hey, just wondering what the best program to bind an .exe file and a jpeg file so when clicked both are opened...

also, i have a specific file which allows me to use a computer as a host and controll it remotely...however whenever i run the program a message appears which says "XXXXX Controller program, click yes to install"

is there any way to edit the program so that the message wont appear and yes will automatically be selected..

thanks

If the program is open source, then it will be very easy to edit that section. Just download the source code, make your changes and compile.

If the program is not however, you will have to do some reverse engineering. Which wont be easy.

Solution, download a different program. Try either:
TightVNC - http://www.tightvnc.com/
NetCat - http://netcat.sourceforge.net/

Netcat may appear as a virus on their machine though.


As far as appending an exe to a .jpg goes. A JPEG has no executable areas, it's not possible. You could do things like, filename.jpg.exe though. There are workarounds, I know FLRX made one (pooh.exe), was downloadable from his site, but it's down now.

If you want them to run an exe, social engineer them into it.

How about video files such as avi ? Do they have executable areas ?

As far as I know, there are some real media(rmvb) files that will make the player do a certain thing like go to some websites or so...

Now, if you could get them to run "slide show of recent party pictures" or what ever the fuck .exe, that might help you out a bit.

Dunno your situation though, so I can't do much Social Engineering.

I've hidden .exe files in .jpeg files before. You just want it to run when they open the .jpeg right?

I've hidden .exe files in .jpeg files before. You just want it to run when they open the .jpeg right?

yes, any ideas?

yes, any ideas?

Other than social engineering them to run sweetslideshowofdrunkenhotchicks.exe

I have no idea.

Other than social engineering them to run sweetslideshowofdrunkenhotchicks.exe

I have no idea.

Anyone know if you can set up a hooker? Like where it starts another file when you open that file?

Or are jpegs just completely unable to execute code?

One cheap trick is to
type lolcat.jpg .exe
There are actually a few more spaces in between. The goal is to put as many spaces as possible between the .jpg part and the .exe part. The file name will be too long for them to see it all and they 'might' double click it before they realize its not a .jpg
At first all they will see is lolcat.jpg...

I think that what you want to do is find an EXE binder; which allows you to join several files together into one executable file. Obviously, the downside to this is that the resultant file will have a .exe extension - but there's not much you can really do about that. If you're sending the file to someone who has a limited amount of computer knowledge, it shouldn't be a problem.

I think the best option in this scenario is to bind your exe with another exe... Justifying the extension. It's much easier to get someone to open a file which they think is an installer for some other application; rather than an image with a .exe extension. Not everyone is an idiot.

One problem you might face: EXE binders are commonly detected by antivirus software - 'cause they don't have much of a function (to my knowledge) other than being used to join a malicious file with something innocuous. Hence, distributing your bound executable might cause people's antivirus software to go off, even if your file doesn't contain anything harmless.

Anyway, good luck.

The file extension tells the computer how to handle the file. If the extension is .jpg, then it will treat it as a jpg. A jpeg has no executable areas what so ever. Unless the file extension is 'exe' it will not be executed as a program. You might as well try to send an email with an avi.

Like I said before, one method is naming the file 'image.jpg .exe' That may work.

The other method is social engineering them into opening an exe. How you do that is entirely up to you. If you set up a relatively professional looking website, (templates are freely available). You can add the exe to the site as a download. Contact the victim, telling them of this awesome piece of software you got, and direct them to the download.

Similarly create a torrent, with some program that they would want. Software, keygen perhaps. Direct them to that.

Do you have access to their machine at any point?

Do you have access to their machine at any point?

no, they are in another state...i have been messing around with a few ideas...and i will attempt to trick my victim into downloading a program with a faulty keygen...thanks for the help

Not sure if it's been mentioned - but what I would do, is I would disguise my executable as a zip/rar executable archive, containing a jpeg.

The best way would be to write an imitation program yourself, and make sure it actually looks like an archive, and acts like an archive - but at the same time executes your malicious code.

Or, you could just bind your exe with an executable archive containing a jpeg. But that is likely to be detected by whatever anti-virus software your target's running.

hey, just wondering what the best program to bind an .exe file and a jpeg file so when clicked both are opened...

also, i have a specific file which allows me to use a computer as a host and controll it remotely...however whenever i run the program a message appears which says "XXXXX Controller program, click yes to install"

is there any way to edit the program so that the message wont appear and yes will automatically be selected..

thanks

`ln /mymaliciouscode.exe /thisimage.jpg`
I'm a GENIUS!
srsly, *modern* file manager will treat files by extentions....

Your best bet is creating an archive with an .lnk to an exe.

Sounds like you have a RAT. I hope you don't consider yourself a "hacker" now. Just adding my two cents. Sorry it's not helpful.

I'm gonna guess the OP heard that it can be done from someone who knows less than he does. Script kiddies (on yahoo especially) have claimed this was possible for years. Acting as if they can create their VB viruses and save them as jpegs.

The reality is that the concept is somewhat possible, but isn't achieved the way you're asking. The more you know about your target (assuming there is a specific one), the better your chances.

You can't just merge a jpg with an exe though to create a virus. If that were true, no one would power on their modems/routers. And the few who did would think twice before ever opening firefox/ie/opera/etc.

I remember a couple different vulnerabilities for windows relating to jpeg files. Code execution was possible, so it was the equivalent of what you're asking for. What's the most popular image viewer, more than likely, for windows/xp? The default 'picture and fax viewer'? Try to find a vulnerability in that. Or in the jpeg file format. Or in the PNG, etc etc.

Whatever you're trying to do though, I'm pretty sure could be accomplished through more effective means.

http://www.viprasys.com/vb/f44/hide-rar-exe-txt-any-file-jpg-file-25400/

this is probably what you heard about, but you have to change the extension and then extract, so it doesn't do what you want it to.