Author Topic: Attempt at analyzing an SD card image file  (Read 760 times)

0 Members and 1 Guest are viewing this topic.

Offline Andrey_irkTopic starter

  • Regular Contributor
  • *
  • Posts: 100
  • Country: ru
Attempt at analyzing an SD card image file
« on: May 02, 2020, 02:33:43 am »
Hi guys,
I have an image file that was taken from an SD card of come device. What are the ways out there to analyze such an image on a binary level without mounting the image on an actual card?
Any suggestions are much appretiated.
 

Offline Halcyon

  • Global Moderator
  • *****
  • Posts: 6120
  • Country: au
Re: Attempt at analyzing an SD card image file
« Reply #1 on: May 02, 2020, 03:01:25 am »
What sort of data are you wanting to get back?

You could try just mounting the image in something like XWays Forensics/WinHex or another similar tool and see if will parse the file system. Otherwise if you want to carve for particular files, QPhotoRec does a good job with media files, or GetDataBack Free is also not bad.

If you just want to look at the raw data, WinHex, HxD or any hex editor of your choice will do.
 

Offline magic

  • Super Contributor
  • ***
  • Posts: 7453
  • Country: pl
Re: Attempt at analyzing an SD card image file
« Reply #2 on: May 02, 2020, 06:59:16 am »
First off, Windows is rubbish :-- >:D

Once you have seen the light,
Code: [Select]
cp image.bin backup.bin  <- just to be safe
file image.bin
fdisk -l image.bin
# if it contains partitions, then
losetup -P -r -v -f image.bin
file -s /dev/loop*
# if they look like reasonable filesystems
mount /dev/loopNpM /tmp/dummy
ls /tmp/dummy
You get the idea :P
 

Offline Halcyon

  • Global Moderator
  • *****
  • Posts: 6120
  • Country: au
Re: Attempt at analyzing an SD card image file
« Reply #3 on: May 03, 2020, 05:55:38 am »
First off, Windows is rubbish

So, SO true.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf