
Originally Posted by
kiddion
how would one even hide something malicious in an executable so small, it's not possible.
Not to suggest that anything is going on with this or any other executable here. But, 5 KB (even without the compression this uses) is a GIANT address space to put "things" in.
For instance, in SAMP we exploited a buffer overflow within the game (normal server to client using pawn script, and client to client in our most evil of actually-private m0d_s0beit/m0d_sa stuff), and it was able to start a thread, patch the game so it wouldn't crash, return to normal game operations, while the new thread downloaded and executed any code we wanted to, of any size. We did all of this in less than the
153 bytes of space we had to work with. Nobody but Kye ever knew it existed (because we reported it), and we told s0beit because he's the f*ing shit.
Just sayin'
File size or allocated memory size is no indicator of if something is evil or not, by itself. (obvious if you're trying to download something you know should be a certain size, and it's wildly different, then yeah, alarm bells maybe)
p.s. We still love you R*. If it's ok with your dad, can you lower the price of Shark Cards by 90% before you shut down the servers?