I'm trying to reverse an ARM executable. It's for an embedded system, but I don't have any details about the normally targeted environment.
Here's what file
shows: ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, stripped
I've tried running it on Linux using qemu and the process immediately terminates with the message "Killed". Running strace ./executable
returns this:
execve("./executable", ["./executable"], [/*13 vars */] <unfinished ...>
+++ killed by SIGKILL +++
Killed
I'm using the Debian Wheezy image from here: https://people.debian.org/~aurel32/qemu/armel/
Any ideas why this is happening?
file
doesn't always give the correct output. Try runningreadelf -A
to know specifically the version of ARM.