bitnuts.de logo   Downloads About Contact

File-Schizophren in ZIP/HTA

There was a presentation by Ange Albertini and Gynvael Coldwind back in 2014 discussing schizophrenic files. What is meant by a Schizophrenic file? Well, in short: You have one file and this file can be opened and processed by at least two tools correctly. I stumpled upon a zip-compressed file which contains a .hta file. This file can be successfully opened by any ZIP tool but also successfully opens with mshta.exe. The example file I was analyzing was yet another malware dropper as you can see in the following screenshot:

a zipped HTA file schizophren example