EXE files?

Malware1

Level 76
Thread author
Sep 28, 2011
6,545
Hi, are the files exe?

EFT1GMS.png
 

Ink

Administrator
Verified
Jan 8, 2011
22,490
Yes, you can see under the File Type, it says Application -- see edit.

Edit: If you have Shown Hidden File Extensions, then change the extension it will display something else.
 

Malware1

Level 76
Thread author
Sep 28, 2011
6,545
The files are using http://malwaretips.com/Thread-Bi-Directional-Trickery-%E2%95%AF%C2%B0%E2%96%A1%C2%B0-%E2%95%AF%EF%B8%B5-o%D7%9F%C9%B9
 

Littlebits

Retired Staff
May 3, 2011
3,893
I don't know why Windows hides exe extensions by default, it is always a good idea to Shown Hidden File Extensions on Windows.

These files are what you call double extension files.
It is a common trick used by malicious files to hide the fact that they are executable files.

The user thinks they have downloaded an image, document, video or audio file, so they ignore Windows warning and run it anyway.

Thanks. :D
 

Malware1

Level 76
Thread author
Sep 28, 2011
6,545
No, these files aren't "double extension files". Show extensions is enabled.
 

Littlebits

Retired Staff
May 3, 2011
3,893
MalwareCenter said:
No, these files aren't "double extension files". Show extensions is enabled.

I'm sorry you're correct but it is very similar to double extensions. The second extension is there but move around to appear different.

Bi-Directional just flips the real extension without a period between them.

Almost the same but Windows still recognizes them as Applications and UAC still can block them. Windows digital file checks also warns you if you try to run them because you can always click "Cancel".

Thanks. :D
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top