Add sample for capa-rules/1171

[Still34]

No description provided.

[mike-hunhoff]

@Still34 CI is failing:

Run python .github/check_sample_filenames.py .
ERROR:capa.tests.data:invalid file extension: 6a5bda892608df18c543036b71f46dd2ae533c85256c40dffeb23ea78c70f021.ELF_

Also, the sample is large (>1MB). Do you have a smaller sample that could take its place? We try to keep sample sizes small to preserve CI resources.

[mike-hunhoff]

CI is failing still:

ERROR:capa:--------------------------------------------------------------------------------
ERROR    capa:                                                    helpers.py:326
         --------------------------------------------------------               
         ------------------------                                               
ERROR:capa: Input file does not appear to target a supported OS.
ERROR    capa:  Input file does not appear to target a supported  helpers.py:327
         OS.                                                                    
ERROR:capa: 
ERROR    capa:                                                    helpers.py:328
ERROR:capa: capa currently only analyzes executables for some operating systems
ERROR    capa:  capa currently only analyzes executables for some helpers.py:329
         operating systems                                                      
ERROR:capa: (including Windows, Linux, and Android).
ERROR    capa:  (including Windows, Linux, and Android).          helpers.py:330
ERROR:capa: 
ERROR    capa:                                                    helpers.py:331
ERROR:capa: If you know the target OS, you can specify it explicitly, for example:
ERROR    capa:  If you know the target OS, you can specify it     helpers.py:332
         explicitly, for example:                                               
ERROR:capa:   capa --os linux <sample>
ERROR    capa:    capa --os linux <sample>                        helpers.py:333
ERROR:capa:--------------------------------------------------------------------------------
ERROR    capa:                                                    helpers.py:334
         --------------------------------------------------------               
         ------------------------   

Were you able to run capa against the sample locally?

[Still34]

Yes, I did test this, but with the args it suggested to add.

[Still34]

Confirming the header is ELF - I'm not sure why capa is failing to detect it as a Linux executable.