Notifications
Clear all

Bitmap

6 Posts
3 Users
0 Likes
1,446 Views
(@trewmte)
Posts: 1877
Noble Member
Topic starter
 

Is there anyone on FF who can help and confirm if it is possible to enable this bitmap image to be viewed (whole or partially).
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Thanks

 
Posted : 27/02/2017 2:12 am
MDCR
 MDCR
(@mdcr)
Posts: 376
Reputable Member
 

What was the source? Regular BMP file? Know the (X/Y) size of it? Was it carved or was it found like that?

I gave it a minute and well, header looks like a bmp file, but it wont read like one - i tried it as a BMP, DIB, RLE and ICO.

Try reading it as a RAW image, here is some info that may be useful.
https://en.wikipedia.org/wiki/BMP_file_format#File_structure

Good luck.

 
Posted : 27/02/2017 4:13 am
(@trewmte)
Posts: 1877
Noble Member
Topic starter
 

Hi MDCR

Thanks for your reply, much appreciated.

What was the source? Regular BMP file? Know the (X/Y) size of it? Was it carved or was it found like that?

I gave it a minute and well, header looks like a bmp file, but it wont read like one - i tried it as a BMP, DIB, RLE and ICO.

Try reading it as a RAW image, here is some info that may be useful.
https://en.wikipedia.org/wiki/BMP_file_format#File_structure

Good luck.

The source of the data was found in an SMS text message and we have unravel what it is all about. The data was accompanied by a statement that an attachment was an image called "Stars.bmp".

It was important to double check with other examiners in the community and your findings have been the same as ours so far.

Once again, thanks for your help and I will follow through with your observations.

 
Posted : 27/02/2017 6:02 am
Passmark
(@passmark)
Posts: 376
Reputable Member
 

42 4D - Signature
3E 07 00 00 - File Size (1854 bytes, which is very small for a BMP)
00 00 - Reserved
00 00 - Reserved
36 00 00 00 - Offset to start of image data
28 00 00 00 - size of BITMAPINFOHEADER structure, must be 40, and it is
18 00 00 00 - image width in pixels (24 px, very small)
19 00 00 00 - image height in pixels (25 px)
01 00 - Planes (1)
18 00 - Bits per pixel (24)
00 00 00 00 - No compression
08 07 00 00 - Size of image data (1800 bytes)

But here is the problem. The number of bytes in your dump is 311. But the expected file size is 1843.

So ignoring the header, you only have 15% of the image data. ie. about 90 pixels.

I can't imagine any useful visual information being in these 90 pixels.

 
Posted : 27/02/2017 6:29 am
Passmark
(@passmark)
Posts: 376
Reputable Member
 

As an update.

If you append some fake data to the end of the file (pad it out), then the file will open in a image viewer.

This is what it looks like

 
Posted : 27/02/2017 6:37 am
(@trewmte)
Posts: 1877
Noble Member
Topic starter
 

42 4D - Signature
3E 07 00 00 - File Size (1854 bytes, which is very small for a BMP)
00 00 - Reserved
00 00 - Reserved
36 00 00 00 - Offset to start of image data
28 00 00 00 - size of BITMAPINFOHEADER structure, must be 40, and it is
18 00 00 00 - image width in pixels (24 px, very small)
19 00 00 00 - image height in pixels (25 px)
01 00 - Planes (1)
18 00 - Bits per pixel (24)
00 00 00 00 - No compression
08 07 00 00 - Size of image data (1800 bytes)

But here is the problem. The number of bytes in your dump is 311. But the expected file size is 1843.

So ignoring the header, you only have 15% of the image data. ie. about 90 pixels.

I can't imagine any useful visual information being in these 90 pixels.

Passmark, thanks for your feedback. It is appreciated.

Your analysis and prognosis is spot on.

 
Posted : 27/02/2017 10:21 pm
Share: