A Proposed System for Hiding Information In Portable Executable Files Based on Analyzing Import Section
Mohammad Hussein Jawwad · IOSR Journal of Engineering · 2014
Information-hiding techniques have newly become very important in a many application areas.Many cover mediums have been used to hide information like image, video, voice.Use of these mediums have been extensively studied.In this paper, we propose new system for hiding information in Portable Executable files (PE files).PE is a file format for executable file used in the 32-bit and 64-bit versions of the Windows operating system.This algorithm has higher security than some traditional ones because of the combination between encryption and hiding.We first encrypt the information before hiding it to ensure high security.After that we hide the information in the import table of PE file.This hiding depends on analyzing the import table characteristics of PE files that have been built under Borland turbo assembler.The testing result shows that the result file does not make any inconsistency with anti-virus programs and the PE file still function as normal after the hiding process.