Benign Download

cmdexec

Shell command execution capabilitysystem() function call
SHA-2567e11985dba6e5828b668c2dd36d3791d95e233220818d7269f933a48596f2523
MaleculeH(Po)Md(He)

Evidence

Shell command execution capability 0x99e–0x9ce
0x99e655461626c65005f44594e414d494300eTable._DYNAMIC.
0x9ae73797374656d005f49544d5f64657265system._ITM_dere
0x9be676973746572544d436c6f6e65546162gisterTMCloneTab
0x9ce6c65005f6669 le._fi
Get user ID 0xa0c–0xa3c
0xa0c72745f6372745f636f6d70696c657200rt_crt_compiler.
0xa1c6765747569640074656d706e616d0073getuid.tempnam.s
0xa2c7072696e7466005f5f66737200697373printf.__fsr.iss
0xa3c70616365005f pace._
usage: label (lowercase) 0x1730–0x1770
0x173081c3d10801005bc9c300000001000000......[.........
0x174075736167653a20257320636d64206b65usage: %s cmd ke
0x175079776f72642073726320646573740a00yword src dest..
0x1760596f75206d7573742062652022726f6fYou must be "roo
0x1770742220666f7220257320746f2065 t" for %s to e

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.