Learning Aid - Top Base64 Encodings Table

MITRE ATT4CK - T1132 - Data Encoding

Base64 Code	Mnemonic	Decoded*	Description
`JAB`	Jabber 🗣	`$.`	Variable declaration (UTF-16)
`TVq`	Television 📺	`MZ`	MZ header
`UEs`	Upper East Side 🏬	`PK`	ZIP, Office documents
`SUVY`	SUV 🚙	`IEX`	PowerShell Invoke Expression
`SQBFAF`	Squab 🐣 favorite	`I.E.`	PowerShell Invoke Expression (UTF-16)
`PAA`	"Pah!" 💪	`<.`	Often used by Emotet (UTF-16)
`cwBhA`	Chewbaka 🦁	`s.a.`	Often used in malicious droppers (UTF-16) 'sal' instead of 'var'
`aWV4`	Awe version 4	`iex`	PowerShell Invoke Expression
`aQBlA`	Aqua Blah (aquaplaning) 💦	`i.e.`	PowerShell Invoke Expression (UTF-16)
`R2V0`	R2D2 🤖 but version 0	`Get`	Often used to obfuscate imports like GetCurrentThreadId
`dmFy`	defy / demonify 👹	`var`	Variable declaration
`dgBhA`	debugger + high availability	`v.a.`	Variable declaration (UTF-16)
`dXNpbm`	Dixon problem	`usin`	Often found in compile after delivery attacks

* the . stands for 0x00

Cyber Chef Recipe