As usual I login to my webmail after I woke up in the morning, checking the email and there's one with zip attachment, sounds malicious that it may contain executable file? Here's how the email looks like, I discard the sender part as it can be any originator -
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_P-XH5FQX2P_8M1yFUAycr97a7yrO816v7wRKJ1z1HJsc78WiHFIbmp3qzcUFJ-ls701XkFa4H3Kn-pr61MnDBnrJ2SMflK6FjMvBoryyBj09S00yhazaOnQArCnp9UH8VEqULg/s400/spam-mail.jpg)
I like the Note message, it looks so harmless. Anyway I just unzip it and it appears to be a pdf file -
shell>file 2685.pdf
2685.pdf: PDF document, version 1.2
shell>hexdump -C 2685.pdf
255044462d312e32 200d0a312030206f |%PDF-1.2 ..1 0 o|
626a0d0a3c3c0d0a 2f54797065202f43 |bj..<<../Type /C|
6174616c6f670d0a 2f50616765732033 |atalog../Pages 3|
203020520d0a2f50 6167654d6f646520 | 0 R../PageMode |
2f5573654e6f6e65 0d0a2f506167654c |/UseNone../PageL|
Output truncated .....
Therefore I use xpdf to open the file and here's how it looks like .....
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh56MPuRCD-pl-CFOmYgOwTBef1d0_t9C8bw8CSuRsk1g9eXzuQXbazgeotUisgnfc-QUleXqr-RLJnr0tlgBVLX19voaPwXL0RdFxSijrg1JbKDL3aZrz8PZJSzS9r8GETzueynw/s400/low-quality-spam.png)
You can click on the image to zoom in, but the image quality is so bad until you can't really read, I know you spammer want it to be small size(68K) only but please deliver with better quality image so that I can read or else how I gonna invest?
I don't see much of small gif file from spamming activities lately, maybe the trend is changing again .....
Enjoy ;]
I don't see much of small gif file from spamming activities lately, maybe the trend is changing again .....
Enjoy ;]
No comments:
Post a Comment