ELF Info

ELF Info: Implements readelf-like functionality.

Free · No sign-up required

Text input

Your result is ready to copy or download after running.

About ELF Info

Implements readelf-like functionality. This operation will extract the ELF Header, Program Headers, Section Headers and Symbol Table for an ELF file.

Input: binary bytes (text input uses UTF-8; a file retains its original bytes). Output: text.

Format reference: ELF Info background and specification

Example

Use “Try example” to load this public sample and its settings, then run it.

Input

Sample file · 249 bytes

Download the sample

Result

============================== ELF Header ==============================
Magic:                        ELF
Format:                       32-bit
Endianness:                   Little
Version:                      1
ABI:                          System V
ABI Version:                  0
Type:                         Executable File
Instruction Set Architecture: x86
ELF Version:                  1
Entry Point:                  0x8062150
Entry PHOFF:                  0x34
Entry SHOFF:                  0x54
Flags:                        00000000
ELF Header Size:              52 bytes
Program Header Size:          32 bytes
Program Header Entries:       1
Section Header Size:          40 bytes
Section Header Entries:       3
Section Header Names:         0

============================== Program Header ==============================
Program Header Type:          Program Header Table
Offset Of Segment:            52
Virtual Address of Segment:   134512692
Physical Address of Segment:  134512692
Size of Segment:              256 bytes
Size of Segment in Memory:    256 bytes
Flags:                        Execute,Read

============================== Section Header ==============================
Type:                         String Table
Section Name:                 .shstrab
Flags:                        
Section Vaddr in memory:      0
Offset of the section:        204
Section Size:                 28
Associated Section:           0
Section Extra Information:    0

Type:                         Symbol Table
Section Name:                 .symtab
Flags:                        
Section Vaddr in memory:      0
Offset of the section:        230
Section Size:                 16
Associated Section:           0
Section Extra Information:    0

Type:                         String Table
Section Name:                 .strtab
Flags:                        
Section Vaddr in memory:      0
Offset of the section:        245
Section Size:                 4
Associated Section:           0
Section Extra Information:    0

============================== Symbol Table ==============================
Symbol Name:                  test

Parameters

This tool does not need additional parameters.

Before interpreting the result

File signatures and heuristics are clues, not definitive classification. Retain an original copy and compare exact bytes when investigating a file. A parser failure can also indicate truncated or unsupported data.

How to use this page

  1. Paste your input or open a local file.
  2. Adjust tool options if needed, then choose Run tool.
  3. Copy the result or download the original output bytes.

Inputs and results are not added to the public catalogue or saved in the URL. Processing happens in your browser; HTTP Request and DNS over HTTPS send the requests you explicitly run. Files up to 128 MiB can be opened; decompression and image tools may have smaller processing limits. Large results have a shortened preview. Text and HTML downloads use UTF-8; binary downloads preserve output bytes. Pasted text follows browser newline handling; open a file when exact input bytes matter.

Related tools

Browse forensics tools