Benign Download

elf.3elf

Calls native open or sys_openCode embeds cleartext HTTP URL literal
SHA-2562d02e7034ffdd2bed0bc67056851abc3dab1128b3866fae348ad1bcd0e5be62a
MaleculeH₂(CmF)

Evidence

Code embeds cleartext HTTP URL literal lines 2–5
2:68… un Microsystems, Inc. All Rights Reserved.
3.\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License.
4.\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License.
5.\" When distributing Cover …
English function-word token "that" lines 25–27
25:44… r-level routines using an \fIELF
26descriptor\fR. That is, when the program starts working with a file,
27\fBelf_begin\fR(3ELF) creates an \fBELF\fR des …
English function-word token "have" lines 94–96
94:32… e headers work on the native machine, which may
95have different data encodings (size, byte order, and so on) than the target
96machine. Although native …
Calls native open or sys_open lines 319–327
319:12… d int cnt;
320
321 /* Open the input file */
322 if ((fd = open(argv[1], O_RDONLY)) == -1)
323 exit(1);
324
325 /* Obtain the ELF descriptor */
326 (void) elf_version(EV_CURRENT);
327 if …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.