这是哪种编码的字符串? [英] What Kind Of Encoded string Is This?

问题描述

有人可以告诉我这里使用的字符串类型吗?
我怀疑它是某种类型的base64，但是我无法复制它.

以下是病毒定义的一些示例:

PaGoX9WrnXCkfVQx7uWHfRvdewGJO2zeolu8x/3IGAg = Virus.MSWord.Day
pWGmeIaFSqN1Iz4CP/bD/sEouA2T2EqvetWth7bYHWI = Virus.MSWord.Marker.ba
l8jxzBJS3c64ujhHRcTMpxG6m7Tf2tWnnyO7xj5eQpk = Exploit.Linux.Rpc.f
T9YdSvIGm2B10VygBrElSOYCaQ3O1J7viFw9itCaxb0 = Virus.Linux.RST.b
lbPXCJF/IPnNRdupLZVKKHGn7Lo4MS35oEPPzDgAAjM = Exploit.Linux.Local.v
jsZvO/RBWfwjQADBV27gUuFnQqal/9SQ7fXcvcn7f3k = Net-Worm.Linux.cheese
/Lhow4exFPOd0ERVXlEV78QtNJk8xBjZoOnZp7lwZDk=Trojan-Spy.HTML.Bankfraud.qb
VIKjH2SbK3yueYdvU3Cs5 + LcLmSvk/EHZhpBhrEU0Bc = Virus.WinHLP.generic
Na0YCEWmim/AxcLUMb5FHlN + 8sCcIS/ppAqbuge23AQ = Trojan.JS.Seeker.b


哪种签名有43个字符?

Can anyone please tell me the type of string being used here?
I suspect it is some type of base64 but I have not been able to replicate it.

Here are some examples of the virus definitions:

PaGoX9WrnXCkfVQx7uWHfRvdewGJO2zeolu8x/3IGAg=Virus.MSWord.Day
pWGmeIaFSqN1Iz4CP/bD/sEouA2T2EqvetWth7bYHWI=Virus.MSWord.Marker.ba
l8jxzBJS3c64ujhHRcTMpxG6m7Tf2tWnnyO7xj5eQpk=Exploit.Linux.Rpc.f
T9YdSvIGm2B10VygBrElSOYCaQ3O1J7viFw9itCaxb0=Virus.Linux.RST.b
lbPXCJF/IPnNRdupLZVKKHGn7Lo4MS35oEPPzDgAAjM=Exploit.Linux.Local.v
jsZvO/RBWfwjQADBV27gUuFnQqal/9SQ7fXcvcn7f3k=Net-Worm.Linux.cheese
/Lhow4exFPOd0ERVXlEV78QtNJk8xBjZoOnZp7lwZDk=Trojan-Spy.HTML.Bankfraud.qb
VIKjH2SbK3yueYdvU3Cs5+LcLmSvk/EHZhpBhrEU0Bc=Virus.WinHLP.generic
Na0YCEWmim/AxcLUMb5FHlN+8sCcIS/ppAqbuge23AQ=Trojan.JS.Seeker.b


What type of signature has 43 characters? or is this base64 encoded to something else?

推荐答案

严格来说，永远不可能只看字符串就能说出来.它看起来像是病毒的签名"(无论如何都是文件签名")，这是文件内容传递给某些哈希函数(如MD5，SHA-1，SHA-2等)的结果.

参见:
http://en.wikipedia.org/wiki/Cryptographic_hash_function [ http://en.wikipedia.org/wiki/MD5 [ http://en.wikipedia.org/wiki/SHA1 [ http://en.wikipedia.org/wiki/SHA2 [ 再说一次，永远不可能确切地说-只是一些数据，任何元数据都丢失了.

—SA

Strictly speaking it is never possible to say just by looking at the strings. It looks like the virus "signatures" (file "signatures" anyway), the result of passing of the file content to some hash function such as MD5, SHA-1, SHA-2 or something like that.

See:
http://en.wikipedia.org/wiki/Cryptographic_hash_function[^],
http://en.wikipedia.org/wiki/MD5[^],
http://en.wikipedia.org/wiki/SHA1[^],
http://en.wikipedia.org/wiki/SHA2[^].

The result of hash function could be encoded as Base64 and presented on the left of "=".
Again, it''s never possible to say exactly — just some data, any meta-data is missing.

—SA

我的猜测:等号(``='')左侧的部分是右边项目的二进制属性，以base64编码(用纯文本编写).
因此，例如，Virus.MSWord.Day具有对应于base64字符串PaGoX9WrnXCkfVQx7uWHfRvdewGJO2zeolu8x/3IGAg的二进制属性.

My guess: the part on the left of the equal symbol (''='') is a binary property, encoded in base64, of the item on the right (that is written in plain text).
Hence, for instance, the Virus.MSWord.Day has the binary property corrensponding to the base64 string PaGoX9WrnXCkfVQx7uWHfRvdewGJO2zeolu8x/3IGAg.

这篇关于这是哪种编码的字符串?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！