Benign download unavailable

Shellcode

Contains Arabic or Urdu scriptContains Hiragana or Katakana script
SHA-2565ee16a1c79752e34ac161ddd587cdcdc7646c8e5dfe7f920aed4d9d7174bdcf6
MaleculeO(As₂)Md

Evidence

European UI language-code pair lines 1–14
1<!DOCTYPE html>
2<html class="client-nojs vector-feature-language-in-header-enabled vector-feature-language-in-main-menu-disabled vector-feature-language-in-main-page-header-disabled vector-feature-page-tools-pinned-disabled vector-feature-toc-pinned-clientpref-1 vector-feature-main-menu-pinned-disabled vector-feature-limited-width-clientpref-1 vector-feature-limited-width-content-enabled vector-feature-custom-font-size-clientpref-1 vector-feature-appearance-pinned-clientpref-1 skin-theme-clientpref-day vector-feature-navigation-update-disabled vector-sticky-header-enabled vector-toc-available skin-thumbsize-clientpref-standard" lang="de" dir="ltr">
3<head>
4<meta charset="UTF-8">
5<title>Shellcode – Wikipedia</title>
6<script>(function(){var className="client-js vector-feature-language-in-header-enabled vector-feature-language-in-main-menu-disabled vector-feature-language-in-main-page-header-disabled vector-feature-page-tools-pinned-disabled vector-feature-toc-pinned-clientpref-1 vector-feature-main-menu-pinned-disabled vector-feature-limited-width-clientpref-1 vector-feature-limited-width-content-enabled vector-feature-custom-font-size-clientpref-1 vector-feature-appearance-pinned-clientpref-1 skin-theme-clientpref-day vector-feature-navigation-update-disabled vector-sticky-header-enabled vector-toc-available skin-thumbsize-clientpref-standard";var cookie=document.cookie.match(/(?:^|; )dewikimwclientpreferences=([^;]+)/);if(cookie){cookie[1].split('%2C').forEach(function(pref){className=className.replace(new RegExp('(^| )'+pref.replace(/-clientpref-\w+$|[^\w-]+/g,'')+'-clientpref-\\w+( |$)'),'$1'+pref+'$2');});}document.documentElement.className=className;}());RLCONF={"wgBreakFrames":false,"wgSeparatorTransformTable":[",\
7RLSTATE={"ext.gadget.dewiki-logo":"ready","ext.gadget.citeRef":"ready","ext.gadget.defaultPlainlinks":"ready","ext.gadget.dewikiCommonHide":"ready","ext.gadget.dewikiCommonLayout":"ready","ext.gadget.dewikiCommonStyle":"ready","ext.gadget.dewikiDarkmode":"ready","ext.gadget.dewikiResponsive":"ready","ext.globalCssJs.user.styles":"ready","site.styles":"ready","user.styles":"ready","ext.globalCssJs.user":"ready","user":"ready","user.options":"loading","ext.wikimediamessages.styles":"ready","ext.pygments":"ready","ext.cite.parsoid.styles":"ready","ext.cite.styles":"ready","mediawiki.skinning.content.parsoid":"ready","skins.vector.search.codex.styles":"ready","skins.vector.styles":"ready","skins.vector.icons":"ready","ext.flaggedRevs.basic":"ready","mediawiki.codex.messagebox.styles":"ready","ext.visualEditor.desktopArticleTarget.noscript":"ready","ext.uls.interlanguage":"ready","wikibase.client.init":"ready"};RLPAGEMODULES=["ext.pygments.view","ext.cite.ux-enhancements","site","mediawiki.page.ready","mediawiki.t
8<script>(RLQ=window.RLQ||[]).push(function(){mw.loader.impl(function(){return["user.options@12s5i",function($,jQuery,require,module){mw.user.tokens.set({"patrolToken":"+\\","watchToken":"+\\","csrfToken":"+\\"});
9}];});});</script>
10<link rel="stylesheet" href="/w/load.php?lang=de&amp;modules=ext.cite.parsoid.styles%7Cext.cite.styles%7Cext.flaggedRevs.basic%7Cext.pygments%7Cext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediamessages.styles%7Cmediawiki.codex.messagebox.styles%7Cmediawiki.skinning.content.parsoid%7Cskins.vector.icons%2Cstyles%7Cskins.vector.search.codex.styles%7Cwikibase.client.init&amp;only=styles&amp;skin=vector-2022">
11<script async="" src="/w/load.php?lang=de&amp;modules=startup&amp;only=scripts&amp;raw=1&amp;skin=vector-2022"></script>
12<meta name="ResourceLoaderDynamicStyles" content="">
13<link rel="stylesheet" href="/w/load.php?lang=de&amp;modules=ext.gadget.citeRef%2CdefaultPlainlinks%2Cdewiki-logo%2CdewikiCommonHide%2CdewikiCommonLayout%2CdewikiCommonStyle%2CdewikiDarkmode%2CdewikiResponsive&amp;only=styles&amp;skin=vector-2022">
14<link rel="stylesheet" href="/w/load.php?lang=de&amp;modules=site.styles&amp;only=styles&amp;skin=vector-2022">
Contains probable German text lines 201–205
201 <li id="pt-sitesupport-2" class="mw-list-item vector-menu-item--collapsible"><a data-mw-interface href="https://donate.wikimedia.org/?wmf_source=donate&amp;wmf_medium=sidebar&amp;wmf_campaign=de.wikipedia.org&amp;uselang=de" data-mw-donate-attempt="top_link" class=""><span>Jetzt spenden</span></a>
202</li>
203<li id="pt-createaccount-2" class="mw-list-item vector-menu-item--collapsible"><a data-mw-interface href="/w/index.php?title=Spezial:Benutzerkonto_anlegen&amp;returnto=Shellcode" title="Wir ermutigen dich dazu, ein Benutzerkonto zu erstellen und dich anzumelden. Es ist jedoch nicht zwingend erforderlich." class=""><span>Benutzerkonto erstellen</span></a>
204</li>
205<li id="pt-login-2" class="mw-list-item vector-menu-item--collapsible"><a data-mw-interface href="/w/index.php?title=Spezial:Anmelden&amp;returnto=Shellcode" title="Anmelden ist zwar keine Pflicht, wird aber gerne gesehen. [o]" accesskey="o" class=""><span>Anmelden</span></a>
References /bin/sh shell executable lines 322–326
322
323 <ul id="toc-Beispiel-sublist" class="vector-toc-list">
324 <li id="toc-Lokaler_execve(/bin/sh)_Shellcode"
325 class="vector-toc-list-item vector-toc-level-2">
326 <a class="vector-toc-link" href="#Lokaler_execve(/bin/sh)_Shellcode">
Contains Arabic or Urdu script lines 414–419
414 <ul class="vector-menu-content-list">
415
416 <li class="interlanguage-link interwiki-ar mw-list-item"><a href="https://ar.wikipedia.org/wiki/%D9%86%D8%B5_%D9%88%D8%A7%D8%AC%D9%87%D8%A9_%D8%A7%D9%84%D8%A3%D9%88%D8%A7%D9%85%D8%B1_%D8%A7%D9%84%D8%A8%D8%B1%D9%85%D8%AC%D9%8A" title="نص واجهة الأوامر البرمجي – Arabisch" lang="ar" hreflang="ar" data-title="نص واجهة الأوامر البرمجي" data-language-autonym="العربية" data-language-local-name="Arabisch" class="interlanguage-link-target"><span>العربية</span></a></li><li class="interlanguage-link interwiki-az mw-list-item"><a href="https://az.wikipedia.org/wiki/Shellcode" title="Shellcode – Aserbaidschanisch" lang="az" hreflang="az" data-title="Shellcode" data-language-autonym="Azərbaycanca" data-language-local-name="Aserbaidschanisch" class="interlanguage-link-target"><span>Azərbaycanca</span></a></li><li class="interlanguage-link interwiki-en mw-list-item"><a href="https://en.wikipedia.org/wiki/Shellcode" title="Shellcode – Englisch" lang="en" href
417 </ul>
418 <div class="after-portlet after-portlet-lang"><span class="wb-langlinks-edit wb-langlinks-link"><a href="https://www.wikidata.org/wiki/Special:EntityPage/Q1152477#sitelinks-wikipedia" title="Links auf Artikel in anderen Sprachen bearbeiten" class="wbc-editpage">Links bearbeiten</a></span></div>
419 </div>
Interspersed hex escape sequences lines 677–680
677<p id="mwmw">Der Opcode String:</p>
678<div class="mw-highlight mw-highlight-lang-asm mw-content-ltr" dir="ltr" typeof="mw:Extension/syntaxhighlight" about="#mwt5" id="mwnA" data-mw='{"name":"syntaxhighlight","attrs":{"lang":"asm"},"body":{"extsrc":"\nchar shellcode[] =\n\"\\xeb\\x2a\\x5e\\x89\\x76\\x08\\xc6\\x46\\x07\\x00\\xc7\\x46\\x0c\\x00\\x00\\x00\"\n\"\\x00\\xb8\\x0b\\x00\\x00\\x00\\x89\\xf3\\x8d\\x4e\\x08\\x8d\\x56\\x0c\\xcd\\x80\"\n\"\\xb8\\x01\\x00\\x00\\x00\\xbb\\x00\\x00\\x00\\x00\\xcd\\x80\\xe8\\xd1\\xff\\xff\"\n\"\\xff\\x2f\\x62\\x69\\x6e\\x2f\\x73\\x68\\x00\\x89\\xec\\x5d\\xc3\";\n"}}'><pre id="mwnQ"><span id="mwng"></span><span class="nf" id="mwnw">char</span><span class="w" id="mwoA"> </span><span class="no" id="mwoQ">shellcode</span><span class="p" id="mwog">[]</span><span class="w" id="mwow"> </span><span class="err" id="mwpA">=</span>
679<span class="err" id="mwpQ">"\</span><span class="nf" id="mwpg">xeb</span><span class="err" id="mwpw">\</span><span class="no" id="mwqA">x2a</span><span class="err" id="mwqQ">\</span><span class="no" id="mwqg">x5e</span><span class="err" id="mwqw">\</span><span class="no" id="mwrA">x89</span><span class="err" id="mwrQ">\</span><span class="no" id="mwrg">x76</span><span class="err" id="mwrw">\</span><span class="no" id="mwsA">x08</span><span class="err" id="mwsQ">\</span><span class="no" id="mwsg">xc6</span><span class="err" id="mwsw">\</span><span class="no" id="mwtA">x46</span><span class="err" id="mwtQ">\</span><span class="no" id="mwtg">x07</span><span class="err" id="mwtw">\</span><span class="no" id="mwuA">x00</span><span class="err" id="mwuQ">\</span><span class="no" id="mwug">xc7</span><span class="err" id="mwuw">\</span><span class="no" id="mwvA">x46</span><span class="err" id="mwvQ">\</span><span class="no" id="mwvg">x0c</span><span class="err" id="mwvw">\</span><span class="no" id="mwwA">x00</span><
680<span class="err" id="mwxg">"\</span><span class="nf" id="mwxw">x00</span><span class="err" id="mwyA">\</span><span class="no" id="mwyQ">xb8</span><span class="err" id="mwyg">\</span><span class="no" id="mwyw">x0b</span><span class="err" id="mwzA">\</span><span class="no" id="mwzQ">x00</span><span class="err" id="mwzg">\</span><span class="no" id="mwzw">x00</span><span class="err" id="mw0A">\</span><span class="no" id="mw0Q">x00</span><span class="err" id="mw0g">\</span><span class="no" id="mw0w">x89</span><span class="err" id="mw1A">\</span><span class="no" id="mw1Q">xf3</span><span class="err" id="mw1g">\</span><span class="no" id="mw1w">x8d</span><span class="err" id="mw2A">\</span><span class="no" id="mw2Q">x4e</span><span class="err" id="mw2g">\</span><span class="no" id="mw2w">x08</span><span class="err" id="mw3A">\</span><span class="no" id="mw3Q">x8d</span><span class="err" id="mw3g">\</span><span class="no" id="mw3w">x56</span><span class="err" id="mw4A">\</span><span class="no" id="mw4Q">x0c</span><

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.