Skip navigation.

Special Alphabets in Base64 encoding


Hi All,

I am just getting started in this wonderful world of Malware Analysis, and it has to be one of the most interesting and fun jobs I have ever had. Either or, I am working on an issue that i have currently, and I seem to be running into some issues on my research. So the first problem that I am seeing is special alphabets that are utilized in the Base64 encoding of emails. With that being said, I have not really been able to find much in the way of documentation on this situation. I am trying to figure out how Base64 works when it has a special alphabet attached. Anyone know what I am talking about on this issue?

Next what I am trying to do is write a quick little script that will "brute force" to figure out what the special alphabet actually is. I dont know if anyone has already done this, but one of the guys has coded something in the shop, but it takes two weeks to complete. Anyone know of anything that will do this a little bit easier?

It would be nice to be able to knock this out a little bit quicker, so any documentation, or a script that will do this pretty quickly would be nice. As a side not an in depth description of how Base64 is encoded would be nice, but with the special alphabets again would be nice to be attached to this.

Please let me know if anyone can help,