Hostile 100% Download

1afff5d138375105c496c78e04fc77278857395aed30bf663c440f5f28e5c4d7.elf

packed, sectionless, anti-analysis

Sectionless ELF maps memory, changes it executable, and transfers controlSectionless ELF direct-syscall memory unpacker
SHA-2561afff5d138375105c496c78e04fc77278857395aed30bf663c440f5f28e5c4d7

Evidence

Sectionless ELF direct-syscall memory unpacker 0x0–0x160
0x07f454c46020101000000000000000000.ELF............
0x1002003e000100000078ad400000000000..>.....x.@.....
0x2040000000000000000000000000000000@...............
0x3000000000400038000300400000000000[email protected]...@.....
0x4001000000050000000000000000000000................
0x5000004000000000000000400000000000..@.......@.....
0x6021bf00000000000021bf000000000000!.......!.......
0x7000001000000000000100000006000000................
⋯15 more rows
x86-64 mmap syscall in sectionless code 0xb7dc–0xb9fc
⋯3 more rows
0xb80c5ae82a00000050524f545f455845437cZ.*...PROT_EXEC|
0xb81c50524f545f5752495445206661696c65PROT_WRITE faile
0xb82c642e0a000a0024496e666f3a200a0090d.....$Info: ...
⋯5 more rows
0xb88c514d29c94183c8ff6a22415a525e6a03QM).A...j"AZR^j.
0xb89c5a29ff6a09580f054901c64889442410Z).j.X..I..H.D$.
0xb8ac4897448b4424086a12415a4c89ee6a09H.D.D$.j.AZL..j.
⋯3 more rows
0xb8ecd5ad50ad41904889f75effd5595e5f5d..P.A.H..^..Y^_]
0xb8fc6a055a6a0a580f0541ffe55de840ffffj.Zj.X..A..].@..
0xb90cff2f70726f632f73656c662f65786500./proc/self/exe.
0xb91c00010000b3070000f50500000e490900.............I..
⋯14 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.