[jasonnix]

Hello,
I have a file with .bin extension and I want to know if its contents are encrypted or not. What tools are useful for this?

Thank you

[Tentco]

You can use a hex editor like HxD.
You can use Detect it Easy.

[jasonnix]

You can use a hex editor like HxD.
You can use Detect it Easy.

Hello,
Thank you so much for your reply.
How can HxD or DIE tell the type of cryptography, or at all, whether the text or file is encrypted or not?

[jasonnix]

DiE can help you identify which compilers/linkers and langauges the file is made with and if its packed/encrypted with any third-party protection software.
HxD is simple yet effective hex editor that you can open any file in to see the patterns if they match certain file type for example exe files start with MZ which is the MZ header, if you are experienced enough you will know what type of file is this and if it's encrypted or not. open the file in HxD and see if the characters are scrambled or in normal english strings.

Another tool I recommend is PPEE (PUPPY) and PEStudio both can help as well.

Hello,
Thank you so much for your reply.
You open an .exe file and you see a series of characters like the one below, or after running an .exe file, a file with the following contents is created:

Code

HBby vcbGT IoPyQ YYSDn QXVmK

How can you recognize the encryption type of this text and break it? I found a bunch of websites to detect the encryption type, but they all only detect the well-known encryption algorithms.

[jasonnix]

hi,

you can use any automated service if ur suspicious that the file is malware like https://hybrid-analysis.com / https://any.run

and see the results from there.

You can also send me the file so i can take a more in-depth look.

Hello,
Thanks again.
No, I don't mean malware. A normal program that encrypts the information that is entered into it or the information it receives.
May i have your Telegram, Email or etc.? Please PM me.

[_rei]

You can try checking file's entropy (e.g. with ent program on Linux). In general, encrypted files have high entropy, so if it's close to 8 bits per byte then it's most definitely encrypted/compressed. There are methods to artificially reduce entropy of any given piece of data though.

[jasonnix]

tele: https://t.me/m0hx777
email: [email protected]

Hello,
Thanks again.
I pinged you.

---

tele: https://t.me/m0hx777
email: [email protected]

Hello,
If possible, please send a message to me.

[Hammylein]

Hello,
Thank you so much for your reply.
You open an .exe file and you see a series of characters like the one below, or after running an .exe file, a file with the following contents is created:

Code

HBby vcbGT IoPyQ YYSDn QXVmK

How can you recognize the encryption type of this text and break it? I found a bunch of websites to detect the encryption type, but they all only detect the well-known encryption algorithms.

I dropped the code into CyberChef

and worked my way down the list of Decode. Only one that made sense is AMF (no clue what this is):

Code

{
    "marker": 72
}