Sample details: f9d87043d2e99098f35a27237925992f --

Hashes
MD5: f9d87043d2e99098f35a27237925992f
SHA1: 5dae52e7a93e6c51674b654222ecbb57cc011928
SHA256: 05aa8a93be480576330e43512f077b8118291b1cd20abdf1de36426d79a4ec13
SSDEEP: 768:itp2QED3/aFWjPrhaqaoj0+aFXjXsTEQd9XkC5Pb616DnXwB:itIjD3/agjlfL0+a9swq9XJPbpcB
Details
File Type: ELF
Yara Hits
YRP/contentis_base64 | YRP/domain | YRP/CRC32_poly_Constant |
Source
http://domstates.su/.nttpd,20-arm-le-t1-z
Strings
		/lib/ld-uClibc.so.0
libdl.so.0
malloc
libc.so.0
memcpy
system
signal
unlink
realloc
__uClibc_main
memset
fclose
fwrite
setsid
_edata
__bss_start
__bss_start__
__bss_end__
__end__
__deregister_frame_info
__register_frame_info
__fork
/dev/null
./.nttpd
								
BjEsew+H
 f1}t|
25(Cm>{R
Lor1C5
X~S[?B
3'e<Vs
K)x:uH
g>#b>C<
og{*.q
@6a|4N
MLr&&dk
_>PDO}Ni]
;W%B'4}
OgVtV@
a\m?xX
gOnd~o
"g~Sm[]
tp`]43
-c>cZ'4
}WH|[j
E{aW{?
3*VGkgW
GCC: (GNU) 3.3.2 20031005 (Debian prerelease)
GCC: (Buildroot 2015.02-git-00879-g9ff11e0) 4.8.4
Cortex-A9
.shstrtab
.interp
.dynsym
.dynstr
.rel.plt
.rodata
.eh_frame
.init_array
.fini_array
.dynamic
.comment
.ARM.attributes