155728d852dfcbef6b3de4adc8ebc24bff64165595440da037b2a18a6c45adcf.elf
Packed self-modifying ELF, anti-analysis, mprotect
Sectionless ELF maps memory, changes it executable, and transfers controlSectionless ELF direct-syscall memory unpacker
SHA-256155728d852dfcbef6b3de4adc8ebc24bff64165595440da037b2a18a6c45adcf
MaleculeO₂(AsAl)H₂(F₂Os)Md₃(Bi₃BkHe)Th
Evidence
0x07f454c46020101000000000000000000.ELF............
0x1002003e0001000000607a400000000000..>.....`z@.....
0x2040000000000000000000000000000000@...............
0x4001000000050000000000000000000000................
0x5000004000000000000000400000000000..@.......@.....
0x60098c000000000000098c000000000000................
0x7000001000000000000100000006000000................
⋯15 more rows
⋯3 more rows
0x84f45ae82a00000050524f545f455845437cZ.*...PROT_EXEC|
0x850450524f545f5752495445206661696c65PROT_WRITE faile
0x8514642e0a000a0024496e666f3a200a0090d.....$Info: ...
⋯5 more rows
0x8574514d29c94183c8ff6a22415a525e6a03QM).A...j"AZR^j.
0x85845a29ff6a09580f054901c64889442410Z).j.X..I..H.D$.
0x85944897448b4424086a12415a4c89ee6a09H.D.D$.j.AZL..j.
⋯3 more rows
0x85d4d5ad50ad41904889f75effd5595e5f5d..P.A.H..^..Y^_]
0x85e46a055a6a0a580f0541ffe55de840ffffj.Zj.X..A..].@..
0x85f4ff2f70726f632f73656c662f65786500./proc/self/exe.
0x860400010000b3070000f50500000e490100.............I..
⋯14 more rows