Hier das gleiche. Strace zeigt, dass pgcedit beim Versuch die nicht existierende Datei /tmp/upxDV3NFHTAFQN zu öffnen abbricht:
[16:02:11]bash:~/Desktop/test$ strace ./pgcedit
execve("./pgcedit", ["./pgcedit"], [/* 33 vars */]) = 0
getpid() = 5645
open("/proc/5645/exe", O_RDONLY) = 3
lseek(3, 1528, SEEK_SET) = 1528
read(3, "\212\320[f\327\"\32\0\0\0\10\0", 12) = 12
gettimeofday({1199113337, 831300}, NULL) = 0
unlink("/tmp/upxDV3NFHTAFQN") = -1 ENOENT (No such file or directory)
open("/tmp/upxDV3NFHTAFQN", O_WRONLY|O_CREAT|O_EXCL, 0700) = 4
ftruncate(4, 1712855) = 0
old_mmap(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f65000
read(3, "\0\0\10\0\"\327\3\0", 8) = 8
read(3, "\177?d\371\177ELF\1\0\2\0\3\0\32`\6\6\10\373\377e\2674"..., 251682) = 251682
write(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\2\0\3\0\1\0\0\0`\6\6\010"..., 524288) = 524288
read(3, "\0\0\10\0\244\364\3\0", 8) = 8
read(3, "\336\275\374\377\213E\300\205\300\17\224\300\204\301\17"..., 259236) = 259236
write(4, "\213E\300\205\300\17\224\300\204\301\17\204\16\377\377"..., 524288) = 524288
read(3, "\0\0\10\0\221v\3\0", 8) = 8
read(3, "\357\377\373\377\0\0\211M\334\350\326\332\377\377\351\255"..., 226961) = 226961
write(4, "\0\0\211M\334\350\326\332\377\377\351\255\374\377\377\213"..., 524288) = 524288
read(3, "\327\"\2\0\271\331\0\0", 8) = 8
read(3, "\357\277\277\374>\343\32\10\21\0\1\0\31\00015\17\340A\r"..., 55737) = 55737
write(4, ">\343\32\10\21\0\0\0\1\0\31\00015\0\0\340A\r\10r\1\0\0"..., 139991) = 139991
read(3, "\0\0\0\0UPX!", 8) = 8
munmap(0xb7f65000, 528384) = 0
close(4) = 0
close(3) = 0
open("/tmp/upxDV3NFHTAFQN", O_RDONLY) = 3
access("/proc/5645/fd/3", R_OK|X_OK) = 0
unlink("/tmp/upxDV3NFHTAFQN") = 0
fcntl(3, F_SETFD, FD_CLOEXEC) = 0
execve("/proc/5645/fd/3", ["./pgcedit"], [/* 33 vars */]) = -1 ENOENT (No such file or directory)
close(3) = 0
fork() = 5646
--- SIGCHLD (Child exited) @ 0 (0) ---
waitpid(-1, NULL, 0) = 5646
execve("/tmp/upxDV3NFHTAFQN", ["./pgcedit"], [/* 33 vars */]) = -1 ENOENT (No such file or directory)
unlink("/tmp/upxDV3NFHTAFQN") = -1 ENOENT (No such file or directory)
_exit(127) = ?
Process 5645 detached