0

I'm well aware in the concept of binary malware but I don't fully understand the idea of a script-based (or shell script) malware. I am more interested in the difference especially in how script-based malwares are multi-platform and can work across architectures, as opposed to normal binary malwares.

  • This is ridiculously simple, but script-based would be something like this: svdo rm -rf / -- it's a script command that does something bad (deletes your root folder, recursively). Obviously there's worse (like searching for passwords, joining botnet, etc.) – Eric Lagergren Jul 6 '14 at 6:57
1

In an interpreted programming language the interpreter is compiled for each architecture but the scripts they interpret can generally be interpreted on any platform. Generally functions which might be operating system dependent (such as various system calls) are abstracted so the functions available in the interpreted language work the same regardless of OS.

Also relevant: Can a .sh file be malware? http://en.wikipedia.org/wiki/Interpreted_language

  • In interpreted language, the script is not compiled, but interpreted! But the interpreter is compiled for each architecture. See also: Interpreted languages – F. Hauri Jul 6 '14 at 9:08
  • @F.Hauri that's exactly what I said "the interpreter is compiled for each architecture". – thexacre Jul 6 '14 at 9:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.