Hiding EXE Data Within GIF Data

• Download demo project - 243 KB
• Download source files - 139 KB

Introduction

The goal of this vbscript is to hide EXE data within a GIF image.
The above Homer picture actually contains the Windows calculator. (calc.exe)

The EXE data is stored within a newly generated GIF comment block.

Example

If you'd like to create your own examples, simply goto a run prompt and type:

cscript.exe hide.vbs your.gif your.exe

The script merges "your.gif" and "your.exe" to create "your.gif.hta.gif", which correctly displays using the IE browser. If the 'Hide extension for known file types' option is enabled, which is the default setting, the "Save Picture As..." will download "your.gif", it's really "your.gif.hta". (Example: Right-click and Save Homer)

Microsoft described an HTA as running much like an EXE file.

Good Luck!