Page 1 of 1
Files disguised as images?
PostPosted: Wed Aug 02, 2006 9:30 pm
by Slater
Hmm... I recently saw a .jpg file which said "open with Winrar" and there was a pic of some guy's face next to the text. Sure enough, when I saved the image file and opened it with winrar, I found it to be a valid archive with a short sound byte in it. My guess is that there's a way to do this with winrar... but does anyone know how?
PostPosted: Wed Aug 02, 2006 9:56 pm
by Mr. Rogers
i heard something about embedding files in images or something a while ago. some new way to work viruses or something. maybe mith knows more about it.
PostPosted: Thu Aug 03, 2006 2:14 pm
by Slater
lol, I just realized how funny the title was... "This isn't a FILE... it's an IMAGE!"
Anyhow, yeah, Mith's smart, probably knoweth
PostPosted: Thu Aug 03, 2006 5:31 pm
by Mithrandir
Sorry, man. Unless it's got two extensions, I'm not sure. If you want, forward it to me and I'll try to decompile it and see what it is. I've never run across the ability to add sound to a jpeg, though. I'm pretty sure that's not part of the original rules.
Unless it's like one of these...
http://www.freedownloadscenter.com/Best/rar-sound-files.html
PostPosted: Thu Aug 03, 2006 5:56 pm
by Slater
PostPosted: Thu Aug 03, 2006 7:03 pm
by Mithrandir
Huh. I don't know. That's pretty weird. I don't see any archive file on this end, but that may be because my system is a mac and doesn't see it.
PostPosted: Thu Aug 03, 2006 7:38 pm
by Authority3000
Winrar doesn't seem to recognize it directly, I had to go to the file's properties and change the program it starts with from Windows Fax and Image Viewer to Winrar. Then, when clicked, it extracted a working WMV file.
PostPosted: Thu Aug 03, 2006 7:41 pm
by Mithrandir
AH!
I bet someone just couldn't post it with it's old extension, so then changed it.
PostPosted: Thu Aug 03, 2006 8:00 pm
by Slater
yeah, but at the same time it is a valid .jpg file
PostPosted: Thu Aug 03, 2006 8:31 pm
by Kaligraphic
Yeah, it's valid as both types... strange. Not quite as covert as hiding all your stuff in alternate file streams in an NTFS environment, but pretty cool.
PostPosted: Fri Aug 04, 2006 8:34 am
by Mithrandir
It's possible the video stream portion of the video is just a single jpeg graphic. That might give the results you are observing.
PostPosted: Sun Aug 06, 2006 4:48 am
by Bobtheduck
I heard of something similar where pictures were being put into MP3 files... This is really weird
PostPosted: Sun Aug 06, 2006 8:57 pm
by Slater
I found another one just now. The .jpg file in WinRAR has the installer to a game trial.