StarDestroyer.Net BBS

Here's the situation - as part of a little assignment that may land me a job with F-secure, I was given a win32 .exe file that contains a hidden message of some sort.

Using ollydbg I've stepped through and looked through the programs code and basically found out that it just gets the environment strings of the currently running OS, dumps them into memory and exits. I haven't found anything that may be hidden strings or anything of that sort.

So, can anyone who may have done something similar just give me some pointers on where I ought to begin looking for hidden messages..?

Try opening it in a hex editor and check the code

http://mh-nexus.de/hxd/

Or try finding alternate ntfs streams

http://support.microsoft.com/kb/105763

And

http://www.windowsecurity.com/articles/ ... reams.html