Edit tour

Linux Analysis Report
spc.elf

Overview

General Information

Sample name:	spc.elf
Analysis ID:	1541342
MD5:	dd847265bb6c6efe2e99cfa9283bfb55
SHA1:	6de20e9f89448deb442780128a4bac76374d3567
SHA256:	598d3e0b5dcb3724b34aeb028234948831c5862359a671057b70623cfe2d4207
Tags:	elfuser-abuse_ch

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false

Signatures

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541342
Start date and time:	2024-10-24 17:58:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	spc.elf
Detection:	CLEAN
Classification:	clean0.linELF@0/0@0/0

Warnings

VT rate limit hit for: spc.elf

Runtime Messages

Command:	/tmp/spc.elf
PID:	5485
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

spc.elf (PID: 5485, Parent: 5408, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/spc.elf

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: classification engine

Classification label: clean0.linELF@0/0@0/0

Source: /tmp/spc.elf (PID: 5485)

Queries kernel information via 'uname':

Jump to behavior

Source: spc.elf, 5485.1.0000564abcdc3000.0000564abce28000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: spc.elf, 5485.1.00007ffe85a37000.00007ffe85a58000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sparc/tmp/spc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/spc.elf
Source: spc.elf, 5485.1.0000564abcdc3000.0000564abce28000.rw-.sdmp	Binary or memory string: JV!/etc/qemu-binfmt/sparc
Source: spc.elf, 5485.1.00007ffe85a37000.00007ffe85a58000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
spc.elf	11%	ReversingLabs	Linux.Backdoor.Mirai

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

⊘No contacted IP infos

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.939603137445931
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	spc.elf
File size:	71'378 bytes
MD5:	dd847265bb6c6efe2e99cfa9283bfb55
SHA1:	6de20e9f89448deb442780128a4bac76374d3567
SHA256:	598d3e0b5dcb3724b34aeb028234948831c5862359a671057b70623cfe2d4207
SHA512:	fc43cfa5d5c661e7d490da4450b6f1948da770530357d52d402ec9d6af2721b1f93ad6176328bc2da8d74a655f870c170bb031d45e4df800f51336180f1698c8
SSDEEP:	768:dHzIEO+lfQBrrS12XFtJX4jXA7gygE9RjIENWWcJDenkxslJLeH9:FzIelUJjJX4jXA7gygE9RjJXkx2JCH9
TLSH:	63633A3277690A23C0EA653540E7973BB3FB4B951E71420BB651AFCC3B59AE035933A1
File Content Preview:	.ELF...........................4.........4. ...(..........................................................2.........................................dt.Q................................@..(....@.0 ................#.....bp..`.....!..... l..@.....".........`

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101c4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	54440
Section Header Size:	40
Number of Section Headers:	17
Header String Table Index:	14

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x100b4	0xb4	0x1c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100d0	0xd0	0xc0b8	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x1c188	0xc188	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1c1a0	0xc1a0	0x520	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x2c6c0	0xc6c0	0x48	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x2c708	0xc708	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x2c708	0xc708	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x2c710	0xc710	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2c718	0xc718	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x2c71c	0xc71c	0x148	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x2c868	0xc868	0x208	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x2ca70	0xca70	0x2ee8	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0xca70	0x9c6	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0xd436	0x71	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0xd750	0x23f0	0x10	0x0		16	230	4
.strtab	STRTAB	0x0	0xfb40	0x1b92	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0xc6c0	0xc6c0	5.8340	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0xc6c0	0x2c6c0	0x2c6c0	0x3b0	0x3298	4.3857	0x6	RW	0x10000	.eh_frame .tbss .ctors .dtors .jcr .got .data .bss
TLS	0xc708	0x2c708	0x2c708	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x100b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100d0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1c188	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1c1a0	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x2c6c0	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x2c708	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x2c708	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x2c710	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2c718	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2c71c	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x2c868	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x2ca70	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
.LLC3	.symtab	0x1c2d8	0	NOTYPE	<unknown>	DEFAULT	4
.rem	.symtab	0x10be0	44	FUNC	<unknown>	DEFAULT	2
C.23.5636	.symtab	0x1c5ec	24	OBJECT	<unknown>	DEFAULT	4
_Exit	.symtab	0x16f20	128	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x2c71c	0	OBJECT	<unknown>	HIDDEN	10
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x2c70c	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x2c708	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x2ca68	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1c2ea	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x2c714	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x2c710	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x2c6c0	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x2c704	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x2ca68	4	OBJECT	<unknown>	HIDDEN	11
__GI___close	.symtab	0x162ec	124	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x162f8	32	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x2ca6c	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x10cb0	36	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x16d5c	196	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x19ae0	344	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x162ec	124	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x16e20	248	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x1b2c8	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x1c038	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x1b34c	132	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x1b2c8	132	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x1b2d4	32	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x1c038	132	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x1c044	32	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x16588	168	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x16684	92	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x1b34c	132	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x1b358	32	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x16f20	128	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x14bfc	280	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x1aae4	24	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x13930	36	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1b7e4	88	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x162ec	124	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x17418	208	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x17b54	64	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x17b9c	80	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x177f8	860	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x13954	96	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x15290	168	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x17bf4	860	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x16e20	248	FUNC	<unknown>	HIDDEN	2
__GI_fflush	.symtab	0x10f74	320	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1139c	992	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x19894	320	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x19ae0	344	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x199d4	260	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x19c38	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x17f50	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x15b80	1088	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1b844	116	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x19ae0	344	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x16fa0	40	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x16fc8	32	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x16fe8	32	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x17008	32	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x17030	56	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x17070	92	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x139b4	36	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x170cc	32	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x13908	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1a618	244	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x15080	244	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x170f4	228	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1387c	32	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x139d8	28	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1c0c4	124	FUNC	<unknown>	HIDDEN	2
__GI_mbrtowc	.symtab	0x1bb78	168	FUNC	<unknown>	HIDDEN	2
__GI_mbsnrtowcs	.symtab	0x1bc28	220	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x11da8	4212	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x117c4	1508	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1a3a4	32	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x12e50	416	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x10c14	108	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1b8c0	104	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x171e0	92	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x172a0	72	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x1b2c8	132	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x175a0	228	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1608c	264	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x14d2c	108	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x14ef8	152	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x1c038	132	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x1773c	188	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x139f4	92	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x172f0	108	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x13a50	92	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x13aac	96	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x13b0c	44	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x15174	276	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x16b58	264	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x17364	172	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x1619c	336	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x13b38	36	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x14f90	232	FUNC	<unknown>	HIDDEN	2
__GI_sscanf	.symtab	0x10ecc	48	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x130c4	896	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x19d4c	524	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1a3c4	260	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x134d8	648	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x134d8	648	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x1a080	804	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x13840	60	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x137c8	120	FUNC	<unknown>	HIDDEN	2
__GI_strncmp	.symtab	0x1a4c8	244	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x19f58	192	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1a5bc	84	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1aafc	20	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x15704	1140	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x1389c	108	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x10c80	40	FUNC	<unknown>	HIDDEN	2
__GI_ungetc	.symtab	0x1bd04	480	FUNC	<unknown>	HIDDEN	2
__GI_vfscanf	.symtab	0x18640	1992	FUNC	<unknown>	HIDDEN	2
__GI_vsscanf	.symtab	0x10efc	112	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x1b34c	132	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2c718	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x2c718	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x2f054	4	OBJECT	<unknown>	HIDDEN	12
__atexit_lock	.symtab	0x2ca44	24	OBJECT	<unknown>	DEFAULT	11
__bss_start	.symtab	0x2ca70	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x16630	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x162ec	124	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x162f8	32	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x2ca6c	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x2f598	4	OBJECT	<unknown>	HIDDEN	12
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x1c140	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100d0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x2c868	0	OBJECT	<unknown>	HIDDEN	11
__environ	.symtab	0x2f04c	4	OBJECT	<unknown>	DEFAULT	12
__errno_location	.symtab	0x10cb0	36	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2eafc	4	OBJECT	<unknown>	HIDDEN	12
__fcntl_nocancel	.symtab	0x16d5c	196	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x19ae0	344	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2c708	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x2c708	0	NOTYPE	<unknown>	HIDDEN	6
__fork	.symtab	0x15b80	1088	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x2f924	4	OBJECT	<unknown>	HIDDEN	12
__fork_handlers	.symtab	0x2f928	4	OBJECT	<unknown>	HIDDEN	12
__fork_lock	.symtab	0x2eb00	4	OBJECT	<unknown>	HIDDEN	12
__getdents64	.symtab	0x1ba40	304	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x17030	56	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x2c708	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x2c708	0	NOTYPE	<unknown>	HIDDEN	6
__init_scan_cookie	.symtab	0x18e24	104	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x162ec	124	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x13954	96	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x16370	196	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x16434	268	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	6
__libc_fcntl	.symtab	0x16e20	248	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x15b80	1088	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	6
__libc_nanosleep	.symtab	0x172a0	72	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x1b2c8	132	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x1c038	132	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x139f4	92	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x13a50	92	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x13aac	96	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1b4ac	636	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x16b58	264	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2f048	4	OBJECT	<unknown>	DEFAULT	12
__libc_write	.symtab	0x1b34c	132	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x15fd8	172	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x147d4	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x13be4	144	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2c968	24	OBJECT	<unknown>	DEFAULT	11
__malloc_state	.symtab	0x2f5ac	888	OBJECT	<unknown>	DEFAULT	12
__malloc_trim	.symtab	0x14724	176	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x1b2c8	132	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x1b2d4	32	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x2f050	4	OBJECT	<unknown>	DEFAULT	12
__preinit_array_end	.symtab	0x2c708	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x2c708	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x2ca60	4	OBJECT	<unknown>	DEFAULT	11
__progname_full	.symtab	0x2ca64	4	OBJECT	<unknown>	DEFAULT	11
__psfs_do_numeric	.symtab	0x192a0	1524	FUNC	<unknown>	HIDDEN	2
__psfs_do_numeric.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__psfs_parse_spec	.symtab	0x18f5c	828	FUNC	<unknown>	HIDDEN	2
__psfs_parse_spec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__pthread_initialize_minimal	.symtab	0x1b728	24	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x16548	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x16540	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x16540	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x16540	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x16540	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x1c038	132	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x1c044	32	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__rt_sigreturn_stub	.symtab	0x16b30	16	FUNC	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x2f058	4	OBJECT	<unknown>	HIDDEN	12
__scan_cookie.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__scan_getc	.symtab	0x18e8c	120	FUNC	<unknown>	HIDDEN	2
__scan_ungetc	.symtab	0x18f04	80	FUNC	<unknown>	HIDDEN	2
__sigjmp_save	.symtab	0x1a70c	60	FUNC	<unknown>	HIDDEN	2
__sigreturn_stub	.symtab	0x16b40	16	FUNC	<unknown>	DEFAULT	2
__sigsetjmp	.symtab	0x16cd4	28	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x16cf8	92	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__sparc32_atomic_locks	.symtab	0x2ca98	64	OBJECT	<unknown>	HIDDEN	12
__stdin	.symtab	0x2c890	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x1bee4	104	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x17f70	248	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1bf4c	56	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1bf8c	172	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x10e94	56	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x2c894	4	OBJECT	<unknown>	DEFAULT	11
__strtofpmax	.symtab	0x1af78	848	FUNC	<unknown>	HIDDEN	2
__strtofpmax.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_error	.symtab	0x16b08	40	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x17244	92	FUNC	<unknown>	DEFAULT	2
__sysv_signal	.symtab	0x13b64	128	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x16588	168	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x16684	92	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x166e0	1056	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2ca5c	4	OBJECT	<unknown>	HIDDEN	11
__write	.symtab	0x1b34c	132	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x1b358	32	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x1b9b4	132	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x1b928	140	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x1b748	64	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x1b788	84	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x2f94c	4	OBJECT	<unknown>	DEFAULT	12
_dl_phnum	.symtab	0x2f950	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_gaps	.symtab	0x2f940	1	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_slotinfo_list	.symtab	0x2f93c	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_generation	.symtab	0x2f944	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_max_dtv_idx	.symtab	0x2f934	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_setup	.symtab	0x1b450	92	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x2f930	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_nelem	.symtab	0x2f948	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_size	.symtab	0x2f938	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_used	.symtab	0x2f92c	4	OBJECT	<unknown>	DEFAULT	12
_edata	.symtab	0x2ca70	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2f958	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x16f20	128	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1c188	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x2caf8	8192	OBJECT	<unknown>	DEFAULT	12
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x100b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_pthread_cleanup_pop_restore	.symtab	0x1655c	36	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x16550	12	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x16cc8	8	FUNC	<unknown>	DEFAULT	2
_start	.symtab	0x101c4	56	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x18070	1188	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x10cdc	124	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x2c898	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x2cad8	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_dec_use	.symtab	0x110bc	736	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x2caf4	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_del_lock	.symtab	0x2cae4	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_use_count	.symtab	0x2caf0	4	OBJECT	<unknown>	DEFAULT	12
_stdio_streams	.symtab	0x2c89c	204	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x10d58	316	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x2c880	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x1ab18	472	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdlib_strto_ll	.symtab	0x1acf8	632	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_ll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x18514	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x14bfc	280	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ack	.symtab	0x104b8	360	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x1aae4	24	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x1aae4	24	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
authBytes	.symtab	0x2c878	4	OBJECT	<unknown>	DEFAULT	11
bcopy	.symtab	0x117b8	12	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x2eaf8	4	OBJECT	<unknown>	DEFAULT	12
bind	.symtab	0x13930	36	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1b7e4	88	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bzero	.symtab	0x12e1c	52	FUNC	<unknown>	DEFAULT	2
call___do_global_ctors_aux	.symtab	0x1c17c	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x1014c	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x101b8	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x14608	284	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x162ec	124	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x17418	208	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cncHost	.symtab	0x2c870	4	OBJECT	<unknown>	DEFAULT	11
commands_parse	.symtab	0x10620	276	FUNC	<unknown>	DEFAULT	2
completed.4753	.symtab	0x2ca70	1	OBJECT	<unknown>	DEFAULT	12
connect	.symtab	0x13954	96	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectToCNC	.symtab	0x10734	268	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decpt_str	.symtab	0x1c610	2	OBJECT	<unknown>	DEFAULT	4
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
endianness	.symtab	0x2ca8c	4	OBJECT	<unknown>	DEFAULT	12
ensure	.symtab	0x108e8	192	FUNC	<unknown>	DEFAULT	2
environ	.symtab	0x2f04c	4	OBJECT	<unknown>	DEFAULT	12
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	6
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x15290	168	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fclose	.symtab	0x17bf4	860	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x16e20	248	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x174f0	176	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x17684	176	FUNC	<unknown>	DEFAULT	2
fetchLocalAddress	.symtab	0x109a8	224	FUNC	<unknown>	DEFAULT	2
fflush	.symtab	0x10f74	320	FUNC	<unknown>	DEFAULT	2
fflush.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fflush_unlocked	.symtab	0x1139c	992	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x19894	320	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x19ae0	344	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x199d4	260	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x19c38	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fopen	.symtab	0x17f50	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x15b80	1088	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x2eb04	1348	OBJECT	<unknown>	DEFAULT	12
fprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x10158	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x14990	564	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x1b844	116	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getDeviceName	.symtab	0x10840	168	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x19894	320	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x19ae0	344	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x16fa0	40	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x16fc8	32	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x16fe8	32	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x17008	32	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x17030	56	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x17070	92	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x139b4	36	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x170cc	32	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	6
index	.symtab	0x19d4c	524	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x13908	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1a618	244	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
init_static_tls	.symtab	0x1b3d8	120	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x14e14	124	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x15080	244	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x170f4	228	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x1387c	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x139d8	28	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
localAddress	.symtab	0x2ca90	4	OBJECT	<unknown>	DEFAULT	12
lseek64	.symtab	0x1c0c4	124	FUNC	<unknown>	DEFAULT	2
main	.symtab	0x10a88	344	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc	.symtab	0x13c7c	2436	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x14bc4	48	FUNC	<unknown>	DEFAULT	2
mbrtowc	.symtab	0x1bb78	168	FUNC	<unknown>	DEFAULT	2
mbrtowc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mbsnrtowcs	.symtab	0x1bc28	220	FUNC	<unknown>	DEFAULT	2
mbsnrtowcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mbstate.5063	.symtab	0x2f59c	8	OBJECT	<unknown>	DEFAULT	12
mbstate.5064	.symtab	0x2f5a4	8	OBJECT	<unknown>	DEFAULT	12
memcpy	.symtab	0x11da8	4212	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x117c4	1508	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x1a3a4	32	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x12e50	416	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x10c14	108	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mount.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x1b8c0	104	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x171e0	92	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x2c980	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x2c998	24	OBJECT	<unknown>	DEFAULT	11
nan_inf_str.2499	.symtab	0x1c6a8	21	OBJECT	<unknown>	DEFAULT	4
nan_inf_str.6640	.symtab	0x1c678	11	OBJECT	<unknown>	DEFAULT	4
nanosleep	.symtab	0x172a0	72	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
nil_string	.symtab	0x1c688	6	OBJECT	<unknown>	DEFAULT	4
object.4768	.symtab	0x2ca74	24	OBJECT	<unknown>	DEFAULT	12
open	.symtab	0x1b2c8	132	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x175a0	228	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
p.4751	.symtab	0x2c86c	0	OBJECT	<unknown>	DEFAULT	11
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
perror.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
printf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
program_invocation_name	.symtab	0x2ca64	4	OBJECT	<unknown>	DEFAULT	11
program_invocation_short_name	.symtab	0x2ca60	4	OBJECT	<unknown>	DEFAULT	11
pudp	.symtab	0x10300	212	FUNC	<unknown>	DEFAULT	2
putchar.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
puts.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
qual_chars	.symtab	0x1c638	18	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x1608c	264	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x14d14	16	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random	.symtab	0x14d2c	108	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x1c258	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x14ef8	152	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x2c9b0	128	OBJECT	<unknown>	DEFAULT	11
read	.symtab	0x1c038	132	FUNC	<unknown>	DEFAULT	2
readdir64	.symtab	0x1773c	188	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x1a750	916	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x139f4	92	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rindex	.symtab	0x19f58	192	FUNC	<unknown>	DEFAULT	2
rt_sigaction	.symtab	0x16c60	104	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x172f0	108	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sc_getc	.symtab	0x18e08	20	FUNC	<unknown>	DEFAULT	2
scan_getwc	.symtab	0x18558	232	FUNC	<unknown>	DEFAULT	2
send	.symtab	0x13a50	92	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x13aac	96	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setjmp	.symtab	0x16cd0	4	FUNC	<unknown>	DEFAULT	2
setsockopt	.symtab	0x13b0c	44	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x14d98	124	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x15174	276	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x16b58	264	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigjmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x17364	172	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x1619c	336	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
snprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x13b38	36	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
spec_allowed	.symtab	0x1c658	16	OBJECT	<unknown>	DEFAULT	4
spec_base	.symtab	0x1c668	15	OBJECT	<unknown>	DEFAULT	4
spec_chars	.symtab	0x1c620	23	OBJECT	<unknown>	DEFAULT	4
spec_flags	.symtab	0x1c618	4	OBJECT	<unknown>	DEFAULT	4
spec_ranges	.symtab	0x1c650	8	OBJECT	<unknown>	DEFAULT	4
srand	.symtab	0x14e90	104	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x14e90	104	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x14f90	232	FUNC	<unknown>	DEFAULT	2
sscanf	.symtab	0x10ecc	48	FUNC	<unknown>	DEFAULT	2
sscanf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
static_dtv	.symtab	0x2f05c	512	OBJECT	<unknown>	DEFAULT	12
static_map	.symtab	0x2f564	52	OBJECT	<unknown>	DEFAULT	12
static_slotinfo	.symtab	0x2f25c	776	OBJECT	<unknown>	DEFAULT	12
std	.symtab	0x103d4	228	FUNC	<unknown>	DEFAULT	2
stderr	.symtab	0x2c88c	4	OBJECT	<unknown>	DEFAULT	11
stdin	.symtab	0x2c884	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x2c888	4	OBJECT	<unknown>	DEFAULT	11
strcat	.symtab	0x130c4	896	FUNC	<unknown>	DEFAULT	2
strchr	.symtab	0x19d4c	524	FUNC	<unknown>	DEFAULT	2
strchrnul	.symtab	0x1a3c4	260	FUNC	<unknown>	DEFAULT	2
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x134d8	648	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x134d8	648	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x1a080	804	FUNC	<unknown>	DEFAULT	2
strcspn	.symtab	0x13840	60	FUNC	<unknown>	DEFAULT	2
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strlen	.symtab	0x137c8	120	FUNC	<unknown>	DEFAULT	2
strncmp	.symtab	0x1a4c8	244	FUNC	<unknown>	DEFAULT	2
strncmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x19f58	192	FUNC	<unknown>	DEFAULT	2
strspn	.symtab	0x1a5bc	84	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x1aafc	20	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x15704	1140	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysv_signal	.symtab	0x13b64	128	FUNC	<unknown>	DEFAULT	2
sysv_signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x1389c	108	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x10c80	40	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
udp	.symtab	0x101fc	260	FUNC	<unknown>	DEFAULT	2
ungetc	.symtab	0x1bd04	480	FUNC	<unknown>	DEFAULT	2
ungetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unsafe_state	.symtab	0x2ca30	20	OBJECT	<unknown>	DEFAULT	11
vfprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vfscanf	.symtab	0x18640	1992	FUNC	<unknown>	DEFAULT	2
vfscanf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vsscanf	.symtab	0x10efc	112	FUNC	<unknown>	DEFAULT	2
vsscanf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x1b34c	132	FUNC	<unknown>	DEFAULT	2
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

⊘No network behavior found

System Behavior

Analysis Process: spc.elf PID: 5485, Parent PID: 5408

General

Start time (UTC):	15:58:49
Start date (UTC):	24/10/2024
Path:	/tmp/spc.elf
Arguments:	/tmp/spc.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report spc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

System Behavior

Analysis Process: spc.elf PID: 5485, Parent PID: 5408

General

Chronological Activities

Linux Analysis Report
spc.elf