Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

ELF 32-bit LSB executable, Intel 80386, version 1, statically linked, corrupted section header size

Posted on 2011-03-01
5
Medium Priority
?
2,004 Views
Last Modified: 2012-05-11
How to fix this issue ?

[pflsml@vfx-lap-1][~/hype-1.3-redhat] - file hype
hype: ELF 32-bit LSB executable, Intel 80386, version 1, statically linked, corrupted section header size
0
Comment
Question by:aashee
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 79

Expert Comment

by:arnold
ID: 35006530
use
readelf -h hype
There error deals with file being unable to access/read the header section of the program.
The creators may have used this option to make it harder for individuals to reverse engineer/deconstruct their application.

It should run as intended.
0
 

Author Comment

by:aashee
ID: 35006659
i get below result , when i do this command.

[.......-lap-1][~/hype-1.3-redhat] - readelf -h hype
ELF Header:
  Magic:   7f 45 4c 46 01 01 01 00 4c 69 6e 75 78 00 00 00
  Class:                             ELF32
  Data:                              2's complement, little endian
  Version:                           1 (current)
  OS/ABI:                            UNIX - System V
  ABI Version:                       76
  Type:                              EXEC (Executable file)
  Machine:                           Intel 80386
  Version:                           0x1
  Entry point address:               0x8048080
  Start of program headers:          52 (bytes into file)
  Start of section headers:          0 (bytes into file)
  Flags:                             0x0
  Size of this header:               52 (bytes)
  Size of program headers:           32 (bytes)
  Number of program headers:         2
  Size of section headers:           0 (bytes)
  Number of section headers:         0
  Section header string table index: 0


so what's the purpose of running this command. it tells more details about the file. but what about the error?
please help ?
0
 
LVL 79

Accepted Solution

by:
arnold earned 2000 total points
ID: 35006695
This is the cause for the error:
Start of section headers:          0 (bytes into file)
Size of section headers:           0 (bytes)
Number of section headers:         0
Section header string table index: 0

In short the creator of the software added a section in their code to prevent/disguise the writing of the ELF header to make it harder for others to analyze and reverse engineer/disassemble the application.

Does the application work?
0
 

Author Comment

by:aashee
ID: 35006738
not it does not work. when i type ./hype

below error comes


[....@...-lap-1][~/hype-1.3-redhat] - ./hype
./hype: error while loading shared libraries: libgtk-x11-2.0.so.0: cannot open shared object file: No such file or directory
0
 
LVL 79

Expert Comment

by:arnold
ID: 35006797
This is a separate issue from the header corruption.

Did you receive an error during configuration or while running make or is this a compiled distribution.
You need to get the missing librarry.
yum search gtk2
yum install gtk2-x.y.z
This is what provides the missing library.
x.y.z represent the version available for your system.
0

Featured Post

Google Certified Professional - Cloud Architect

This course (1 of 3) is designed to help students who are interested in Google Cloud Platform (GCP) to become familiar with the platform, navigate the console and learn its capabilities. It will also prepare students for the Google Cloud Architect certification exam.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Using 'screen' for session sharing, The Simple Edition Step 1: user starts session with command: screen Step 2: other user (logged in with same user account) connects with command: screen -x Done. Both users are connected to the same CLI sessio…
It’s 2016. Password authentication should be dead — or at least close to dying. But, unfortunately, it has not traversed Quagga stage yet. Using password authentication is like laundering hotel guest linens with a washboard — it’s Passé.
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Suggested Courses

662 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question