Re: [spam][crazy] bomb malware

14 Dec 2021


      I found this command from the web:
(gdb) info file
Symbols from "/media/3/pkg/ghidra-projects/Log4J
Malware/Mirai/776c341504769aa67af7efc5acc66c338dab5684a8579134d3f23165c7abcc00".
Local exec file:
        `/media/3/pkg/ghidra-projects/Log4J
Malware/Mirai/776c341504769aa67af7efc5acc66c338dab5684a8579134d3f23165c7abcc00',
file type elf32-i386.
        Entry point: 0x8048164
        0x08048094 - 0x080480b0 is .init
        0x080480b0 - 0x0804dbd6 is .text
        0x0804dbd6 - 0x0804dbed is .fini
        0x0804dbf0 - 0x0804df06 is .rodata
        0x0804e000 - 0x0804e008 is .ctors
        0x0804e008 - 0x0804e010 is .dtors
        0x0804e020 - 0x0804e080 is .data
        0x0804e080 - 0x0804e500 is .bss

quick way to find the entrypoint

Re: [spam][crazy] bomb malware

Karl