pfSense-CE-2[.]5[.]1-RELEASE-amd64[.]iso[.]gz

Sharing

Copy URL Twitter E-mail

General

Target

pfSense-CE-2.5.1-RELEASE-amd64.iso.gz
Size

357.0MB
MD5

f219966da5b11c91428c6cf83178e3d9
SHA1

58d91d2b287bf891a3c7b6e85bac2c9fdd5dcbe5
SHA256

be79df534558e6a73f7be2e8643c6ed01580e40b79b255f9bd8e8cca6471fee7
SHA512

465428be61c2b59b0f1ee13f486af6418986722a742e380c510c6911dd102f3a0f5bf5ee8dc85570723a3fa5098cbb50bc73859bd1bacf23ace3877292457886
SSDEEP

6291456:CYHhbm/uynim6wGpyvjS/aQ2L1zF03JXHl6AJX550wmcer6gqlYJmGZStHb:CX/956wG8rS/aQsF03Ldpwr6gqlY8nt7

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack002/boot/boot1.efi
unpack002/boot/gptboot.efi
unpack002/boot/loader.efi
unpack002/boot/loader_4th.efi
unpack002/boot/loader_lua.efi
unpack002/boot/loader_simp.efi

Files

pfSense-CE-2.5.1-RELEASE-amd64.iso.gz
.gz
pfSense-CE-2.5.1-RELEASE-amd64.iso
.iso .dmg macos
.profile
COPYRIGHT
bin/[
.elf linux x64
bin/cat
.elf linux x64
bin/chflags
.elf linux x64
bin/chio
.elf linux x64
bin/chmod
.elf linux x64
bin/cp
.elf linux x64
bin/date
.elf linux x64
bin/dd
.elf linux x64
bin/df
.elf linux x64
bin/domainname
.elf linux x64
bin/echo
.elf linux x64
bin/ed
.elf linux x64
bin/expr
.elf linux x64
bin/freebsd-version
.sh .vbs linux
bin/getfacl
.elf linux x64
bin/hostname
.elf linux x64
bin/kenv
.elf linux x64
bin/kill
.elf linux x64
bin/link
.elf linux x64
bin/ln
.elf linux x64
bin/ls
.elf linux x64
bin/mkdir
.elf linux x64
bin/mv
.elf .vbs linux x64
bin/pax
.elf linux x64
bin/pgrep
.elf linux x64
bin/pkill
.elf linux x64
bin/ps
.elf linux x64
bin/pwait
.elf linux x64
bin/pwd
.elf linux x64
bin/realpath
.elf linux x64
bin/red
.elf linux x64
bin/rm
.elf linux x64
bin/rmdir
.elf linux x64
bin/setfacl
.elf linux x64
bin/sh
.elf linux x64
bin/sleep
.elf linux x64
bin/stty
.elf linux x64
bin/sync
.elf linux x64
bin/test
.elf linux x64
bin/unlink
.elf linux x64
bin/uuidgen
.elf linux x64
boot/beastie.4th
boot/boot
boot/boot0
boot/boot0sio
boot/boot1
boot/boot1.efi
.exe windows x64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dynamic
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rela.dy
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.dynsym
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
boot/boot1.efifat
boot/boot2
boot/brand-fbsd.4th
boot/brand.4th
boot/cdboot
boot/check-password.4th
boot/color.4th
boot/defaults/loader.conf
boot/delay.4th
boot/device.hints
boot/efi.4th
boot/frames.4th
boot/gptboot
boot/gptboot.efi
.exe windows x64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dynamic
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rela.dy
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.dynsym
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
boot/gptboot.efifat
boot/gptzfsboot
boot/isoboot
boot/kernel/ads111x.ko
.elf linux x64
boot/kernel/aesni.ko
.elf linux x64
boot/kernel/alpm.ko
.elf linux x64
boot/kernel/amdpm.ko
.elf linux x64
boot/kernel/amdsmb.ko
.elf linux x64
boot/kernel/amdsmn.ko
.elf linux x64
boot/kernel/amdtemp.ko
.elf linux x64
boot/kernel/blake2.ko
.elf linux x64
boot/kernel/coretemp.ko
.elf linux x64
boot/kernel/cpuctl.ko
.elf linux x64
boot/kernel/cryptodev.ko
.elf linux x64
boot/kernel/cyapa.ko
.elf linux x64
boot/kernel/drm2.ko
.elf linux x64
boot/kernel/ds1307.ko
.elf linux x64
boot/kernel/ds13rtc.ko
.elf linux x64
boot/kernel/ds1672.ko
.elf linux x64
boot/kernel/ds3231.ko
.elf linux x64
boot/kernel/dummynet.ko
.elf linux x64
boot/kernel/fdescfs.ko
.elf linux x64
boot/kernel/hwpmc.ko
.elf linux x64
boot/kernel/i915kms.ko
.elf linux x64
boot/kernel/icee.ko
.elf linux x64
boot/kernel/ichsmb.ko
.elf linux x64
boot/kernel/if_cdce.ko
.elf linux x64
boot/kernel/if_ic.ko
.elf linux x64
boot/kernel/if_ipheth.ko
.elf linux x64
boot/kernel/if_ix.ko
.elf linux x64
boot/kernel/if_ixv.ko
.elf linux x64
boot/kernel/if_stf.ko
.elf linux x64
boot/kernel/if_urndis.ko
.elf linux x64
boot/kernel/ig4.ko
.elf linux x64
boot/kernel/iic.ko
.elf linux x64
boot/kernel/iicbb.ko
.elf linux x64
boot/kernel/iicbus.ko
.elf linux x64
boot/kernel/iicmux.ko
.elf linux x64
boot/kernel/iicsmb.ko
.elf linux x64
boot/kernel/imcsmb.ko
.elf linux x64
boot/kernel/intpm.ko
.elf linux x64
boot/kernel/ipdivert.ko
.elf linux x64
boot/kernel/ipfw.ko
.elf linux x64
boot/kernel/ipfw_nat64.ko
.elf linux x64
boot/kernel/ipmi.ko
.elf linux x64
boot/kernel/ipmi_linux.ko
.elf linux x64
boot/kernel/isl.ko
.elf linux x64
boot/kernel/isl12xx.ko
.elf linux x64
boot/kernel/ismt.ko
.elf linux x64
boot/kernel/jedec_dimm.ko
.elf linux x64
boot/kernel/kernel
.elf linux x64
boot/kernel/linker.hints
boot/kernel/lpbb.ko
.elf linux x64
boot/kernel/ltc430x.ko
.elf linux x64
boot/kernel/ndis.ko
.elf linux x64
boot/kernel/nfsmb.ko
.elf linux x64
boot/kernel/nmdm.ko
.elf linux x64
boot/kernel/nxprtc.ko
.elf linux x64
boot/kernel/opensolaris.ko
.elf linux x64
boot/kernel/pcf.ko
.elf linux x64
boot/kernel/radeonkms.ko
.elf linux x64
boot/kernel/radeonkmsfw_ARUBA_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_ARUBA_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_ARUBA_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_BARTS_mc.ko
.elf linux x64
boot/kernel/radeonkmsfw_BARTS_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_BARTS_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_BTC_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_CAICOS_mc.ko
.elf linux x64
boot/kernel/radeonkmsfw_CAICOS_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_CAICOS_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_CAYMAN_mc.ko
.elf linux x64
boot/kernel/radeonkmsfw_CAYMAN_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_CAYMAN_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_CAYMAN_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_CEDAR_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_CEDAR_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_CEDAR_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_CYPRESS_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_CYPRESS_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_CYPRESS_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_JUNIPER_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_JUNIPER_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_JUNIPER_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_PALM_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_PALM_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_PITCAIRN_ce.ko
.elf linux x64
boot/kernel/radeonkmsfw_PITCAIRN_mc.ko
.elf linux x64
boot/kernel/radeonkmsfw_PITCAIRN_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_PITCAIRN_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_PITCAIRN_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_R100_cp.ko
.elf linux x64
boot/kernel/radeonkmsfw_R200_cp.ko
.elf linux x64
boot/kernel/radeonkmsfw_R300_cp.ko
.elf linux x64
boot/kernel/radeonkmsfw_R420_cp.ko
.elf linux x64
boot/kernel/radeonkmsfw_R520_cp.ko
.elf linux x64
boot/kernel/radeonkmsfw_R600_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_R600_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_R600_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_R700_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_REDWOOD_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_REDWOOD_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_REDWOOD_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_RS600_cp.ko
.elf linux x64
boot/kernel/radeonkmsfw_RS690_cp.ko
.elf linux x64
boot/kernel/radeonkmsfw_RS780_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_RS780_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV610_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV610_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV620_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV620_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV630_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV630_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV635_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV635_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV670_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV670_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV710_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV710_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV730_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV730_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV770_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_RV770_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_SUMO2_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_SUMO2_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_SUMO_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_SUMO_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_SUMO_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_TAHITI_ce.ko
.elf linux x64
boot/kernel/radeonkmsfw_TAHITI_mc.ko
.elf linux x64
boot/kernel/radeonkmsfw_TAHITI_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_TAHITI_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_TAHITI_rlc.ko
.elf linux x64
boot/kernel/radeonkmsfw_TURKS_mc.ko
.elf linux x64
boot/kernel/radeonkmsfw_TURKS_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_TURKS_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_VERDE_ce.ko
.elf linux x64
boot/kernel/radeonkmsfw_VERDE_mc.ko
.elf linux x64
boot/kernel/radeonkmsfw_VERDE_me.ko
.elf linux x64
boot/kernel/radeonkmsfw_VERDE_pfp.ko
.elf linux x64
boot/kernel/radeonkmsfw_VERDE_rlc.ko
.elf linux x64
boot/kernel/rtc8583.ko
.elf linux x64
boot/kernel/s35390a.ko
.elf linux x64
boot/kernel/sfxge.ko
.elf linux x64
boot/kernel/smb.ko
.elf linux x64
boot/kernel/smbus.ko
.elf linux x64
boot/kernel/viapm.ko
.elf linux x64
boot/kernel/vmm.ko
.elf linux x64
boot/kernel/zfs.ko
.elf linux x64
boot/loader
boot/loader.4th
boot/loader.conf
boot/loader.efi
.exe windows x64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 325KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

set_Xcom
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

set_Xfic
Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dynamic
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rela.dy
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.dynsym
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
boot/loader.rc
boot/loader_4th
boot/loader_4th.efi
.exe windows x64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

set_Xcom
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

set_Xfic
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dynamic
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rela.dy
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.dynsym
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
boot/loader_lua
boot/loader_lua.efi
.exe windows x64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 325KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

set_Xcom
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

set_Xfic
Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dynamic
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rela.dy
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.dynsym
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
boot/loader_simp
boot/loader_simp.efi
.exe windows x64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

set_Xcom
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

set_Xfic
Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dynamic
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rela.dy
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.dynsym
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
boot/logo-beastie.4th
boot/logo-beastiebw.4th
boot/logo-fbsdbw.4th
boot/logo-orb.4th
boot/logo-orbbw.4th
boot/lua/brand-pfSense.lua
boot/lua/cli.lua
.js
boot/lua/color.lua
boot/lua/config.lua
.js
boot/lua/core.lua
boot/lua/drawer.lua
.js
boot/lua/gfx-beastie.lua
boot/lua/gfx-beastiebw.lua
boot/lua/gfx-fbsdbw.lua
boot/lua/gfx-orb.lua
boot/lua/gfx-orbbw.lua
boot/lua/hook.lua
boot/lua/loader.lua
boot/lua/logo-pfSensebw.lua
boot/lua/menu.lua
.js
boot/lua/password.lua
boot/lua/screen.lua
boot/mbr
boot/menu-commands.4th
.vbs
boot/menu.4th
boot/menu.rc
.vbs
boot/menusets.4th
.vbs
boot/pmbr
boot/pxeboot
boot/screen.4th
boot/shortcuts.4th
boot/support.4th
boot/userboot.so
.elf linux x64
boot/userboot_4th.so
.elf linux x64
boot/userboot_lua.so
.elf linux x64
boot/version.4th
boot/zfsboot
boot/zfsloader
etc/crontab
etc/ddb.conf
etc/defaults/devfs.rules
etc/defaults/periodic.conf
.sh linux
etc/defaults/rc.conf
.sh linux
etc/devd.conf
etc/devd/asus.conf
etc/devd/devmatch.conf
etc/devd/uath.conf
etc/devd/ulpt.conf
etc/devd/zfs.conf
etc/devfs.conf
etc/dhclient.conf
etc/disktab
etc/fbtab
etc/fstab
etc/gettytab
etc/group
etc/gss/mech
etc/gss/qop
etc/hosts
etc/hosts.allow
etc/hosts.equiv
etc/inetd.conf
etc/libalias.conf
etc/libmap.conf
etc/login.access
etc/login.conf
etc/login.conf.db
etc/mac.conf
etc/master.passwd
etc/motd
etc/mtree/BSD.debug.dist
etc/mtree/BSD.include.dist
etc/mtree/BSD.root.dist
etc/mtree/BSD.usr.dist
etc/mtree/BSD.var.dist
etc/netconfig
etc/netstart
.sh linux
etc/network.subr
etc/networks
etc/newsyslog.conf
etc/newsyslog.conf.d/opensm.conf
etc/nsmb.conf
etc/nsswitch.conf
etc/opieaccess

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 51KB - Virtual size: 51KB

.data Size: 30KB - Virtual size: 30KB

.sdata Size: 512B - Virtual size: 144B

.dynamic Size: 512B - Virtual size: 192B

.rela.dy Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 10B

.dynsym Size: 4KB - Virtual size: 3KB

Headers

File Characteristics

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 63KB - Virtual size: 63KB

.sdata Size: 512B - Virtual size: 56B

.dynamic Size: 512B - Virtual size: 192B

.rela.dy Size: 512B - Virtual size: 312B

.reloc Size: 512B - Virtual size: 10B

.dynsym Size: 2KB - Virtual size: 1KB

Headers

File Characteristics

Sections

.text Size: 325KB - Virtual size: 325KB

.data Size: 96KB - Virtual size: 96KB

set_Xcom Size: 512B - Virtual size: 344B

set_Xfic Size: - Virtual size:

.sdata Size: 1KB - Virtual size: 1KB

.dynamic Size: 512B - Virtual size: 192B

.rela.dy Size: 32KB - Virtual size: 31KB

.reloc Size: 512B - Virtual size: 10B

.dynsym Size: 20KB - Virtual size: 19KB

Headers

File Characteristics

Sections

.text Size: 274KB - Virtual size: 273KB

.data Size: 90KB - Virtual size: 90KB

set_Xcom Size: 512B - Virtual size: 344B

set_Xfic Size: 512B - Virtual size: 8B

.sdata Size: 1KB - Virtual size: 1KB

.dynamic Size: 512B - Virtual size: 192B

.rela.dy Size: 23KB - Virtual size: 23KB

.reloc Size: 512B - Virtual size: 10B

.dynsym Size: 20KB - Virtual size: 19KB

Headers

File Characteristics

Sections

.text Size: 325KB - Virtual size: 325KB

.data Size: 96KB - Virtual size: 96KB

set_Xcom Size: 512B - Virtual size: 344B

set_Xfic Size: - Virtual size:

.sdata Size: 1KB - Virtual size: 1KB

.dynamic Size: 512B - Virtual size: 192B

.rela.dy Size: 32KB - Virtual size: 31KB

.reloc Size: 512B - Virtual size: 10B

.dynsym Size: 20KB - Virtual size: 19KB

Headers

File Characteristics

Sections

.text Size: 233KB - Virtual size: 233KB

.data Size: 81KB - Virtual size: 81KB

set_Xcom Size: 512B - Virtual size: 344B

set_Xfic Size: - Virtual size:

.sdata Size: 1KB - Virtual size: 1KB

.dynamic Size: 512B - Virtual size: 192B

.rela.dy Size: 22KB - Virtual size: 21KB

.reloc Size: 512B - Virtual size: 10B

.dynsym Size: 16KB - Virtual size: 15KB

.text
Size: 51KB - Virtual size: 51KB

.data
Size: 30KB - Virtual size: 30KB

.sdata
Size: 512B - Virtual size: 144B

.dynamic
Size: 512B - Virtual size: 192B

.rela.dy
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 10B

.dynsym
Size: 4KB - Virtual size: 3KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 63KB - Virtual size: 63KB

.sdata
Size: 512B - Virtual size: 56B

.dynamic
Size: 512B - Virtual size: 192B

.rela.dy
Size: 512B - Virtual size: 312B

.reloc
Size: 512B - Virtual size: 10B

.dynsym
Size: 2KB - Virtual size: 1KB

.text
Size: 325KB - Virtual size: 325KB

.data
Size: 96KB - Virtual size: 96KB

set_Xcom
Size: 512B - Virtual size: 344B

set_Xfic
Size: - Virtual size:

.sdata
Size: 1KB - Virtual size: 1KB

.dynamic
Size: 512B - Virtual size: 192B

.rela.dy
Size: 32KB - Virtual size: 31KB

.reloc
Size: 512B - Virtual size: 10B

.dynsym
Size: 20KB - Virtual size: 19KB

.text
Size: 274KB - Virtual size: 273KB

.data
Size: 90KB - Virtual size: 90KB

set_Xcom
Size: 512B - Virtual size: 344B

set_Xfic
Size: 512B - Virtual size: 8B

.sdata
Size: 1KB - Virtual size: 1KB

.dynamic
Size: 512B - Virtual size: 192B

.rela.dy
Size: 23KB - Virtual size: 23KB

.reloc
Size: 512B - Virtual size: 10B

.dynsym
Size: 20KB - Virtual size: 19KB

.text
Size: 325KB - Virtual size: 325KB

.data
Size: 96KB - Virtual size: 96KB

set_Xcom
Size: 512B - Virtual size: 344B

set_Xfic
Size: - Virtual size:

.sdata
Size: 1KB - Virtual size: 1KB

.dynamic
Size: 512B - Virtual size: 192B

.rela.dy
Size: 32KB - Virtual size: 31KB

.reloc
Size: 512B - Virtual size: 10B

.dynsym
Size: 20KB - Virtual size: 19KB

.text
Size: 233KB - Virtual size: 233KB

.data
Size: 81KB - Virtual size: 81KB

set_Xcom
Size: 512B - Virtual size: 344B

set_Xfic
Size: - Virtual size:

.sdata
Size: 1KB - Virtual size: 1KB

.dynamic
Size: 512B - Virtual size: 192B

.rela.dy
Size: 22KB - Virtual size: 21KB

.reloc
Size: 512B - Virtual size: 10B

.dynsym
Size: 16KB - Virtual size: 15KB