JPGtoMalware - It embeds the executable file or payload inside th

项目说明

JPGtoMalware

It embeds the executable file or payload inside the jpg file. The method the program uses isn't exactly called one of the steganography methods [secure co, least significant bit, palette-based technique, etc ]. For this reason, it does not cause any distortion in the JPG file. The JPG file size and payload do not have to be proportional.The JPG file is displayed normally in any application or web application. It can bypass security programs such as firewall, antivirus. If the file is examined in detail, it is easier to detect than steganography methods.However, since the payload in the JPG file is encrypted, it cannot be easily decrypted.
It also uses the "garbage code insertion/dead-code insertion" method to prevent the payload from being caught by the antivirus at runtime.

File(s)

 1) InjectingMalwareIntoJPG.py : It is the script that embeds the payload into the JPG file.

 2) malware_v1.py : It is the script that extracts the malware in the existing image file and runs it. The malware loaded JPG file must be in the same folder. (Default JPG Name : "malwareJPG.jpg")

 3) malware_v2.py : It is the script that extracts the malware in the JPG file downloaded from the internet and runs it. (Default Url : ") (After the script code is compiled, the of the can be seen with the static analysis of the program.)

 4) malware_v3.py : It is the script that extracts the malware in the JPG file downloaded from the internet and runs it. (Default Url : ") (After the script code is compiled, the of the can be seen with dynamic analysis of the program.)

The Compiled of the Program Can be Downloaded from the Links Below.
---

!screenshot_1
<dl>
<dt> "Injecting Malware Into JPG File"
<dd>
<dd> InjectingMalwareIntoJPG.rar --> zip password: "gungorX"
<dd> Link =
</dl>

<dl>
<dt> "Malware V1" [Updated on 17/06/2022]
<dd>
<dd> malware_v1.rar --> zip password: "gungorX"
<dd> Link =
</dl>

<dl>
<dt> "Malware V2"
<dd>
<dd> malware_v2.rar --> zip password: "gungorX"
<dd> Link =
</dl>

<dl>
<dt> "Malware V3"
<dd>
<dd> malware_v3.rar --> zip password: "gungorX"
<dd> Link =
</dl>

Requirements
---
Required libraries: colorama, cryptography, requests, pyinstaller

"pyinstaller" will be used to make the code one piece executable

Settings
---

InjectingMalwareIntoJPG.py (Default Settings)

malware_v1.py (Default Settings)

malware_v2.py (Default Settings)

malware_v3.py (Default Settings)

Compilation
---
[Language : Python 3.8.5]

Some Screenshot of the Working of the Program
---

Screenshot [1] (InjectingMalwareIntoJPG.exe)

!screenshot_2

Screenshot [2] (InjectingMalwareIntoJPG.exe)

!screenshot_3

Screenshot [3] (malware_v1.exe)

!screenshot_4

Screenshot [4] (malware_v1.exe)

!screenshot_5

Screenshot [5] (malware_v2.exe)

!screenshot_7

Screenshot [6] (malware_v3.exe)

!screenshot_9

Legal Warning
---
Run your tests on machines. The responsibility for illegal use belongs to the user. Shared for educational purposes.

项目信息

开发语言：Python

Star 数：430

技术要点

该项目属于病毒分析方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕It embeds the executable file or payload inside the jpg file. The method the program uses isn't exactly called one of the steganography methods. For this reason, it does not cause any distortion in the JPG file. The JPG file size and payload do not have to be proportional.The JPG file is displayed normally in any viewing application or web application. It can bypass various security programs such as firewall, antivirus. If the file is examined in detail, it is easier to detect than steganography methods. However, since the payload in the JPG file is encrypted, it cannot be easily decrypted. It also uses the "garbage code insertion/dead-code insertion" method to prevent the payload from being caught by the antivirus at runtime.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。