owasp-dep-scan / depscan-bin

Binary builds for dep-scan - The Dependency Scanner
Apache License 2.0
9 stars 0 forks source link

Few Antivirus @ Virus Total Label Single Binaries as malicious #8

Open rothoma2 opened 1 year ago

rothoma2 commented 1 year ago

Hello, I really like the capabilities of this project and the single binary distributable files. I tried to use it on a project but Windows Security Blocked it. I run this across Virus Total, and although the majority of Scanners didn't flag this file, a few ones did.

Would it be possible to look into signing this binaries? https://www.virustotal.com/gui/file/faf5de1fa509cbebccc4d1270be0bed5fe2031eae98dabf92d5f4e81483e0aa7/behavior

virus_total virus_total2
prabhu commented 1 year ago

@rothoma2 Thank you for the kind words. I am in the process of getting a signing certificate via signmycode.com. It appears like a very convulted process so trying to work through all the verification steps etc. Meanwhile is there an option to submit the executable to Windows Security for assessment?

prabhu commented 1 year ago

@rothoma2 It appears like the problem is when depscan tries to extract cdxgen and other binaries into the temp directory. I am not sure if signing would help here since building a reputation for my key would take a while. Let me check if there is a better way to do the extraction.

rothoma2 commented 1 year ago

I'm not sure if there are better ways to do this, and not looks suspicious to an antivirus. Also just a few seem to catch it, unfortunately although the Key takes some time to get reputation its the only way I know to "whitelist" this behavior on a mass scale

prabhu commented 1 year ago

@rothoma2 I understand. My attempt to get a cert via signmycode.com is going nowhere. Let me look into some alternatives next week.