Loading Lime to obtain ram image comaptible with volatility

[saneeha-amir]

Hello,

I am working on android memory forensics for malware analysis. I need ram image of android emulator which can be passed to volatility for analysis.

initially i compiled goldfish and lime with x86_64 compiler (x86_64-linux-glibc2.11-4.8) and Lime was loaded into the emulator and image was obtained. But the problem was that volatility was not working on the image . (i suppose it was because of the fact that volatility does not work for 64 bit images. Please confirm if i m thinking right).

Now i have compiled goldfish and Lime using x86 compiler(i686-linux-android-4.6) but now Lime is not loading into emulator and error is raised 'Exec format error'.

Please guide me where i am wrong. I need an image that can work with volatility.

Ill be grateful for your help.