Sample : 442e9b3e337b54493d8ddce068171389eb4f60ce0a455d796ed6e9211fe77994

Summary


OS ABI

UNIX - System V
CPU class

32 bit
Persistence (user)

No
Persistence (root)

No
CPU byte order

2's complement MSB
File type

ELF 32-bit MSB executable, MIPS, MIPS32 version 1 (SYSV), dynamically linked, interpreter /lib/ld-uClibc.so.0, stripped
CPU type

MIPS I
Entropy

5.01755271341
Syscalls executed (root)

15
Syscalls executed (user)

14
ELF type

Executable file

ELF


Class

32 bit
Data encoding

2's complement MSB
Operating system ABI

UNIX - System V
Object file type

Executable file
ELF version

0.1
Machine

MIPS I
Link

dynamic
Entrypoint

0x40ac00
Interpreter

'/lib/ld-uClibc.so.0'
Number of segments

7
Number of sections

27
Program header table offset

52
Section header table offset

1012472
Program header table - size of entry

32
Section header table - size of entry

40
Program header table - entries

7
Section header table - entries

27
Section header table - index sections names

26
Stripped

True
Sections stripped

False
Needed libraries

libssl.so.0.9.7

libacos_shared.so

libcrypt.so.0

libnat.so

libnvram.so

libc.so.0

libcrypto.so.0.9.7

libbcm.so

Dynamic symbols

getCurrWanIp

USBCgiGetTable

usbSettingsCgiMain

blkDetectWanCgi

chkSameRtIP

mnu_cgi_wps_status

upgradeCgiCheck

lang_GetParam

blkCgi_wsw_option

ddnsCgiShowStatus

diagCgiRestartAllProcess2

agApi_fwBlkServGet

kill

strcpy

_init

abFirewallLoadServices

main

abFirewallSaveServices

fwCgiGetFilterListCount

routeCgiMain

vpnCgiGetManualPopErr

verCgi_GetParam

vpnCgiGetAutoPfsEnable

fwSaveAllFwSettings

vpnCgiStatus

SSLv23_server_method

wlanAclCgiMain

WAN_ith_CONFIG_GET

wlgCgiGetPassphrase

vpnGetIkeDirection

wlgCgiGetApstate

usbBrowseCgiMain

respCgiSendUpdatePage2

vpnGetParamPreShareKey

fwCgiGetReturnPage

fwCgiFwInFltrMain

calculate_checksum

vpnCgiGetLifeTime

fwCgiDelFilterLink

reply_restore_fail

wlgGetSecProfilePassphrase

reboot

inet_ntop

umount

nvram_set

signal

parseLangTblFileMD5

countUsedNumBySid

USBCgiGetMountTable

langWriteZipLangTblToMTDExten

basicCgiWizStatic

bpaloginGetConnectionStatus

__extendsfdf2

qosCgi_getAppsOptions

reloadHashTbl

vpnCgiGetAutoDirection

fwOutboundRulesCheck

vpnCgiGetManualEspSpiIn

vpnGetLocalLanIpAddrEnd

vpnCgiGetLogContent

puts

get_wan_link_status

vpnCgiGetManualDestIp

format_time

wizCgiResultGetResult

find_file_length

blkCgiGetWlMode

lang_WriteCgiMain

keyMatchProcess

traffic_important_update

passwordCgiMain

printf

samba_writeEtcPasswd

isHexDigit

fwCgiFwHandleFilterLink

mssid_access_control

findIfByName

wlgCgiGetSSID

wlgGuestCgi_disable

listen

fwCgiFltrRuleDoFormat

strerror

wlgGetSecProfileTempSetting

fwacos_convert_to_unicode

set_warning_state

initMultiLangugeModule

blkCgiGetChannel

fsync

vpnCgiGetAutoSrcFinishIp

wlagRtsThresholdGet

vpnGetLocalLanIpSubnetMask

basicCgiGetParam

trafficGetParam

strchr

agApi_fwSpiStatusSet

abFirewallSaveFilterRule

parseLangTblFileNameVer

trafficCgi_cal_time_to_string

agApi_clear_nat_for_httpd

isValidNetmask

get_wlan_channel

atoi

vpnManualPolicyApply

free

diagCgiDnslookup

accept

ftell

mbrn3000Get

vpnGetLocalLanIpAddrType

acosPortTrPortCheck

lanCgiGetRsvIpTable

get_country_code

getGuiRegionExtenFrmMTD

fwCgiGetKernelFilterIndex

vpnWizardStep1

accessCgiMain

wlgGetSecProfileBroadcastSSID

blkEditPasswordCgi

vpnGetParamEncryption

getWinsSingleDeviceName

abRouteAdd

basicCgiPppoeMain

upnpCgiGetParam

agApi_tmschGetStatusByName

blkCgi_wsw_manual_wep

ver_ResultCgiMain

accessCgi_isLoggedInBefore

qosCgi_ruletabMain

efCgiGetHWVersion

agApi_natSetReadyshareName

mnu_tr069_status

vpnPolicyApply

wifiScheCgi

vpnCgiGetManualDestMask

fwCgiPtMain

langGetZipLangTblChksum

fwCgiPtGetPolicyParam

vpnCgiGetAutoSrcIp

acosNvramConfig_readAsInt

natLogPointSet

wlgCgiGetChannel

strcmp

strstr

folder_name_filter

rstCgiBpa

vpnCgiGetAutoLocalIdType

USBCgiGetUrl

stricmp

diagCgiReboot

vpnCgiGetEndPoint

httpd_sendErrorRes

wlgGetSecProfileSSID

vpnCgiGetAutoDhGroup

rstCgiPoa

vpnCgiGetRTAccess

blkCgi_wsw_wpapsk

__mulsf3

accessCgiLogin

wlgGetSecProfileEnable

rstCgiDhcp

aspOptionGet

bpaWebDisconnectBpa

agApi_fwBlkServModAction

sysFlashSectorErase

getServiceTable

strnicmp

usbAdvCgiMain_setBrowser

__lshrdi3

lanCgiMain

rstCgiGetStats

fork

fwCgiEmail

diagCgiGetDnslookup

vpnCgiGetAutoDestIp

fwCgiFwFilterAddSecondRule

abFirewallSaveBlkServices

lang_DownloadCgiMain

blkCgiLang

exit

parseAdslInfo

unicode_file_to_ascii_str

SSL_accept

vpnCgiGetRTID

getGuiRegion2FrmMTD

vpnGetIkeRemoteIdData

fw_replace_space

fwCgiLog

isNeedChangeShareName

mtd_write

wlagACLStatusGet

usbApproveCgiMain

vpnCgiGetManualErrorNum

fwAcosCgiGetInboundParam

wlgSecProfileCgi_getParam

wps_button_cgi

getSysLogInfo

qosCgi_getMACSection

acosNvramConfig_get

wlgOpModeGet

blkCgi_wsw_summary

notifyRefCntNzero

lstat

debugCgiGetParam

fwCheckCgi_getOpendnsSupport

fwCgiRemote

routeCgiGetRouteTable

agApi_fwGetTriggerConf

wlgGetWlanStateStatus

accessCgi_getLastAuthStatus

basicCgiEtherMain

qosCgi_getLANPortOptions

HashString

__pack_f

fseek

BcmWan_setWanLinkStatus

compareByASCII

socket

qosCgi_rulesInit

getValue

fwCgiGetDayTimeParam

strcasestr

rstCgiTestInternetConnection

keywordCgi

wds_get_linkrate

vpnPolicyEdit

__truncdfsf2

accessCgi_setAuthorized

tmShmInit

vpnGetGeneralIkeKeepAlive

abApplyLanSetting

respCgiSendRebootPage

getDeviceName

sprintf

rstCgiGetPppoeConnectionTime

wlagSSIDSuppressStatusGet

wizCgiResultGetNext

blkCgi_wsw_ask_wep

dummyFun

wlgAdvCgiMain

vpnCgiLog

ftpc_Abort

syslog

__fixsfsi

recvfrom

respCgiCacheRebootPage

upgradeFailCgi

rstCgiPoe

memcmp

routeCgiApply

wlgCgiGetTempSetting

blkCgi_isShowBlankStateGUI

backupCgi

lang_CheckBrouserLanguage

strcspn

inet_addr

agApi_fwGetServiceByName

rstCgiGetLoginConnectionTime

wlgCgiGetACLStatus

ambitWriteLog

wlgCurrOpModeGet

verGetPgBarCount

fwCgiGetErrReason

rstCgiGetWanParam

getUsbFileSystem

basicCgiWizBpa

backupCgi_sendConfig

fprintf

blkCgi_pppoe

BcmAdslCtl_GetConnectionInfo

SSL_write

fwcgiFilterRuleDel

rstCgiGetBpaStatus

getTokens

vpnCgiGetAutoTypeDestIp

diagCgiDisplayRt

WAN_ith_CONFIG_SET_AS_STR

blkCgi_wsw_wepkey

checkInit

blkCgi_getCaVersion

SSL_new

vpnCgiGetManualSourceIpType

str_replace

agApi_fwGetFirstTriggerConf

insertMultiLangugeHashTable

trafficCgi

vpnCgiGetWizardErrorNum

munmap

respCgiSendRebootWithProgBarPage

agApi_setDeviceListenPortRange

fwCgiFwFilterAddSecondRuleByEntry

SSL_CTX_set_cipher_list

fwCgiGetBksTable

reconfig_wlan

accessCgi_isAllowedAccess

perror

vpnWizardStep2

qsort

diagCgiPortScanUpdate

parseLatestLangTblVersionInfo

diagCgiPingMain

langWriteZipLangTblToMTD

vpnWizCgiMain

inet_ntoa

vpnGetGeneralRtVpnEndptAddrData

fwCgiFwFilterDelRuleBySid2

getDevname

memset

agApi_fwBlkServGetCnt

efCgiGetWlanSecurity

getUsbDevName

wiz_show_country

setSysLogInfo

vpnCgiGetPolicyFull

startmanualpolicy

agApi_enableQoS

sync

SSL_CTX_use_certificate_file

build_asp_handler_table

agApi_tmschAddConf

set_smb_link_style

unlink

respCgiSendVPNUpdatePage

chdir

pot_ValueGet

blkCgi_wsw_wep

trafficIsSupported

agApi_natRulePortCheck

fwCheckCgi_getModel

abFirewallLoadBlkServices

do_restore_cgi

SSL_library_init

getUsbVolumeName

SSL_CTX_use_PrivateKey_file

findService

blockSitesEnabledOrNot

agApi_fwFilterDel

agApi_tmschDelConf

restartmanualpolicy

websGetVar

wps_pin_cgi

SendData_reply200withAppType

vpnCgiGetAutoEnalgorithm

vpnSaveCheckBox

accessCgi_setCurrUserIp

agApiLogPointSet

rstCgiGetPppoaStatus

vpnGetParamAuthentication

USBCgiGetInfo

basicCgiWizPppoa

upgradeCgiMain

lang_LangCgiMain

wps_status_cgi

vpnGetGeneralRtVpnEndptAddrType

createString

vpnGetEspSpiOut

abSetTrustIPOnBlkSite

fputs

wdsCgiMain

_eval

atof

agApi_fwServiceGet

ftp_writeFtpConf

usbLoadSettings

firewallServiceLoadDefault

accessCgi_isUserTimedOut

abFirewallLoadInBoundPolicy

vpnGetIkeExchangeMode

shmat

fwFailedMsgPage

fwCheckCgi_getRegionTag

agApi_natSetWanLanConflictFlag

basicCgiSetWanDns

agApi_fwGetFilterTable

accessCgi_currUserLogout

hd_cksum

fwCgiFltrGetOutBndParam

loadStringFromMTD

USBDeviceCgi

wlanAclCgiAdd

rstCgiGetDhcpcParam

strncpy

blkGetDetWanResultCgi

vpnCgiGetAutoRemoteIdType

abLanIpWorkaround

blkCgi_ssid

__divdf3

samba_writeSmbConf

CreateHeader

isWanSubnet

sscanf

replaceMultiLangugeHashTable

vpnCgiGetManualEspAuthKey

vpnCgiGetManualDIpTy

accessCgi_Logout

bcmAdslCtl_GetStatistics

agApi_acosGetNatRuleByID

getAcosServiceTable

band_width_get

agApi_fwDelTriggerConf2

blkCgi_bpa

agApi_fwEchoRespSet

vpnWizardStep4_done

fgets

agApi_fwURLFilterEnable

vpnCgiGetManualRmVpnType

wlgGetSecProfilePSK

updateSidForFwAndService

trafficStatusCgi

agApi_fwSipStatusSet

basicCgiWizPppoe

lang_BrsChangeCgiMain

agApi_fwSetTriggerConf

ftpc_SendGetCfgCmd

blkCgi_getParam

__adddf3

efCgiGetDeviceId

__fpcmp_parts_f

my_write

agApi_fwGetNextTriggerConf

isLangTblLatest

shmget

get_real_file_size

tr069ClientCgi

dhcp_lease_renew

wlgCgiGetRtsThreshold

fwCgiFwOutFltrMain

lang_StrTblUPGMain

vpnCgiGetManualDestFinishIp

cal_time_to_string2

blkCgiGetCountry

agApi_fwServiceDelByName

qosCgi_serviceMain

wlgGetSecProfileDefaultKey

vpnCgiGetAutoDestFinishIp

accessCgi_initUserRecord

vpnCgiGetPolicy

fwCgiFwFilterDelSecondRule

fputc

close

localtime

wlagWepStatusGet

vpnSaveConf

__unpack_f

get_eth_link_status

vpnCgiGetLocalidData

dhcpcGetLeaseExpires

vpnGetIkeDhGroup

blkCgi_wsw_passwd_edit

vpnAutoPolicyApply

gray_or_href

ver_CheckUpgradeCgiMain

getWanInterfaceName

agApi_fwServiceMod

fwCgiSchedule

blkCgi_wsw_setup

wlgGetSecProfileNum

basCgi_detWan

handle_get

usb_restore_name

fwCgiGetSelectedServiceList

fwCgiGetMailParam

accessCgi_setActiveUser

startautopolicy

filter_devname

write

fwCgiFindNodeByCnt

agApi_fwURLFilterDelAllKeywords

acosNvramConfig_save

fwCgiFltrGetScheStatus

wlgGetSecProfileAllowAccess

vpnCgiGetStatusTable

isValidIpAddr

lanCgiGetRsvIpParam

initStringTable

strtok

fwCgiFltrProtoConvert

pppWebConnectPptp

wlgSecProfileInit

backupCgi_isEraseNvram

blkCgi_fix

wizCgiDetWan

time

wlgCgiGetPskStatus

agApi_fwDelTriggerConf

fwCgiService

agApi_fwFilterInsert

wlgCgiGetCountry

ver_SetImageInfo

bcmCheckInterfaceUp

qosCgi_bwMain

vpnreStartSevice

acos_itoa

dgn2200Get

wlgCgi_getParam

duplicateRule

manageLink

vpnCgiGetPoliciesTable

fwCgiServiceEdit

fwPtRulesInit

folder_name_restore

SSL_set_fd

fopen

wps_cgi_enable_wps

wps_adv_cgi

fwCgiFilter_updatePFRule

get_lan_link_status

SSL_read

MD5Final

__ashldi3

__addsf3

rstCgiGetPppoaConnectionTime

basicCgiGetTestLink

fread

setsockopt

blkCgiGetPassPhase

fwCgiGetServiceArray

agApi_AddQoSRule

trafficStatisticsGet

vpnGetEspAuthenticationKey

USBCgiGetParam

create_upgrade_file

vpnWizardStep3

upgradeCgi_GetParam

fclose

wlgGetSecProfileStatus

wlgCgiGetKeyLen

USBAdvCgiMain

memmove

mmap

__floatsisf

fwCgiFltrRuleIpInfoFormat

wlagGetAclTable

wlgCgiGetFragThreshold

vpnGetPolicyName

SSL_CTX_new

fwAcosCgiInbound

isFwLatest

vpnCgiGetManualAAlgorithm

langSaveNvram

fwCgiPtSaveAllFwptRecordToNvram

wps_cgi_disable_wps

__floatunsidf

do_erase_cgi

lanCgiGetAttachDeviceTable

fwCgiGetLogParam

_nvram_get

vpnCgiGetAutoPopErr

ftpc_SendGetStrDatCmd

vpnCgiGetRemoteIpIntnetName

wait_for_ppp_to_terminate

chkRtVPNEpAddrType

copy_bssid_default_values

addDenyKeywords

fwCgiFwFilterApply

getpid

basicCgiPppoaMain

wait

fwCheckCgi_getFwVersion

my_read

ftpRestart

VerCgi_GetNotes

wlgSecProfileMain

usb_remote_access_reinit

getString

vpnStartSevice

fwCgiFltrGetServName

fwCgiGetSelectedService

isAdminFolder

rstCgiGetFwVersion

accessCgi_sendUnauthorized

restartautopolicy

ftpc_GotFile

__make_dp

updateCountOfAllServices

rstCgiGetLoginStatus

get_arp_dev

sys_set_timezone

wlgCgiGetBcaststate

wlgCgiGetSSIDSuppressStatus

acosNvramConfig_unset

blkCgi_fail

agApi_fwURLFilterAddKeyword

agApi_natSetRegion

parsePage

routeCgiGetRouteParam

get_profile_security

SambaRestart

BcmAdsl_GetObjectValue

accessCgi_getActiveUserIp

select

blkSecurityType

vpnGetRemoteLanIpAddrEnd

Create_Hashtable

ftp_writeFtpWanConf

connectWithTimeout

USBCgiGetOption

tr069cCgi_GetParam

localtime_r

agApi_natRuleAdd2

subMaskToNum

deviceCgiMain

vpnSetDestType

wlggetSecProfileWEPLength

bandwidth_CheckCgiMain

ftpc_GetStringDatStatus

fwAcosFilterIszZzRule

rstCgiGetWanDns

wlanAclCgiEdit

deleteDenyKeywords

getArgs

vpnCgiGetManualSrcFinishIp

vpnCgiGetAutoErrorNum

rangeMaskToNum

sys_uptime

read

freeHashtable

route_add

pppWebDisconnectPptp

abTmSchCheckSchedule

qosCgi_getBandwidth

agApi_IPsecDisable

settimeofday

update_service_refcnt

basicCgiWizDyn

wds_get_rssi

blkGetInternetResultCgi

__pack_d

accessCgi_isAuthorized

vpnGetParamEnablePfs

agApi_fwServiceAdd

inet_ntoa_b

upnpCgiMain

snprintf

vpnCgiGetManualEspEncrKey

agApi_setDeviceListenPort

lseek

wlgGetIsolationStatus

qosCgi_getMACTable

wlgCgiGetPsk

wlgCgiGetChannelStr

fcntl

accessCgi_isAllowRemoteAccess

strtol

rstCgiGetStaticIPParam

__divsf3

sendto

stringOut

accessCgi_clearActiveUser

ftpc_GetConfigFileStatus

SSL_free

blkCgi_pptp

stat

blkCgi_region

__ltsf2

deviceModeCgi

agApi_fwBlkServAdd

strlen

vpnGetGeneralPingIpAddr

recv

vpnCgiGetLOCALIP

acosNvramConfig_read

MD5Update

NA_version_get

agApi_fwGetAllServices

fwCheckCgi_getRegion

vpnCgiGetPresharedKey

sendResultPage

agApi_natSetTMHttpHijackFlag

fwCheckCgi_getPgbarCount

getStr

vpnGetEspEncryptionKey

vpnCgiGetAutoPingAddress

wlgSecSendPage

ioctl

blkCgi_updateConflictFlag

base64decode

ftpc_WriteImgToFlashStatus

vpnCgiGetPolicyName

fwCgiServiceAdd

rstCgiGetAdslStats

getMultiLanguageStrByKey

aspCharIsPrint

fwCgiFltrGetOutBndTable

agApi_immeMailPointSet

setkey

vpnPolicyDelete

updateSidOfAllServices

vpnCgiGetAutoIkeAlive

lanCgiReserveIp

agApi_natUnhook

vpnGetIkeLocalIdData

calculateFileSize

lang_TopMain

scandir

respCgiSendResp

stristr

important_update

lwConflictCgiFunc

__uClibc_main

fwCgiFwRuleMain

SSL_CTX_check_private_key

acosForwardRuleAdd

strncmp

wlgGetSecProfileSec

abCheckBoardID

wlgCgiGetAuthType

vpnPolicyGetNvram

strrchr

findServiceIndex

fwCheckCgi_getInternetStatus

wlgCgiGetDeviceTable

vpnCgiGetRTIP

wps_cgi_get_param

acosNvramConfig_set

lang_ResultCgiMain

vpnGetRemoteLanIpAddrStart

malloc

atol

respCgiSendCachedRebootPage

netAddrIpMask

wlgGetSecProfilePSKStatus

blkCgi_wlMode

vpnCgiGetManualSrcMask

acosNvramConfig_readDefault

accessCgi_setLastAuthStatus

getDevNameFromDhcpd

vpnCgiGetManualSrcIp

strtoul

latestLangTblVersionInfo_init

getReservedAddr

qosCgi_getMACButtons

respCgiGet

blkCgi_dns

agApi_getFltrRuleCnt

formatMacAddr

strcasecmp

vpnGetParamSaLifeTime

trimstr

deviceCgiGetDeviceTable

vpnGetEspEncryptionType

WAN_ith_CONFIG_SET_AS_INT

vpnCgiGetAutoExchangeMode

vpnCgiGetManualPolicyName

strToLower

abFirewallLoadBlkSite

vpnGetEspSpiIn

wlgGetSecProfileAuthType

lang_CheckCgiMain

encrypt

vpnCgiGetLOCALID

SSL_load_error_strings

blkCgi_ca_hidden

blkCgiGetSsid

ver_SelCgiMain

cgiInitLogInfo

diagCgiGetRoutes

symlink

parseLangTblFileTag

remove

ver_DownloadCgiMain

lanCgiSetLanIp

addAllRelatedRules

feof

sendPage2Client

fw_restore_space

strcat

wlgCgiGetKeyVal

vpnGetIkeRemoteIdType

agApi_fwServiceGetCnt

diagCgiRebootNow

ver_CheckCgiMain

_fini

usb_filter_name

strspn

wlgCgiGetAclTable

agApi_fwFilterGet

bpaWebConnectBpa

vpnGetIkeLocalIdType

accessCgi_getCurrUserIp

putchar

basicCgiAdslMain

get_sta_dev

efCgiGetSWVersion

vpnCgiGetAutoRmVpn

sysinfo

multiLangugeReadLangTblMTD

vpnCgiGetManualRemoteIp

fwCgiFltr_triggerPF

backupCgi_setEraseNvram

fwCgiGetServiceList

agApi_natSetTrafficMeterFlag

agApi_fwFilterMod

fwCgiFltrGetInBndParam

__floatsidf

ddnsCgiMain

blkCgi_vfysucc

lipchanged_getpage

chkPolicyName

acosNvramConfig_save_config

send

realloc

basicCgiWizPptp

SendData2Client

sleep

qosCgi_getParam

blkCgi_dhcp

USBCgiGetDevTable

wlgGetSecProfileKeyVal

abFilterRecordInit

wlagFragThresholdGet

vpnCgiGetAutoDestMask

fwWanSetupInit

content_type

vpnCgiGetManualEspSpiOut

wanCgiMain

syslogSet

basicCgiWizFix

pppWebDisconnectPppoe

agApi_natRuleDel

getStatsFromFile

respCgiSendRebootPage2

isValidNetworkAddr

isValidMacAddr

ftpc_LangGotFile

handle_post

ver_WriteCgiMain

memcpy

adslDialFlag

fwCgiFwServChngServCnt

deleteAllRelatedRules

fwCgiGetRemoteParam

agApi_IPsecEnable

pppWebDisconnectPppoa

wifiCgi_main

dhcp_lease_release

wirelessCgiMain

subnetTransform

rstCgiGetHwVersion

blkCgi_getParam2

system

strIsIp

pppWebConnectPppoa

wlagWlanStateStatusGet

toupper

vpnGetLocalLanIpAddrStart

fwrite

acosNvramConfig_match

daemon

abFirewallLoadFilterRule

diagCgiGetPingResult

wdsCgi_getParam

open

agApi_fwURLFilterSetTrustedIp

acosForwardRulePortCheck

wlgCgiGetWEPStatus

vpnGetRemoteLanIpAddrType

fwInboundReadFromRAM

agApiSyslogSet

wlgCgiGetDefaultKey

vpnCgiGetPreshared_Key

fwCgiPtServiceMain

vpnCgiPoliciesDoFormat

pppWebConnectPppoe

route_del

syslogGet

USBUmountCgi

vpnCgiGetUserCount

USBCgiGetMountNum

inet_aton

vpnCgiGetRemoteAddress

accessCgi_updateUserAuthorization

wlgGetSecProfileName

fwacos_convert_to_unicode2

wizCgiSelGetNext

agApi_NatIsEnabled

__errno_location

diagCgiSetReboot

usbBasicCgiMain_setBrowser

__unpack_d

vpnGetDestType

http_d

rstCgiPptp

vpnGetRemoteLanIpSubnetMask

rstCgiGetPppoeStatus

getPppConnectionTime

sendbackResultPage

agApi_fwServiceDel

qosCgi_main

strtok_r

calloc

strftime

parseMultiLangugeString

isLanSubnet

abRouteDelete

getUsbDevSpace

qosCgi_getPortRangeSection

acosNvramConfig_invmatch

ERR_print_errors_fp

fwCheckCgi_checkNewFw

MD5Init

vpnStopSevice

prepareCryptTable

gethostbyname

wlgCgiGetScheTable

vpnCgiGetManualEnAlgorithm

fwCgiFltrGetInBndTable

abFirewallSaveInBoundPolicy

blkCgi_detWan

itoa

parseLangTblFileSize

wlgCgiGetWiFionoffStatus

parseLatestFwVersionInfo

calculate_couting_period

lang_GetVersion

upgradeCgi_setImageInfo

cat2HexNumTochar

vpnCgiGetRemoteidData

abTmSchLoadConf

vpnCgiGetAutoAAlgorithm

blkCgiGetWepValue

wlgCgiGetSecuType

bind

rewind

genWarningMsg_cgi

fwCgiPtGetPolicyTable

vpnCgiGetAutoSrcMask

get_bdg_dev

vpnGetEspAuthenticationType

blkCgi_wsw_passwd

vpnCgiGetAutoTypeSourceIp

__muldf3

USBCgiGetBrowseNode

idxStrToLen

agApi_fwURLFilterEnableTmSch

__make_fp

ReplaceHashTable

abFirewallSavePortTr

alphasort

trafficInit

qosCgi_getQosTable

fwChangePfByLanSubnet

Anomalies


Segments
W^X permission : PT_DYNAMIC at offset 0x140
Memory size doubles physical size : PT_LOAD at offset 0xad000
PT_NULL at offset 0x0


Sections
Uncommon sections : .rld_map
.pdr
.reginfo
.sbss
section without a name
.MIPS.stubs
.mdebug.abi32
.sdata


Debug information

False
Comment

GCC: (GNU) 4.2.3

GCC: (GNU) 3.3.2

Hash


MD5

6e37ab74491954b2763bdb6214848045
SHA1

5f0fd3fc746d02820dc3eeace0dd818785fd8116
SHA256

442e9b3e337b54493d8ddce068171389eb4f60ce0a455d796ed6e9211fe77994
SHA512

7f0682f2d959f4953c782524ba229d78dbb86ea09243faf9e10ba97567ffb88f30825a271f411f84bda92ea2b9ee8d36f424b7e5a34bc8bf3c974424b61666fe
ssdeep

12288:Z+UxSh3Ru8DT1hVWaL7BF5hph5XSFwOusYdeJ8Bx5gx5PYnyhIFflW3:Zlm3Ru89hyFwOadeOBByhgfl0

Bytes


Entropy

5.01755271341
Max entropy (16KB blocks)

6.00166108776
Unique bytes (0-255)

256
Null bytes

394734
White spaces

44084
Printable bytes

255559
First 16B

7f 45 4c 46 01 02 01 00 00 00 00 00 00 00 00 00
Last 16B

00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00
Longest same bytes sequence

Byte : 0x0

Offset : 0xc5ad6

Length : 97003

Three rarest bytes

0x9b - 67 times

0xcf - 66 times

0xeb - 57 times

Three most common bytes

0x0 - 394734 times

0x8f - 42336 times

0x20 - 28501 times

File type


Mime type

application/x-executable
File type

ELF 32-bit MSB executable, MIPS, MIPS32 version 1 (SYSV), dynamically linked, interpreter /lib/ld-uClibc.so.0, stripped

VirusTotal


URL

https://www.virustotal.com/#/file/442e9b3e337b54493d8ddce068171389eb4f60ce0a455d796ed6e9211fe77994
Positive

0
Scan date

2017-05-23 07:46:58

Data Explore


Paths

/lib/ld-uClibc.so.0

/dev/console

/dev/mtd4

/dev/mtd5

/var/run/httpd.pid

/dev/null

/dev/mtd10

/dev/mtdblock10

/var/run/ddnsd.pid

/dev/aglog

/dev/aglog

/proc/switch

/var/run/upnpd.pid

/usr/sbin/keepalive

/etc/resolv.conf

/dev/mtd1

/dev/null

/var/run/ppp0.pid

/var/run/pppd_pppoa0.pid

/var/run/pppd_ppp0.pid

/proc/var/fyi/wan/%s/status

/proc/uptime

/var/ppp/linkupstart.%s

/var/adslversion

/var/adslversion

/dev/bcmadsl0

/proc/net/dev

/sbin/acos_service

/sbin/acos_service

/var/run/ftpc.pid

/var/run/ftpc.pid:

/dev/null

/dev/mtd0

/proc/net/arp

/sbin/rmmod

/sbin/insmod

/bin/sh

/dev/null

/dev/null

/dev/null

/dev/null

/var/log/bftpd.log"

/etc/ftpmotd"

/mnt/usb%d/part%d/%s

/usr/bin/killall

/usr/sbin/bftpd

/usr/sbin/bftpd

/mnt/usb%d/part%d/%s

/mnt/usb%d/part%d

/proc/mounts

/dev/sd

/proc/scsi/scsi

/bin/sh

/bin/sh

/usr/local/samba/smb_pass

/usr/local/samba/smb_pass

/usr/bin/killall

/usr/bin/killall

/usr/local/samba/smbd

/usr/local/samba/nmbd

/dev/gpio_drv

/usr/sbin/ipsec

/usr/sbin/ipsec

/proc/net/ipsec_spi

/dev/null if

/etc/ipsec.d/examples/no_oe.conf

/var/run/pluto/pluto.pid

/usr/sbin/ipsec

/usr/sbin/ipsec

/usr/sbin/ipsec

/usr/sbin/ipsec

/usr/sbin/ipsec

/usr/sbin/ipsec

/usr/sbin/ipsec

/usr/sbin/ipsec

/sbin/insmod

/dev/mtdblock4

/dev/mtdblock2

/dev/mtd2

/dev/mtdblock5

/dev/mtdblock3

/dev/mtd3

/dev/mtd6

/dev/mtd7

/usr/bin/killall

/usr/sbin/cwmpCPE

URLs

http://0.0.0.0

IPs (v4 and v6)

0.0.0.0

0.0.0.0

0.0.0.0

255.255.255.255

127.0.0.0

192.168.0.1

255.255.255.255

208.67.222.222

1.0.0.50

255.255.255.254

10.64.64.64

1.1.1.1

10.0.0.138

0.0.0.0

1.1.1.1

127.0.0.1

::

1.0.0.30

Code Explore


Nucleus

Eh_frame

Number of functions : 0

Sandbox (user)


Standard output

Standard error

/tmp/442e9b3e337b54493d8ddce068171389eb4f60ce0a455d796ed6e9211fe77994: can't load library 'libnat.so'

Sandbox (root)


Standard output

Standard error

/tmp/442e9b3e337b54493d8ddce068171389eb4f60ce0a455d796ed6e9211fe77994: can't load library 'libnat.so'

Behavior


User behavior

Syscalls


Unique
write
stat
open
mmap2
exit
munmap
execve


Unique number
7

Total number
14

Number of processes

1

Trace lines lost

0

Files being read

/lib/libnat.so

/usr/lib/libnat.so

Max sleep

-1.0



Root behavior

Syscalls


Unique
write
stat
commit_creds
mmap2
munmap
exit
open
execve


Unique number
8

Total number
15

Number of processes

1

Trace lines lost

0

Files being read

/lib/libnat.so

/usr/lib/libnat.so

Max sleep

-1.0