EDIT: apparently this is not true for the US, I briefly checked but apparently missed something, my bad. It is for example in Germany.
Creating any unauthorized derivative work is illegal and thus ineligible for copyright protection, including the preparation of unauthorized translations (other than under fair use exemptions such as for news reporting, research, or scholarly purposes).[2]
[1] https://www.law.cornell.edu/uscode/text/17/106 [2] http://www.unc.edu/~unclng/copy-corner73.htm
Copyright of a derivative work that itself meets the standard for copyrightability rests with the creator of the derivative, because, under law, any copyrightable work has a copyright that belongs to the creator at the moment it is created.
A derivative created without proper permission is also a violation of the copyright of the original, but that's a separate issue.
otherwise how could anyone do spec work!
EDIT: I mean unsolicited spec work - the company they're pitching doesn't even know they're pitching them until they send their pitch. Surely their pitch is still protected by copyright, even though as it's unauthorized the person producing it wouldn't have the right to publish their pitch without approval (if it's a derivative of the company's assets)?
Adding substantial new content does qualify it as an derivative work -- but it's still infringing, since any derivative works made without authorization are illegal.
If I create a derivative work, e.g., a Star Trek "fanfic", I may not have rights to publish that work commercially, because of the copyright of creator of the base work.
However, the original copyright holder cannot simply take my work and publish it, because I have rights in my own creation.
This leaves the derived work in an awkward position where it cannot be published commercially without consent of both parties, or until expiration of the copyright on the original work (if that ever happens again).