Benign alpine Download

kamailio-dbtext 6.0.6-r0

Copies a file (shutil.copy)No full symbol table (likely stripped)

SHA-25699485a35a3f5d71ef27567c8e3237b021b8173c8fd131bc0579760cd18f6a21d

URLhttps://dl-cdn.alpinelinux.org/alpine/latest-stable/main/x86_64/kamailio-dbtext-6.0.6-r0.apk

Evidence

Open files db_text.so · 0x1c3e–0x1c7e

0x1c3e5f76616c006462745f636865636b5f6d_val.dbt_check_m
0x1c4e74696d650073746174006462745f6c6ftime.stat.dbt_lo
0x1c5e61645f66696c6500666f70656e006462ad_file.fopen.db
0x1c6e745f7461626c655f6e65770066676574t_table_new.fget
0x1c7e63006462745f7461626c655f63      c.dbt_table_c   

DELETE FROM SQL keyword db_text.so · 0x231a6–0x231d6

0x231a62573257325736661696c656420746f20%s%s%sfailed to 
0x231b664656c6574652066726f6d207461626cdelete from tabl
0x231c665210a0064625f74657874205b646274e!..db_text [dbt
0x231d65f626173652e633a363236          _base.c:626     

SELECT SQL keyword in query dbtextdb.py · lines 396–398

      Args:
          query: e.g. 'select * from table;'
          writethru: bool

eval() call (Python) dbtextdb.py · lines 999–1003

          try:
              if val:
                  val = eval(val)
          except NameError as e:
              raise ExecuteError('Failed to parse %s in %s '

Copies a file (shutil.copy) dbtextdb.py · lines 1158–1160

          table_file = os.path.join(self.location, self.table)
          Debug('Copying %s to %s' % (temp_file, table_file))
          shutil.copy(self.temp_file.name, self.location + '/' + self.table)

No evidence locations were recorded for this file. Raw result