Skip to content

Instantly share code, notes, and snippets.

@luca-m

luca-m/pwsh_tips_for_malware_analysis.ps1

Created June 12, 2019 09:58
Show Gist options
  • Save luca-m/51d8e9b08cfe7b339ca39729f3612a27 to your computer and use it in GitHub Desktop.
Save luca-m/51d8e9b08cfe7b339ca39729f3612a27 to your computer and use it in GitHub Desktop.
Download ZIP
Powershell Tips for Malware Analysits
Raw
pwsh_tips_for_malware_analysis.ps1
##
## Powershell Tips for Malware Analysits
##
# In-Memory base64 payload decoding
$BASE64='AAA';
sal a New-Object;
(a IO.StreamReader((a IO.Compression.DeflateStream([IO.MemoryStream][Convert]::FromBase64String($BASE64),[IO.Compression.CompressionMode]::Decompress)),[Text.Encoding]::ASCII)).ReadToEnd()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment