× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: c5ca0ecc3d1b10235d8615e10382dc0e938c3e085b3e19d1592894dc106d1bb2
File name: gay
Detection ratio: 1 / 57
Analysis date: 2015-06-18 21:05:50 UTC ( 2 years, 5 months ago )
Antivirus Result Update
Avast ELF:Gafgyt-D [Trj] 20150618
Ad-Aware 20150618
AegisLab 20150618
Yandex 20150618
AhnLab-V3 20150618
Alibaba 20150618
ALYac 20150618
Antiy-AVL 20150618
Arcabit 20150618
AVG 20150618
Avira (no cloud) 20150618
AVware 20150618
Baidu-International 20150618
BitDefender 20150618
Bkav 20150618
ByteHero 20150618
CAT-QuickHeal 20150618
ClamAV 20150618
CMC 20150618
Comodo 20150618
Cyren 20150618
DrWeb 20150618
Emsisoft 20150618
ESET-NOD32 20150618
F-Prot 20150618
F-Secure 20150618
Fortinet 20150618
GData 20150618
Ikarus 20150618
Jiangmin 20150618
K7AntiVirus 20150618
K7GW 20150618
Kaspersky 20150618
Kingsoft 20150618
Malwarebytes 20150618
McAfee 20150618
McAfee-GW-Edition 20150618
Microsoft 20150618
eScan 20150618
NANO-Antivirus 20150618
nProtect 20150618
Panda 20150618
Qihoo-360 20150618
Rising 20150618
Sophos AV 20150618
SUPERAntiSpyware 20150618
Symantec 20150618
Tencent 20150618
TheHacker 20150616
TotalDefense 20150618
TrendMicro 20150618
TrendMicro-HouseCall 20150618
VBA32 20150618
VIPRE 20150618
ViRobot 20150618
Zillya 20150618
Zoner 20150618
The file being studied is an ELF! More specifically, it is a EXEC (Executable file) ELF for Unix systems running on ARM machines.
ELF Header
Class ELF32
Data 2's complement, little endian
Header version 1 (current)
OS ABI ARM
ABI version 0
Object file type EXEC (Executable file)
Required architecture ARM
Object file version 0x1
Program headers 3
Section headers 13
ELF sections
ELF Segments
.init
.text
.fini
.rodata
.eh_frame
.ctors
.dtors
.jcr
.got
.data
.bss
Segment without sections
ExifTool file metadata
MIMEType
application/octet-stream

CPUByteOrder
Little endian

CPUArchitecture
32 bit

FileType
ELF executable

ObjectFileType
Executable file

CPUType
Unknown (40)

File identification
MD5 98fa067ed0a851f46a9a698727b45334
SHA1 2a5fe67c96f509b36adb54d2de78c9a1c8b5fb5e
SHA256 c5ca0ecc3d1b10235d8615e10382dc0e938c3e085b3e19d1592894dc106d1bb2
ssdeep
768:x/WL/jTt4d3aLjdHgQGAE7PXJIMMbS/Z:xg/HCUn+X5Iu

File size 30.3 KB ( 31060 bytes )
File type ELF
Magic literal
ELF 32-bit LSB executable, ARM, version 1, statically linked, stripped

TrID ELF Executable and Linkable format (generic) (100.0%)
Tags
elf

VirusTotal metadata
First submission 2015-06-18 21:05:50 UTC ( 2 years, 5 months ago )
Last submission 2015-06-18 21:05:50 UTC ( 2 years, 5 months ago )
File names gay
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!