inttype	.symtab	0x41c910	132	FUNC	<unknown>	HIDDEN	3
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x419a40	248	FUNC	<unknown>	HIDDEN	3
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x419e4c	1684	FUNC	<unknown>	HIDDEN	3
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x419b40	100	FUNC	<unknown>	HIDDEN	3
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x419bb0	548	FUNC	<unknown>	HIDDEN	3
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x419de0	108	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_pop_restore	.symtab	0x4170ec	36	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_push_defer	.symtab	0x4170e0	12	FUNC	<unknown>	DEFAULT	3
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x465bf8	16	OBJECT	<unknown>	HIDDEN	15
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x4189e0	908	FUNC	<unknown>	HIDDEN	3
_stdio_init	.symtab	0x418d70	188	FUNC	<unknown>	HIDDEN	3
_stdio_openlist	.symtab	0x460394	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x460340	24	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_dec_use	.symtab	0x41a6d0	412	FUNC	<unknown>	HIDDEN	3
_stdio_openlist_del_count	.symtab	0x461af4	4	OBJECT	<unknown>	DEFAULT	15
_stdio_openlist_del_lock	.symtab	0x460358	24	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_use_count	.symtab	0x461af0	4	OBJECT	<unknown>	DEFAULT	15
_stdio_streams	.symtab	0x460398	240	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x418e4c	304	FUNC	<unknown>	HIDDEN	3
_stdio_user_locking	.symtab	0x460370	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x4166e0	600	FUNC	<unknown>	HIDDEN	3
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x41c9a0	68	FUNC	<unknown>	HIDDEN	3
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x41eaa0	2934	OBJECT	<unknown>	HIDDEN	5
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x41c9f0	332	FUNC	<unknown>	HIDDEN	3
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x419174	2240	FUNC	<unknown>	HIDDEN	3
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x415d30	408	FUNC	<unknown>	DEFAULT	3
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
add_attack	.symtab	0x403884	292	FUNC	<unknown>	DEFAULT	3
add_entry	.symtab	0x41216c	232	FUNC	<unknown>	DEFAULT	3
atoi	.symtab	0x4166a0	28	FUNC	<unknown>	DEFAULT	3
atol	.symtab	0x4166a0	28	FUNC	<unknown>	DEFAULT	3
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_add_pid	.symtab	0x402a90	200	FUNC	<unknown>	DEFAULT	3
attack_init	.symtab	0x4026a0	444	FUNC	<unknown>	DEFAULT	3
attack_ongoing	.symtab	0x460a08	80	OBJECT	<unknown>	DEFAULT	15
attack_parse	.symtab	0x402c14	1552	FUNC	<unknown>	DEFAULT	3
attack_remove_id	.symtab	0x402b58	188	FUNC	<unknown>	DEFAULT	3
attack_start	.symtab	0x403224	628	FUNC	<unknown>	DEFAULT	3
attack_stop	.symtab	0x40285c	564	FUNC	<unknown>	DEFAULT	3
attacks_ack	.symtab	0x404280	2708	FUNC	<unknown>	DEFAULT	3
attacks_gre	.symtab	0x404d20	2164	FUNC	<unknown>	DEFAULT	3
attacks_icmp	.symtab	0x4055a0	2028	FUNC	<unknown>	DEFAULT	3
attacks_raknet	.symtab	0x405d90	3300	FUNC	<unknown>	DEFAULT	3
attacks_rand	.symtab	0x406a80	2112	FUNC	<unknown>	DEFAULT	3
attacks_socket	.symtab	0x407384	2392	FUNC	<unknown>	DEFAULT	3
attacks_std	.symtab	0x407ce0	2192	FUNC	<unknown>	DEFAULT	3
attacks_stomp	.symtab	0x408570	4000	FUNC	<unknown>	DEFAULT	3
attacks_tfo	.symtab	0x409510	3332	FUNC	<unknown>	DEFAULT	3
attacks_udp	.symtab	0x40a220	2700	FUNC	<unknown>	DEFAULT	3
attacks_vse	.symtab	0x40acb0	2704	FUNC	<unknown>	DEFAULT	3
attacks_wra	.symtab	0x40b740	3220	FUNC	<unknown>	DEFAULT	3
authenticate	.symtab	0x4016f0	464	FUNC	<unknown>	DEFAULT	3
been_there_done_that	.symtab	0x461aa0	4	OBJECT	<unknown>	DEFAULT	15
bind	.symtab	0x413e90	88	FUNC	<unknown>	DEFAULT	3
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x41be40	112	FUNC	<unknown>	DEFAULT	3
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x414430	236	FUNC	<unknown>	DEFAULT	3
calloc	.symtab	0x415120	348	FUNC	<unknown>	DEFAULT	3
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
check_conn	.symtab	0x4072c0	196	FUNC	<unknown>	DEFAULT	3
check_proc	.symtab	0x40d74c	980	FUNC	<unknown>	DEFAULT	3
checksum	.symtab	0x40dd40	324	FUNC	<unknown>	DEFAULT	3
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock	.symtab	0x413120	108	FUNC	<unknown>	DEFAULT	3
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x4177a0	88	FUNC	<unknown>	DEFAULT	3
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x412b40	88	FUNC	<unknown>	DEFAULT	3
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x412ba0	308	FUNC	<unknown>	DEFAULT	3
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cnc_ports	.symtab	0x460074	24	OBJECT	<unknown>	DEFAULT	11
command_parse	.symtab	0x400320	1168	FUNC	<unknown>	DEFAULT	3
completed.4632	.symtab	0x4609d0	1	OBJECT	<unknown>	DEFAULT	15
conn	.symtab	0x463b20	8368	OBJECT	<unknown>	DEFAULT	15
connect	.symtab	0x413ef0	92	FUNC	<unknown>	DEFAULT	3
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
data_start	.symtab	0x460060	0	OBJECT	<unknown>	DEFAULT	11
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dup2	.symtab	0x412470	88	FUNC	<unknown>	DEFAULT	3
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x461ac4	4	OBJECT	<unknown>	DEFAULT	15
errno	.symtab	0x461ae0	4	OBJECT	<unknown>	DEFAULT	15
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
esi_fd	.symtab	0x46008c	4	OBJECT	<unknown>	DEFAULT	11
estridx	.symtab	0x41ea10	126	OBJECT	<unknown>	DEFAULT	5
exe_access	.symtab	0x40d1d0	484	FUNC	<unknown>	DEFAULT	3
execve	.symtab	0x4124d0	88	FUNC	<unknown>	DEFAULT	3
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x416940	236	FUNC	<unknown>	DEFAULT	3
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x41f638	72	OBJECT	<unknown>	DEFAULT	5
fclose	.symtab	0x418670	512	FUNC	<unknown>	DEFAULT	3
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x412880	136	FUNC	<unknown>	DEFAULT	3
fd_to_DIR	.symtab	0x412ce0	276	FUNC	<unknown>	DEFAULT	3
fdopendir	.symtab	0x412ef8	248	FUNC	<unknown>	DEFAULT	3
fflush_unlocked	.symtab	0x41a86c	648	FUNC	<unknown>	DEFAULT	3
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x41a4e0	264	FUNC	<unknown>	DEFAULT	3
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x41ab00	388	FUNC	<unknown>	DEFAULT	3
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x41a5f0	212	FUNC	<unknown>	DEFAULT	3
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x41ac90	276	FUNC	<unknown>	DEFAULT	3
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x41f620	20	OBJECT	<unknown>	DEFAULT	5
fopen	.symtab	0x418870	28	FUNC	<unknown>	DEFAULT	3
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x412660	88	FUNC	<unknown>	DEFAULT	3
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x41adb0	124	FUNC	<unknown>	DEFAULT	3
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x40021c	0	FUNC	<unknown>	DEFAULT	3
free	.symtab	0x415a3c	660	FUNC	<unknown>	DEFAULT	3
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
free_opts	.symtab	0x4039a8	260	FUNC	<unknown>	DEFAULT	3
fseek	.symtab	0x41d730	68	FUNC	<unknown>	DEFAULT	3
fseeko	.symtab	0x41d730	68	FUNC	<unknown>	DEFAULT	3
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x41d780	392	FUNC	<unknown>	DEFAULT	3
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x417940	144	FUNC	<unknown>	DEFAULT	3
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x41ae30	268	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
get_local_addr	.symtab	0x411a30	312	FUNC	<unknown>	DEFAULT	3
getc	.symtab	0x41a4e0	264	FUNC	<unknown>	DEFAULT	3
getc_unlocked	.symtab	0x41ab00	388	FUNC	<unknown>	DEFAULT	3
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x417d40	72	FUNC	<unknown>	DEFAULT	3
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x417800	16	FUNC	<unknown>	DEFAULT	3
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x417810	16	FUNC	<unknown>	DEFAULT	3
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x417a80	16	FUNC	<unknown>	DEFAULT	3
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x417760	48	FUNC	<unknown>	DEFAULT	3
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x4125c0	16	FUNC	<unknown>	DEFAULT	3
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x412530	16	FUNC	<unknown>	DEFAULT	3
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x41beb0	88	FUNC	<unknown>	DEFAULT	3
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x413f50	88	FUNC	<unknown>	DEFAULT	3
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x413fb0	124	FUNC	<unknown>	DEFAULT	3
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x417790	16	FUNC	<unknown>	DEFAULT	3
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gre.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x461ae4	4	OBJECT	<unknown>	DEFAULT	15
head	.symtab	0x460a60	4	OBJECT	<unknown>	DEFAULT	15
hlt	.symtab	0x40030c	0	NOTYPE	<unknown>	DEFAULT	3
htonl	.symtab	0x413550	8	FUNC	<unknown>	DEFAULT	3
htons	.symtab	0x413558	8	FUNC	<unknown>	DEFAULT	3
icmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
index	.symtab	0x41b8b0	248	FUNC	<unknown>	DEFAULT	3
inet_addr	.symtab	0x413e40	72	FUNC	<unknown>	DEFAULT	3
inet_aton	.symtab	0x41bcc0	244	FUNC	<unknown>	DEFAULT	3
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntop	.symtab	0x413ad0	868	FUNC	<unknown>	DEFAULT	3
inet_ntop4	.symtab	0x413908	456	FUNC	<unknown>	DEFAULT	3
inet_pton	.symtab	0x413648	704	FUNC	<unknown>	DEFAULT	3
inet_pton4	.symtab	0x413560	232	FUNC	<unknown>	DEFAULT	3
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x41604c	208	FUNC	<unknown>	DEFAULT	3
initstate_r	.symtab	0x416550	328	FUNC	<unknown>	DEFAULT	3
ioctl	.symtab	0x41bf10	108	FUNC	<unknown>	DEFAULT	3
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x41bbd0	60	FUNC	<unknown>	DEFAULT	3
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x412820	92	FUNC	<unknown>	DEFAULT	3
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_add_process	.symtab	0x40c5cc	172	FUNC	<unknown>	DEFAULT	3
killer_check_paths	.symtab	0x40c3e0	308	FUNC	<unknown>	DEFAULT	3
killer_find_realpath	.symtab	0x40c678	268	FUNC	<unknown>	DEFAULT	3
killer_pid	.symtab	0x4609f4	4	OBJECT	<unknown>	DEFAULT	15
killer_realpath	.symtab	0x460a74	4096	OBJECT	<unknown>	DEFAULT	15
killer_shoot_list	.symtab	0x40c784	796	FUNC	<unknown>	DEFAULT	3
killer_start	.symtab	0x40caa0	1840	FUNC	<unknown>	DEFAULT	3
killer_vanish_list	.symtab	0x40c514	184	FUNC	<unknown>	DEFAULT	3
libc/string/mips/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/mips/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/pipe.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/syscall_error.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x414030	88	FUNC	<unknown>	DEFAULT	3
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
locker.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
locker_find	.symtab	0x40d3b4	276	FUNC	<unknown>	DEFAULT	3
locker_getpids	.symtab	0x40d600	332	FUNC	<unknown>	DEFAULT	3
locker_init	.symtab	0x40db20	532	FUNC	<unknown>	DEFAULT	3
locker_insert	.symtab	0x40d4c8	312	FUNC	<unknown>	DEFAULT	3
locker_pid	.symtab	0x4609f0	4	OBJECT	<unknown>	DEFAULT	15
locker_process	.symtab	0x401d60	336	FUNC	<unknown>	DEFAULT	3
locker_status	.symtab	0x4609f8	1	OBJECT	<unknown>	DEFAULT	15
lseek64	.symtab	0x41d680	168	FUNC	<unknown>	DEFAULT	3
main	.symtab	0x40222c	1132	FUNC	<unknown>	DEFAULT	3
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
main_check_connection	.symtab	0x401020	356	FUNC	<unknown>	DEFAULT	3
main_disconnect_connection	.symtab	0x401184	280	FUNC	<unknown>	DEFAULT	3
main_handle_connection	.symtab	0x4018c0	1012	FUNC	<unknown>	DEFAULT	3
main_make_connection	.symtab	0x4007b0	2160	FUNC	<unknown>	DEFAULT	3
main_read_connection	.symtab	0x401608	232	FUNC	<unknown>	DEFAULT	3
main_read_data	.symtab	0x40129c	692	FUNC	<unknown>	DEFAULT	3
malloc	.symtab	0x41463c	2776	FUNC	<unknown>	DEFAULT	3
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x415cd0	84	FUNC	<unknown>	DEFAULT	3
memchr	.symtab	0x41d410	260	FUNC	<unknown>	DEFAULT	3
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x413220	308	FUNC	<unknown>	DEFAULT	3
memmove	.symtab	0x41af40	824	FUNC	<unknown>	DEFAULT	3
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x41d630	76	FUNC	<unknown>	DEFAULT	3
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x41d520	260	FUNC	<unknown>	DEFAULT	3
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x413190	144	FUNC	<unknown>	DEFAULT	3
methods	.symtab	0x460a04	4	OBJECT	<unknown>	DEFAULT	15
methods_len	.symtab	0x460a00	1	OBJECT	<unknown>	DEFAULT	15
mmap	.symtab	0x4176b0	132	FUNC	<unknown>	DEFAULT	3
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x417e50	124	FUNC	<unknown>	DEFAULT	3
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x417d90	88	FUNC	<unknown>	DEFAULT	3
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x460220	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x460240	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x417df0	92	FUNC	<unknown>	DEFAULT	3
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1303	.symtab	0x461a90	4	OBJECT	<unknown>	DEFAULT	15
nprocessors_onln	.symtab	0x416b50	508	FUNC	<unknown>	DEFAULT	3
ntohl	.symtab	0x413540	8	FUNC	<unknown>	DEFAULT	3
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x413548	8	FUNC	<unknown>	DEFAULT	3
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
number	.symtab	0x460070	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x460090	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x4600a0	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x4600b0	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x4600c0	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x4600d0	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x4600e0	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x4600f0	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x460100	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x460110	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x460120	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x460130	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x460140	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x460150	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x460160	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x460170	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x460180	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x460190	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x4601a0	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x4601b0	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x4601c0	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x4601d0	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x4601e0	4	OBJECT	<unknown>	DEFAULT	11
object.4644	.symtab	0x4609d4	24	OBJECT	<unknown>	DEFAULT	15
open	.symtab	0x412540	124	FUNC	<unknown>	DEFAULT	3
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x412df4	260	FUNC	<unknown>	DEFAULT	3
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
options_hex	.symtab	0x40363c	584	FUNC	<unknown>	DEFAULT	3
options_int	.symtab	0x403574	200	FUNC	<unknown>	DEFAULT	3
options_str	.symtab	0x403498	220	FUNC	<unknown>	DEFAULT	3
p.4630	.symtab	0x460050	0	OBJECT	<unknown>	DEFAULT	11
parse.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pipe	.symtab	0x4123d0	64	FUNC	<unknown>	DEFAULT	3
prctl	.symtab	0x4125e0	124	FUNC	<unknown>	DEFAULT	3
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4694	.symtab	0x41e940	12	OBJECT	<unknown>	DEFAULT	5
profiles.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
program_invocation_name	.symtab	0x460328	4	OBJECT	<unknown>	DEFAULT	11
program_invocation_short_name	.symtab	0x460324	4	OBJECT	<unknown>	DEFAULT	11
qual_chars.4702	.symtab	0x41e960	20	OBJECT	<unknown>	DEFAULT	5
raise	.symtab	0x41bdc0	76	FUNC	<unknown>	DEFAULT	3
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
raknet.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x415ed0	28	FUNC	<unknown>	DEFAULT	3
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_domain	.symtab	0x40e66c	328	FUNC	<unknown>	DEFAULT	3
rand_init	.symtab	0x40e450	248	FUNC	<unknown>	DEFAULT	3
rand_next	.symtab	0x40e548	292	FUNC	<unknown>	DEFAULT	3
rand_num	.symtab	0x40e7b4	148	FUNC	<unknown>	DEFAULT	3
rand_str	.symtab	0x40e848	348	FUNC	<unknown>	DEFAULT	3
random	.symtab	0x415ef0	164	FUNC	<unknown>	DEFAULT	3
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x41e1b0	40	OBJECT	<unknown>	DEFAULT	5
random_r	.symtab	0x416314	172	FUNC	<unknown>	DEFAULT	3
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x460258	128	OBJECT	<unknown>	DEFAULT	11
rawmemchr	.symtab	0x41b3e0	192	FUNC	<unknown>	DEFAULT	3
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x4127c0	88	FUNC	<unknown>	DEFAULT	3
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir	.symtab	0x412ff0	264	FUNC	<unknown>	DEFAULT	3
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x417fa0	272	FUNC	<unknown>	DEFAULT	3
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readlink	.symtab	0x412760	88	FUNC	<unknown>	DEFAULT	3
readlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x415280	1156	FUNC	<unknown>	DEFAULT	3
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x414090	92	FUNC	<unknown>	DEFAULT	3
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvfrom	.symtab	0x414174	32	FUNC	<unknown>	DEFAULT	3
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_domain_to_hostname	.symtab	0x40e9b0	360	FUNC	<unknown>	DEFAULT	3
resolv_entries_free	.symtab	0x40f7f8	164	FUNC	<unknown>	DEFAULT	3
resolv_lookup	.symtab	0x40ec5c	2972	FUNC	<unknown>	DEFAULT	3
resolv_skip_name	.symtab	0x40eb18	324	FUNC	<unknown>	DEFAULT	3
resolver.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rindex	.symtab	0x41b5e0	160	FUNC	<unknown>	DEFAULT	3
root	.symtab	0x460a70	4	OBJECT	<unknown>	DEFAULT	15
sbrk	.symtab	0x4179d0	164	FUNC	<unknown>	DEFAULT	3
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x41273c	32	FUNC	<unknown>	DEFAULT	3
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select_profile	.symtab	0x403ab0	1996	FUNC	<unknown>	DEFAULT	3
send	.symtab	0x4141a0	92	FUNC	<unknown>	DEFAULT	3
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send_heartbeat	.symtab	0x401550	184	FUNC	<unknown>	DEFAULT	3
sendto	.symtab	0x414284	32	FUNC	<unknown>	DEFAULT	3
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x4129f0	88	FUNC	<unknown>	DEFAULT	3
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x4142b0	124	FUNC	<unknown>	DEFAULT	3
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x415f94	184	FUNC	<unknown>	DEFAULT	3
setstate_r	.symtab	0x4161d0	324	FUNC	<unknown>	DEFAULT	3
sigaction	.symtab	0x417740	28	FUNC	<unknown>	DEFAULT	3
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x414390	104	FUNC	<unknown>	DEFAULT	3
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x414400	36	FUNC	<unknown>	DEFAULT	3
signal	.symtab	0x414430	236	FUNC	<unknown>	DEFAULT	3
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x412ae0	96	FUNC	<unknown>	DEFAULT	3
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
single_instance	.symtab	0x401eb0	892	FUNC	<unknown>	DEFAULT	3
sleep	.symtab	0x416a30	288	FUNC	<unknown>	DEFAULT	3
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x414330	88	FUNC	<unknown>	DEFAULT	3
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
spec_and_mask.4701	.symtab	0x41e974	16	OBJECT	<unknown>	DEFAULT	5
spec_base.4693	.symtab	0x41e94c	7	OBJECT	<unknown>	DEFAULT	5
spec_chars.4698	.symtab	0x41e9d0	21	OBJECT	<unknown>	DEFAULT	5
spec_flags.4697	.symtab	0x41e9e8	8	OBJECT	<unknown>	DEFAULT	5
spec_or_mask.4700	.symtab	0x41e984	16	OBJECT	<unknown>	DEFAULT	5
spec_ranges.4699	.symtab	0x41e994	9	OBJECT	<unknown>	DEFAULT	5
sprintf	.symtab	0x418890	80	FUNC	<unknown>	DEFAULT	3
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x41611c	172	FUNC	<unknown>	DEFAULT	3
srandom	.symtab	0x41611c	172	FUNC	<unknown>	DEFAULT	3
srandom_r	.symtab	0x4163c0	400	FUNC	<unknown>	DEFAULT	3
start_killer_pid	.symtab	0x401cb4	172	FUNC	<unknown>	DEFAULT	3
stat	.symtab	0x412a50	144	FUNC	<unknown>	DEFAULT	3
stat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
std.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
stderr	.symtab	0x460388	4	OBJECT	<unknown>	DEFAULT	11
stdin	.symtab	0x460380	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x460384	4	OBJECT	<unknown>	DEFAULT	11
stomp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x41b8b0	248	FUNC	<unknown>	DEFAULT	3
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x41b780	248	FUNC	<unknown>	DEFAULT	3
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x41b5b0	44	FUNC	<unknown>	DEFAULT	3
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x41b5b0	44	FUNC	<unknown>	DEFAULT	3
strcpy	.symtab	0x41b880	36	FUNC	<unknown>	DEFAULT	3
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn	.symtab	0x41b350	144	FUNC	<unknown>	DEFAULT	3
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x41ba00	388	FUNC	<unknown>	DEFAULT	3
strlen	.symtab	0x41b4f0	184	FUNC	<unknown>	DEFAULT	3
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x413460	188	FUNC	<unknown>	DEFAULT	3
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x41b680	248	FUNC	<unknown>	DEFAULT	3
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x41bb90	64	FUNC	<unknown>	DEFAULT	3
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x41b5e0	160	FUNC	<unknown>	DEFAULT	3
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x41b4a0	72	FUNC	<unknown>	DEFAULT	3
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x413360	256	FUNC	<unknown>	DEFAULT	3
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x413520	32	FUNC	<unknown>	DEFAULT	3
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x41b280	208	FUNC	<unknown>	DEFAULT	3
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x4166c0	28	FUNC	<unknown>	DEFAULT	3
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x416d4c	748	FUNC	<unknown>	DEFAULT	3
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table	.symtab	0x465bd0	40	OBJECT	<unknown>	DEFAULT	15
table.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table_init	.symtab	0x411e90	232	FUNC	<unknown>	DEFAULT	3
table_key	.symtab	0x4601e4	16	OBJECT	<unknown>	DEFAULT	11
table_lock_val	.symtab	0x411ffc	132	FUNC	<unknown>	DEFAULT	3
table_retrieve_val	.symtab	0x412080	236	FUNC	<unknown>	DEFAULT	3
table_unlock_val	.symtab	0x411f78	132	FUNC	<unknown>	DEFAULT	3
tcgetattr	.symtab	0x41bc10	176	FUNC	<unknown>	DEFAULT	3
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcp_checksum	.symtab	0x40e290	448	FUNC	<unknown>	DEFAULT	3
tcp_kill_port	.symtab	0x40f8a0	2932	FUNC	<unknown>	DEFAULT	3
tfo.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x4125d0	16	FUNC	<unknown>	DEFAULT	3
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
times	.symtab	0x417ed0	16	FUNC	<unknown>	DEFAULT	3
times.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toggle_obf	.symtab	0x412254	368	FUNC	<unknown>	DEFAULT	3
type_codes	.symtab	0x41e9a0	24	OBJECT	<unknown>	DEFAULT	5
type_sizes	.symtab	0x41e9b8	12	OBJECT	<unknown>	DEFAULT	5
udp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
udp4_checksum	.symtab	0x40de84	1036	FUNC	<unknown>	DEFAULT	3
unknown.1326	.symtab	0x41ea90	14	OBJECT	<unknown>	DEFAULT	5
unsafe_state	.symtab	0x4602e0	20	OBJECT	<unknown>	DEFAULT	11
usleep	.symtab	0x417040	144	FUNC	<unknown>	DEFAULT	3
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util_atoi	.symtab	0x411220	968	FUNC	<unknown>	DEFAULT	3
util_fdgets	.symtab	0x411b68	324	FUNC	<unknown>	DEFAULT	3
util_isalpha	.symtab	0x411d14	144	FUNC	<unknown>	DEFAULT	3
util_isdigit	.symtab	0x411e24	104	FUNC	<unknown>	DEFAULT	3
util_isspace	.symtab	0x411da4	128	FUNC	<unknown>	DEFAULT	3
util_isupper	.symtab	0x411cac	104	FUNC	<unknown>	DEFAULT	3
util_itoa	.symtab	0x4115e8	572	FUNC	<unknown>	DEFAULT	3
util_memcmp	.symtab	0x410420	288	FUNC	<unknown>	DEFAULT	3
util_memcpy	.symtab	0x411038	164	FUNC	<unknown>	DEFAULT	3
util_memset	.symtab	0x410698	120	FUNC	<unknown>	DEFAULT	3
util_readlink	.symtab	0x410710	976	FUNC	<unknown>	DEFAULT	3
util_startswith	.symtab	0x410ae0	176	FUNC	<unknown>	DEFAULT	3
util_strcat	.symtab	0x410f90	168	FUNC	<unknown>	DEFAULT	3
util_strcmp	.symtab	0x410de4	288	FUNC	<unknown>	DEFAULT	3
util_strcpy	.symtab	0x410f04	140	FUNC	<unknown>	DEFAULT	3
util_strdup	.symtab	0x410b90	160	FUNC	<unknown>	DEFAULT	3
util_stristr	.symtab	0x411824	524	FUNC	<unknown>	DEFAULT	3
util_strlen	.symtab	0x410c30	116	FUNC	<unknown>	DEFAULT	3
util_strncmp	.symtab	0x410ca4	320	FUNC	<unknown>	DEFAULT	3
util_strstr	.symtab	0x410540	344	FUNC	<unknown>	DEFAULT	3
util_zero	.symtab	0x4110dc	120	FUNC	<unknown>	DEFAULT	3
vse.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vsnprintf	.symtab	0x4188e0	252	FUNC	<unknown>	DEFAULT	3
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
w	.symtab	0x461a8c	4	OBJECT	<unknown>	DEFAULT	15
wcrtomb	.symtab	0x41c150	108	FUNC	<unknown>	DEFAULT	3
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x41c200	216	FUNC	<unknown>	DEFAULT	3
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x41c1c0	64	FUNC	<unknown>	DEFAULT	3
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wra.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x412990	88	FUNC	<unknown>	DEFAULT	3
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
x	.symtab	0x461a80	4	OBJECT	<unknown>	DEFAULT	15
xdigits.3351	.symtab	0x41e194	17	OBJECT	<unknown>	DEFAULT	5
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
y	.symtab	0x461a84	4	OBJECT	<unknown>	DEFAULT	15
z	.symtab	0x461a88	4	OBJECT	<unknown>	DEFAULT	15

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 12, 2024 16:27:59.283320904 CEST	49412	9583	192.168.2.15	77.232.36.152
Oct 12, 2024 16:27:59.288794041 CEST	9583	49412	77.232.36.152	192.168.2.15
Oct 12, 2024 16:27:59.288860083 CEST	49412	9583	192.168.2.15	77.232.36.152
Oct 12, 2024 16:28:01.303971052 CEST	49412	9583	192.168.2.15	77.232.36.152
Oct 12, 2024 16:28:01.309806108 CEST	9583	49412	77.232.36.152	192.168.2.15
Oct 12, 2024 16:28:01.309998035 CEST	49412	9583	192.168.2.15	77.232.36.152
Oct 12, 2024 16:28:01.315114021 CEST	9583	49412	77.232.36.152	192.168.2.15
Oct 12, 2024 16:28:08.393222094 CEST	443	52464	54.247.62.1	192.168.2.15
Oct 12, 2024 16:28:08.393277884 CEST	443	52464	54.247.62.1	192.168.2.15
Oct 12, 2024 16:28:08.393313885 CEST	443	52464	54.247.62.1	192.168.2.15
Oct 12, 2024 16:28:08.393771887 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:28:08.393771887 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:28:08.393771887 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:28:08.396059036 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:28:08.401210070 CEST	443	52464	54.247.62.1	192.168.2.15
Oct 12, 2024 16:28:09.512434959 CEST	443	52464	54.247.62.1	192.168.2.15
Oct 12, 2024 16:28:09.512485981 CEST	443	52464	54.247.62.1	192.168.2.15
Oct 12, 2024 16:28:09.512748003 CEST	443	52464	54.247.62.1	192.168.2.15
Oct 12, 2024 16:28:09.512778044 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:28:09.512778997 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:28:09.512820005 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:28:09.512891054 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:28:09.512924910 CEST	443	52464	54.247.62.1	192.168.2.15
Oct 12, 2024 16:28:09.512984037 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:28:09.754663944 CEST	443	52464	54.247.62.1	192.168.2.15
Oct 12, 2024 16:28:09.953067064 CEST	443	52464	54.247.62.1	192.168.2.15
Oct 12, 2024 16:28:09.953535080 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:28:09.955866098 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:28:09.961505890 CEST	443	52464	54.247.62.1	192.168.2.15
Oct 12, 2024 16:28:09.961755037 CEST	52464	443	192.168.2.15	54.247.62.1
Oct 12, 2024 16:30:01.396280050 CEST	49412	9583	192.168.2.15	77.232.36.152
Oct 12, 2024 16:30:01.411684990 CEST	9583	49412	77.232.36.152	192.168.2.15
Oct 12, 2024 16:30:01.739523888 CEST	9583	49412	77.232.36.152	192.168.2.15
Oct 12, 2024 16:30:01.740113020 CEST	49412	9583	192.168.2.15	77.232.36.152

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 12, 2024 16:27:59.263552904 CEST	60030	53	192.168.2.15	8.8.8.8
Oct 12, 2024 16:27:59.281816959 CEST	53	60030	8.8.8.8	192.168.2.15

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 12, 2024 16:27:59.263552904 CEST	192.168.2.15	8.8.8.8	0xbb6f	Standard query (0)	xlabresearch.ru	A (IP address)	IN (0x0001)	false

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Oct 12, 2024 16:28:08.393313885 CEST	54.247.62.1	443	192.168.2.15	52464	CN=motd.ubuntu.com CN=R10, O=Let's Encrypt, C=US	CN=R10, O=Let's Encrypt, C=US CN=ISRG Root X1, O=Internet Security Research Group, C=US	Tue Aug 06 10:27:48 CEST 2024 Wed Mar 13 01:00:00 CET 2024	Mon Nov 04 09:27:47 CET 2024 Sat Mar 13 00:59:59 CET 2027
Oct 12, 2024 16:28:08.393313885 CEST	54.247.62.1	443	192.168.2.15	52464	CN=R10, O=Let's Encrypt, C=US	CN=ISRG Root X1, O=Internet Security Research Group, C=US	Wed Mar 13 01:00:00 CET 2024	Sat Mar 13 00:59:59 CET 2027

System Behavior

Analysis Process: na.elf PID: 5525, Parent PID: 5441

General

Start time (UTC):	14:27:57
Start date (UTC):	12/10/2024
Path:	/tmp/na.elf
Arguments:	/tmp/na.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: na.elf PID: 5527, Parent PID: 5525

General

Start time (UTC):	14:27:58
Start date (UTC):	12/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: na.elf PID: 5533, Parent PID: 5527

General

Start time (UTC):	14:27:58
Start date (UTC):	12/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: dash PID: 5539, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5539, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.ZZlBmvzIUL /tmp/tmp.MxMrwp3ptI /tmp/tmp.FLGVJ0vhfV
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 5540, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cat PID: 5540, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.ZZlBmvzIUL
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

Chronological Activities

Analysis Process: dash PID: 5541, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: head PID: 5541, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

Chronological Activities

Analysis Process: dash PID: 5542, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: tr PID: 5542, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

Chronological Activities

Analysis Process: dash PID: 5543, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cut PID: 5543, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

Chronological Activities

Analysis Process: dash PID: 5544, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cat PID: 5544, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.ZZlBmvzIUL
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

Chronological Activities

Analysis Process: dash PID: 5545, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: head PID: 5545, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

Chronological Activities

Analysis Process: dash PID: 5546, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: tr PID: 5546, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

Chronological Activities

Analysis Process: dash PID: 5547, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cut PID: 5547, Parent PID: 3671

General

Start time (UTC):	14:28:08
Start date (UTC):	12/10/2024
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

Chronological Activities

Analysis Process: dash PID: 5548, Parent PID: 3671

General

Start time (UTC):	14:28:09
Start date (UTC):	12/10/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5548, Parent PID: 3671

General

Start time (UTC):	14:28:09
Start date (UTC):	12/10/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.ZZlBmvzIUL /tmp/tmp.MxMrwp3ptI /tmp/tmp.FLGVJ0vhfV
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report na.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

HTTPS Connections

System Behavior

Analysis Process: na.elf PID: 5525, Parent PID: 5441

General

Chronological Activities

Analysis Process: na.elf PID: 5527, Parent PID: 5525

General

Chronological Activities

Analysis Process: na.elf PID: 5533, Parent PID: 5527

General

Chronological Activities

Analysis Process: dash PID: 5539, Parent PID: 3671

General

Chronological Activities

Analysis Process: rm PID: 5539, Parent PID: 3671

General

Chronological Activities

Analysis Process: dash PID: 5540, Parent PID: 3671

General

Chronological Activities

Analysis Process: cat PID: 5540, Parent PID: 3671

Linux Analysis Report
na.elf