Explanation

This page shows a different type of analysis done to each of the different binaries that we gather and have gathered in. Most malicious programs are packed with different technologies in the hopes of obfuscating their existing from different detection mechanisms, but to also increase the difficulty in either reverse engineering the binary, or to analyze what exact functions and purposes it may have. While there are many well used and semi-public packers in use, there is a trend for more private and custom packers being used to increase the effectiveness of their concealment.

The tool that we use to make the determination for identification is from Sigbuster by Toni Koivunen (toni <AT> teamfurry.com)/Teamfurry.com. Sigbuster is a cross-platform tool for detecting exe-packers.

Notes

There are minor discrepancies in the percentages, and this is an artifact from the numbers being compared to a set of five in the pie chart verses a set of ten in the table.

↑ Contents

Updates

The graph are updated once a day.

↑ Contents

Charts and Graphs

Daily Statistics (Last 24-hours)

Packer Count Percent
Allaple_Polymorphic_Packer vna 186495 86.00%
UPX All_Versions 20114 9.27%
NullSoft_NSIS Generic 6411 2.96%
PE_Compact v2.X 1910 0.88%
NullSoft_PiMP_SFX vna 660 0.30%
Inno_Setup v2.0.1 488 0.23%
UPX V2.9-3.X 426 0.20%
FSG V1.0-1.2 119 0.05%
InstallShield v2000 60 0.03%
ASPack vna 39 0.02%

Weekly Statistics (Last 7-Days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 217791 53.52%
UPX All_Versions 103500 25.43%
NullSoft_NSIS Generic 54025 13.28%
NullSoft_PiMP_SFX vna 8014 1.97%
PE_Compact v2.x 6673 1.64%
UPX V2.9-3.X 5375 1.32%
Inno_Setup v2.0.1 5343 1.31%
FSG V1.0-1.2 2414 0.59%
InstallShield v2000 888 0.22%
ASPack vna 420 0.10%

Monthly Statistics (Last 30-days)

Packer Count Percent
UPX All_Versions 3062601 88.05%
Allaple_Polymorphic_Packer vna 224895 6.47%
NullSoft_NSIS Generic 76683 2.20%
NullSoft_PiMP_SFX vna 35566 1.02%
Inno_Setup v2.0.1 24005 0.69%
UPX V2.9-3.X 14021 0.40%
PE_Compact v2.X 13544 0.39%
FSG V1.0-1.2 9406 0.27%
ASPack vna 2647 0.08%
InstallShield v2000 1693 0.05%

Bi-Monthly Statistics (Last 60-days)

Packer Count Percent
UPX All_Versions 11485150 93.33%
Allaple_Polymorphic_Packer vna 239561 1.95%
NullSoft_NSIS Generic 132819 1.08%
NullSoft_PiMP_SFX vna 119855 0.97%
Inno_Setup v2.0.1 68812 0.56%
ASPack vna 58214 0.47%
FSG V1.0-1.2 57056 0.46%
UPX V2.9-3.X 39472 0.32%
ASPack v2.12 34783 0.28%
PE_Compact v2.x 19827 0.16%

Tri-Monthly Statistics (Last 90-days)

Packer Count Percent
UPX All_Versions 13291217 88.69%
NullSoft_PiMP_SFX vna 306586 2.05%
Allaple_Polymorphic_Packer vna 258987 1.73%
ASPack vna 213939 1.43%
NullSoft_NSIS Generic 212505 1.42%
Inno_Setup v2.0.1 209803 1.40%
UPX V2.9-3.X 158759 1.06%
FSG V1.0-1.2 101849 0.68%
ASPack v2.12 84513 0.56%
PE_Compact v2.x 22454 0.15%

Semi-Yearly Statistics (Last 180-days)

Packer Count Percent
UPX All_Versions 15913644 82.80%
NullSoft_PiMP_SFX vna 734052 3.82%
UPX V2.9-3.X 455967 2.37%
Inno_Setup v2.0.1 425522 2.21%
ASPack vna 360154 1.87%
FSG V1.0-1.2 292411 1.52%
NullSoft_NSIS Generic 277009 1.44%
Allaple_Polymorphic_Packer vna 275758 1.43%
ASPack v2.12 126524 0.66%
PE_Compact v2.x 107206 0.56%

Yearly Statistics (Last 12-Months)

Packer Count Percent
UPX All_Versions 25125821 76.73%
NullSoft_PiMP_SFX vna 1657356 5.06%
Inno_Setup v2.0.1 820935 2.51%
FSG V1.0-1.2 791011 2.42%
UPX V2.9-3.X 762073 2.33%
ASPack v2.12 634433 1.94%
NullSoft_NSIS Generic 616483 1.88%
Packman v1.0 524771 1.60%
ASPack vna 508935 1.55%
Allaple_Polymorphic_Packer vna 401959 1.23%

↑ Contents

<< Sandbox Graphs | Statistics | Scans >>