[nyx322]

Hello everyone, today we will cram unbreakable, namely we will shove your viruses in the formats JPG, txt, PSD, etc., while it will look like a real Jpg and next will write that it is a jpg picture (similarly with other files!)

And so, that we need
-Winrar Archiver
-JPG
-HxD Download (didn't find official site, so i uploaded it on Dropbox, if u scare to run file just try it in vm, official page of program -mh-nexus.de/en/hxd/) VT

So
1. Install HxD and throw its icon in the folder with the virus

2. Archive the virus, with the usual settings, just zip this shit into the Zip format.

3.And so we have at the moment, the archive with the virus of the format .exe
Now take this very Archive and drag it to the HxD icon

4.Open this window where we see all the code, then go to the tab Search> Find or press Ctrl + F

5.Write into the search box "Full name of your virus.exe"
We are looking for it, it will find 2 entries, one at the very bottom and the other on top of the code, we need the bottom value, so do not confuse it, then change exe to the extension that is needed, I changed it to Jpg

Now we save all this, and open our archive, and see this picture

TOTAL - As you see it is displayed .jpg, next to the Type tab it says that this is a JPEG image  👍

Not mine article, just translated from one of russian forum.

---

Fixed download link of HxD

[rogueblade]

very nice work!! thank you will it still execute?

[nyx322]

very nice work!! thank you will it still execute?

of course, but can have some problems with rare extensions like .bin .iso
I checked only .psd .jpg and .txt

[rogueblade]

of course, but can have some problems with rare extensions like .bin .iso
I checked only .psd .jpg and .txt

i will try some other extensions if they work i'll post them, thank you for the research on the thread.

[CyberStrike]

msfvenom you can use the format and raw then > bin . You can actually use polyglot to have an actual image generally png/bmp which can run shellcode or a powershell script as well. Over all interesting.

[Hacking Team]

Looks interesting. Have you tried it? It works? Maybe this flaw has been patched in the newer versions

EDIT: This bug has been patched, it does not work anymore

[vladd]

it's looking good, i need to try it out and see and give feedback

[nyx322]

Looks interesting. Have you tried it? It works? Maybe this flaw has been patched in the newer versions

EDIT: This bug has been patched, it does not work anymore

Still working, just created new png file few min ago

[MrDickFeynman]

Still working, just created new png file few min ago

what payload format did you use? i just tried with exe to jpg but it didnt work..
the original payload works but after changing hex it doesnt

[nyx322]

what payload format did you use? i just tried with exe to jpg but it didnt work..
the original payload works but after changing hex it doesnt

I think you changed the first found file name you should edit the last one at the end of code

[Hacking Team]

I think you changed the first found file name you should edit the last one at the end of code

We have changed the last one at the end of the code. Why didn't it work?

[nyx322]

We have changed the last one at the end of the code. Why didn't it work?

dunno, try to reinstall HxD

[Hacking Team]

dunno, try to reinstall HxD

We will try to reinstall HxD but we are pretty sure that this bug has been patched in the new versions of WINRAR. We will come back to you shortly.

[MrDickFeynman]

We have changed the last one at the end of the code. Why didn't it work?

i'm sure i took the last one

[nyx322]

i'm sure i took the last one

Then may be guy above right, an you should try it with earlier versions of winrar, let me check mine version

EDIT: You need to have fourth version of winrar