±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 2 Overall: 35989
New Yesterday: 3 Visitors: 132

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Autopsy, Windows Image and yet no results... :(

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

watcher
Senior Member
 

Re: Autopsy, Windows Image and yet no results... :(

Post Posted: May 02, 19 15:01

- banderas20
...I'm new to forensics ... I have also digged into the images to see if there is any message hidden in them. ...


I of course don't know what you have so this is pure speculation.

The combination of new or beginner and some images leads me to wonder about old school steganography. Simple as it is, it's still used a lot because it works.

Concatenating an additional file onto the end of a JPG results in a JPG that still works and looks perfectly normal. However the extra file is beyond the end mark of the JPG.

Is the JPG unrealistically large? If it's a small extra file you may not notice.

Look at the end of the JPG with a hex editor.

Again, this is a blind guess,

Good Luck!  
 
  

banderas20
Member
 

Re: Autopsy, Windows Image and yet no results... :(

Post Posted: May 03, 19 11:03

Hello.

I can't seem to find anything at the end of the files. Besides, their size is normal.

Thanks!  
 
  

watcher
Senior Member
 

Re: Autopsy, Windows Image and yet no results... :(

Post Posted: May 04, 19 21:56

Please let us know what the answer was when you find out. Cool  
 
  

banderas20
Member
 

Re: Autopsy, Windows Image and yet no results... :(

Post Posted: Jul 02, 19 04:16

Well. The jpg image didn't contain anything at all. I think it was a maneuvre to distract (as far as I know).

Regarding the other files, I think the issue had to do with some assembler code/trojan embedded into some executable files, according to the alarm given by many antiviruses.

Nothing very clear, for what you can see.

Many thanks!  
 
  

watcher
Senior Member
 

Re: Autopsy, Windows Image and yet no results... :(

Post Posted: Jul 02, 19 16:09

- banderas20
... I think the issue had to do with some assembler code/trojan embedded into some executable files, ...


Interesting, but your original posting made no mention of executable files? Question  
 

Page 2 of 2
Page Previous  1, 2