Static Analysis
You are working for the United States Secret Service as a forensics specialist. Recently a corrupted hard drive came in from an investigation and only a few chunks of data have been recoverable. It appears some of the data looks like its part of the same binary. Billy, on the team, remembered you took this Reverse Engineering class in college. Billy gave you the recovered data as a le, recovered data.txt. Billy wants to know what this program does and what input the program takes. (Ignore the logical aws of this prompt ,)
The following questions refer to recovered data.txt. Please be as detailed in your responses as possible, and Justify all answers. Feel free to write helper scripts, if so, please include them in your write up.
What architecture is this binary compiled for? Solution:
What are .rodata and .data sections used for? Solution:
What are the arguments to main and where can you nd them? Solution:
Does this program take input of any form?
Solution:
Does this program have output of any form? Solution:
What is the input to the program that causes the string in .rodata to be printed? How did you come to this conclusion?
Solution:
