Benign Download

Exploit.Linux.Mirc.a

Imports POSIX socket creation APINo RELRO (GOT writable after load)
SHA-2565266c2d0f8f428878a3dfe3f9057917c1081c2023d1d1b7d3a9bdee7a8abb24f

Evidence

Converts host to network short 0x2d4–0x3f4
⋯5 more rows
0x32400636f6e6e65637400706572726f7200.connect.perror.
0x334736f636b657400627a65726f0073656esocket.bzero.sen
0x3446400696e65745f61646472005f5f6465d.inet_addr.__de
0x35472656769737465725f6672616d655f69register_frame_i
0x3646e666f0062636f707900676574686f73nfo.bcopy.gethos
0x3747462796e616d650068746f6e73006578tbyname.htons.ex
0x38469740061746f69005f494f5f73746469it.atoi._IO_stdi
⋯7 more rows
English function-word token "the" 0xad0–0xbc0
0xad06e6e656374656420746f205b25733a25nnected to [%s:%
0xae0645d2e0a0068616e736f6e2e63202d20d]...hanson.c -
0xaf06d796e4065666e65740a0a0000000000myn@efnet.......
0xb0054686973206c696c2070726f6772616dThis lil program
0xb10206578706c6f697473206d4952432773 exploits mIRC's
0xb2020626f756e6420736f636b6574732c20 bound sockets,
0xb306d616b696e672074686520636c69656emaking the clien
0xb40742063726173680a0a0055736167653at crash...Usage:
0xb50202573203c7461726765743e203c706f %s <target> <po
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.