«

»

Dec
04

iCTF2011. Challenge 33 ($100)

There is file “reverse5”, but if you look at that, you don’t see executable file at all. It is some “binary trash”. Size is 991117 bytes and it looks like a packed one (large entropy).

But if you open file in hex editor (Hiew for example) and “Page down” a little you will see part of file where entropy is smaller.

Ooo! There is a JPEG signature here “JFIF”, bingo!

Leave a Reply

Your email address will not be published.

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>