Hostile 92% Download

e8bcf1d9ca8111c004626d24e67fc8a1db2d9899bc4148320d5e3fca1736b442.elf

packed, stripped, anti-analysis

Sectionless ELF direct-syscall memory unpackerSectionless ELF with multiple packing indicators
SHA-256e8bcf1d9ca8111c004626d24e67fc8a1db2d9899bc4148320d5e3fca1736b442

Evidence

Sectionless ELF direct-syscall memory unpacker 0x0–0x160
0x07f454c46020101000000000000000000.ELF............
0x1002003e00010000001079400000000000..>......y@.....
0x2040000000000000000000000000000000@...............
0x3000000000400038000300400000000000[email protected]...@.....
0x4001000000050000000000000000000000................
0x5000004000000000000000400000000000..@.......@.....
0x60b98a000000000000b98a000000000000................
0x7000001000000000000100000006000000................
⋯15 more rows
x86-64 mmap syscall in sectionless code 0x8374–0x8594
⋯3 more rows
0x83a45ae82a00000050524f545f455845437cZ.*...PROT_EXEC|
0x83b450524f545f5752495445206661696c65PROT_WRITE faile
0x83c4642e0a000a0024496e666f3a200a0090d.....$Info: ...
⋯5 more rows
0x8424514d29c94183c8ff6a22415a525e6a03QM).A...j"AZR^j.
0x84345a29ff6a09580f054901c64889442410Z).j.X..I..H.D$.
0x84444897448b4424086a12415a4c89ee6a09H.D.D$.j.AZL..j.
⋯3 more rows
0x8484d5ad50ad41904889f75effd5595e5f5d..P.A.H..^..Y^_]
0x84946a055a6a0a580f0541ffe55de840ffffj.Zj.X..A..].@..
0x84a4ff2f70726f632f73656c662f65786500./proc/self/exe.
0x84b400010000b3070000f50500000e490100.............I..
⋯14 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.