Property
elf_executable_file
The service sent an ELF file, the executable format of Linux and other Unix systems. This is typical for malware droppers and misconfigured file servers. The information comes from the ELF header.
| Property Name | Type | Description | Required |
|---|---|---|---|
| class | string | Word size of the file, ex: ELF32, ELF64 | Yes |
| data_encoding | string | Byte order of the file, ex: LittleEndian, BigEndian | Yes |
| machine | string, integer | Instruction set architecture of the file, ex: MIPS, AMD x86-64. The number from the header if it is unknown. | Yes |
| os_abi | string, integer | Operating system ABI of the file, ex: System V. The number from the header if it is unknown. | Yes |
| os_abi_version | integer | Version of the operating system ABI. | Yes |
| type | string, integer | Type of the file, ex: Executable file, Shared object file. The number from the header if it is unknown. | Yes |
↑ TopSearch Queries
↑ TopExample
{
"class": "ELF32",
"data_encoding": "LittleEndian",
"os_abi": "System V",
"os_abi_version": 0,
"type": "Executable file",
"machine": "MIPS"
}