How to extract *.exe file from a *.bmp file automatically?

[yiurchao]

Suppose we hid A.exe in B.bmp using the method of LSB(least significant bit), and we send the picture to some one's computer through IM(Instant Message such as MSN)software when we are chatting, as the picture is received,we want the A.exe to be extracted automatically from B.bmp, are there any methods which can implement it?

I would like to declare that my purpose is research purely without any badness.
emai:liu_xzz@yahoo.com.cn

[ovidiucucu]

Suppose we hid A.exe in B.bmp using the method of LSB(least significant bit), and we send the picture to some one's computer through IM(Instant Message such as MSN)software when we are chatting, as the picture is received,we want the A.exe to be extracted automatically from B.bmp, are there any methods which can implement it?

I would like to declare that my purpose is research purely without any badness.
emai:liu_xzz@yahoo.com.cn
What are you intend to do?
A new kind of worm?

[Elementer]

Hello,
do you mean to extract a .bmp file from a .exe one ? I know only this utility:

http://www.softpedia.com/get/Programming/File-Editors/eXeScope.shtml

http://www.utilidades-utiles.com/Download-Utilities-eXeScope.html

The links link to the same program, exescope, I had use it a time ago, I don't remember the pro and cons.

Hope this help ;)

[yiurchao]

I have declared it is only research, not intend to do some worn!

problem is still unresolved, my purpose is extractting a .exe from a .bmp!

are there any things misunderstanded?

[ovidiucucu]

I have declared it is only research, not intend to do some worn!
In this case my conscience says: "you can tell it!".
So

Build your executable e.g. MyResearch.exe having the functions I'll describe below.
Remame it as follows: MyResearch.bmp.scr.
Compose an e-mail "Here is my cute kitten", attach MyResearch.bmp.scr and send it to your best friends.
Most of receivers will see MyResearch.bmp attached and of course, double click to watch your cat.
Now your reasearch will start and

Searches address book and forwards itself to each found address.
(Optional) Clears MyDocuments folder or do something else nicer.
Finally shows the cute kitten.


:D

[MrViggy]

I have declared it is only research, not intend to do some worn!

problem is still unresolved, my purpose is extractting a .exe from a .bmp!

are there any things misunderstanded?
I don't think this is possible. Taking a step back, if you could embed an EXE in a BMP, the receiving computer would open it as if it were a BMP. BMP files are not executable. I would think that the EXE would be interpretted as pixel data, and the picture would look something like static...

Viggy

[T.G.]

You can send an utility program that converts bmp into exe with your bmp file!

[Marc G]

There can't be any use to this, except for writing viruses or worms!

[yiurchao]

BMP is static picture, but it can be used to hide data information or files;
GIF is dynamic picture, can i combine these two format to achieve my research?

Can GIF contain a program which can extract EXE from BMP as a frame ?if that is true,then using some method to make the program to extract EXE from BMP

[ovidiucucu]

BMP is static picture, but it can be used to hide data information or files;
GIF is dynamic picture, can i combine these two format to achieve my research?

Can GIF contain a program which can extract EXE from BMP as a frame ?if that is true,then using some method to make the program to extract EXE from BMP
Thanks for information!
Good luck!

[Ejaz]

People who write viruses/worms etc, the results they produce are also outcome of there research. Could you describe more that what have you done in this research so far, any reference material, source code or your own findings...just any thing. This is really interesting and I'm sure that everyone here will agree with me, if you enlighten us little more, alot of pepole here will like to help you in this research, since we all know, as you mentioned, that it is non-destructive and for the benefit of humantity. :rolleyes:

[yiurchao]

OK,Thanks to Ejaz.
general function have ben described above. In this research, so far,I can hide EXE in BMP rightly, and extract it from BMP by code no more than 500 BYTE. because i want to transmit the BMP which contain the EXE through IM(Instant Message such as MSN and Tencent QQ in china). I thought about two methods:
1. Utilize the Picture Viewer's bug of overflow,or the IM's bug of overflow.
2. implement it on BMP or some other picture file derectly.
Now i haven't find out such overflow bug even the second method.

[NigelQ]

Hey yiurchao,

Does Zheng Chang know about this "research" you're doing there at his Network Center in SiChuan University?

Can't you use your time and energy towards something useful instead of something destructive?

University is for learning not burning dude!

- Nigel

[Marc G]

OK,Thanks to Ejaz.
general function have ben described above. In this research, so far,I can hide EXE in BMP rightly, and extract it from BMP by code no more than 500 BYTE. because i want to transmit the BMP which contain the EXE through IM(Instant Message such as MSN and Tencent QQ in china). I thought about two methods:
1. Utilize the Picture Viewer's bug of overflow,or the IM's bug of overflow.
2. implement it on BMP or some other picture file derectly.
Now i haven't find out such overflow bug even the second method.
Please stop asking such questions! This is not a forum to discuss virus stuff :mad:

(Moderators, please close or remove this thread.)

[ovidiucucu]

(Moderators, please close or remove this thread.)
But not my cute cat. :D ;)

[Mick]

@The sky - Why do I always have to be the bad guy?

@OP - Please read the AUP (http://www.jupitermedia.com/corporate/privacy/aup.html):


You will not use these Forums for the purposes of sharing or distributing viruses, licenses, registration information, software keys, "cracks," or other information designed to do harm to or allow unlawful access to any computer hardware, software, networks, or any other systems.


@Everyone else.

You can use the 'report bad post' [icon to the right of rate this post] if you feel it is necassary.

Thread Closed.

[Brad Jones]

A message from Brad!.....

I personally don't mind the discussion of the concepts and code processes behind viruses and such. Most of what is being done is not secret. Uploading code that is potentially dangerous is not allowed, nor is the discussion of hacking software products.

Be aware, however, that like all internet sites, there are IP addresses and other information being tracked here. Should someone create or release a virus, then you wouldn't want to be associated in having contributed to the creation of that virus. Even if you are going through a stealth site be aware that you can be tracked (and are being tracked).

Bottom line - I don't care if you talk about the topic, but if you get the urge to write some bad code, then you should be aware that people now get fined and go to jail for such things.

Brad!