full-disclosure - Odd My_Photo.zip in email

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <47fe5060601130707r3519c186v947d5ee03f0248c5@mail.gmail.com>
Date: Fri Jan 13 15:07:35 2006
From: xillwillx at gmail.com (Ill will)
Subject: Odd My_Photo.zip in email

receiving an odd email with an attached zip file called "My_Photo.zip"
containing a .jpg and a .bat that only has execution code of "My
Photo.jpg" in it. the .jpg itself looks to be an encrypted vb dll with
just the .jpg extention changed .. but im just curious as to how this
virus planned on executing itself , ive seen the mydoom virus
spreading this way but included something like a .cpl file or a file
with a bunch of spaces to hide the extention of .pif etc .. not at
home right now to analyze but wondeirng if anyone came across this
--
- illwill