As I understand it, virus programs will use MD5 hashes as well as other types of program fingerprinting to verify programs. This method would undoubtedly set off alarms on these programs despite not changing the file size. The binary "signature" would still look different.

It seems like a cool project, but other than that, I think using steno via music or photo's is a much more viable solution.

Snowdog

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/2623/18316#18316