Explanation

This page shows a different type of analysis done to each of the different binaries that we gather and have gathered in. Most malicious programs are packed with different technologies in the hopes of obfuscating their existing from different detection mechanisms, but to also increase the difficulty in either reverse engineering the binary, or to analyze what exact functions and purposes it may have. While there are many well used and semi-public packers in use, there is a trend for more private and custom packers being used to increase the effectiveness of their concealment.

The tool that we use to make the determination for identification is from Sigbuster by Toni Koivunen (toni <AT> teamfurry.com)/Teamfurry.com. Sigbuster is a cross-platform tool for detecting exe-packers.

Notes

There are minor discrepancies in the percentages, and this is an artifact from the numbers being compared to a set of five in the pie chart verses a set of ten in the table.

↑ Contents

Updates

The graph are updated once a day.

↑ Contents

Charts and Graphs

Daily Statistics (Last 24-hours)

Packer Count Percent
Allaple_Polymorphic_Packer vna 129834 63.89%
NsPack All_Versions 45887 22.58%
UPX All_Versions 8944 4.40%
ASPack v2.12 7552 3.72%
NullSoft_NSIS Generic 2411 1.19%
MEW v11SEv1.2 2406 1.18%
NullSoft_PiMP_SFX vna 1056 0.52%
UPX V2.9-3.X 980 0.48%
Inno_Setup v2.0.1 852 0.42%
Swizzor_test vna 751 0.37%

Weekly Statistics (Last 7-Days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 909816 65.46%
NsPack All_Versions 254053 18.28%
UPX All_Versions 76130 5.48%
NullSoft_PiMP_SFX vna 27941 2.01%
UPX V2.9-3.X 26793 1.93%
ASPack v2.12 24100 1.73%
Inno_Setup v2.0.1 13542 0.97%
ASPack vna 12374 0.89%
NullSoft_NSIS Generic 11747 0.85%
Swizzor_test vna 7099 0.51%

Monthly Statistics (Last 30-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 4442419 63.94%
NsPack All_Versions 1154921 16.62%
UPX All_Versions 463672 6.67%
NullSoft_PiMP_SFX vna 191437 2.76%
UPX V2.9-3.X 187732 2.70%
Inno_Setup v2.0.1 112269 1.62%
ASPack v2.12 108264 1.56%
NullSoft_NSIS Generic 59697 0.86%
Swizzor_test vna 50834 0.73%
ASPack vna 47895 0.69%

Bi-Monthly Statistics (Last 60-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 7554849 69.53%
NsPack All_Versions 1166511 10.74%
UPX All_Versions 746905 6.87%
UPX V2.9-3.X 282007 2.60%
ASPack v2.12 235171 2.16%
NullSoft_PiMP_SFX vna 225145 2.07%
Inno_Setup v2.0.1 142627 1.31%
Swizzor_test vna 139491 1.28%
NullSoft_NSIS Generic 109109 1.00%
ASPack vna 52756 0.49%

Tri-Monthly Statistics (Last 90-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 10177334 72.19%
NsPack All_Versions 1170486 8.30%
UPX All_Versions 968845 6.87%
UPX V2.9-3.X 365221 2.59%
ASPack v2.12 326947 2.32%
NullSoft_PiMP_SFX vna 284573 2.02%
Inno_Setup v2.0.1 186597 1.32%
Swizzor_test vna 150259 1.07%
NullSoft_NSIS Generic 131138 0.93%
ASPack vna 55783 0.40%

Semi-Yearly Statistics (Last 180-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 20278862 80.21%
UPX All_Versions 1319101 5.22%
NsPack All_Versions 1174670 4.65%
UPX V2.9-3.X 527170 2.09%
NullSoft_PiMP_SFX vna 443205 1.75%
ASPack v2.12 411882 1.63%
Inno_Setup v2.0.1 279400 1.11%
NullSoft_NSIS Generic 213874 0.85%
Swizzor_test vna 151215 0.60%
ASPack vna 72009 0.28%

Yearly Statistics (Last 12-Months)

Packer Count Percent
Allaple_Polymorphic_Packer vna 66678426 88.45%
UPX All_Versions 2645371 3.51%
UPX V2.9-3.X 1327376 1.76%
NsPack All_Versions 1190045 1.58%
NullSoft_PiMP_SFX vna 1117283 1.48%
Inno_Setup v2.0.1 597090 0.79%
ASPack v2.12 431283 0.57%
NullSoft_NSIS Generic 312868 0.42%
FSG V1.0-1.2 179837 0.24%
Unknown_33 152975 0.20%

↑ Contents

<< Sandbox Graphs | Statistics | Scans >>