Explanation

This page shows a different type of analysis done to each of the different binaries that we gather and have gathered in. Most malicious programs are packed with different technologies in the hopes of obfuscating their existing from different detection mechanisms, but to also increase the difficulty in either reverse engineering the binary, or to analyze what exact functions and purposes it may have. While there are many well used and semi-public packers in use, there is a trend for more private and custom packers being used to increase the effectiveness of their concealment.

The tool that we use to make the determination for identification is from Sigbuster by Toni Koivunen (toni <AT> teamfurry.com)/Teamfurry.com. Sigbuster is a cross-platform tool for detecting exe-packers.

Notes

There are minor discrepancies in the percentages, and this is an artifact from the numbers being compared to a set of five in the pie chart verses a set of ten in the table.

↑ Contents

Updates

The graph are updated once a day.

↑ Contents

Charts and Graphs

Daily Statistics (Last 24-hours)

Packer Count Percent
Allaple_Polymorphic_Packer vna 43664 39.87%
NsPack All_Versions 39603 36.16%
UPX V2.9-3.X 8070 7.37%
UPX All_Versions 6493 5.93%
NullSoft_PiMP_SFX vna 2929 2.67%
ASPack v2.12 2549 2.33%
Inno_Setup v2.0.1 2127 1.94%
FSG V1.0-1.2 2029 1.85%
eXPressor v1.3 454 0.41%
Swizzor_test vna 403 0.37%

Weekly Statistics (Last 7-Days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 325315 39.07%
NsPack All_Versions 211223 25.37%
UPX V2.9-3.X 97889 11.76%
UPX All_Versions 69084 8.30%
ASPack v2.12 30969 3.72%
Inno_Setup v2.0.1 22511 2.70%
FSG V1.0-1.2 17067 2.05%
NullSoft_PiMP_SFX vna 14933 1.79%
Swizzor_test vna 8909 1.07%
ASPack vna 6092 0.73%

Monthly Statistics (Last 30-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 2308197 49.05%
NsPack All_Versions 966611 20.54%
UPX V2.9-3.X 415714 8.83%
UPX All_Versions 405310 8.61%
ASPack v2.12 130859 2.78%
Inno_Setup v2.0.1 119618 2.54%
NullSoft_PiMP_SFX vna 75886 1.61%
Swizzor_test vna 43117 0.92%
Upack v0.39final 41836 0.89%
NullSoft_NSIS Generic 37227 0.79%

Bi-Monthly Statistics (Last 60-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 5384539 54.14%
NsPack All_Versions 1810792 18.21%
UPX All_Versions 829554 8.34%
UPX V2.9-3.X 717839 7.22%
Inno_Setup v2.0.1 232336 2.34%
ASPack v2.12 230814 2.32%
NullSoft_PiMP_SFX vna 182539 1.84%
Swizzor_test vna 80802 0.81%
NullSoft_NSIS Generic 74663 0.75%
Unknown_33 59903 0.60%

Tri-Monthly Statistics (Last 90-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 10768103 58.84%
NsPack All_Versions 3136193 17.14%
UPX All_Versions 1360497 7.43%
UPX V2.9-3.X 1163564 6.36%
Inno_Setup v2.0.1 348665 1.91%
ASPack v2.12 348631 1.91%
NullSoft_PiMP_SFX vna 296997 1.62%
Swizzor_test vna 112824 0.62%
NullSoft_NSIS Generic 109977 0.60%
ASPack vna 108956 0.60%

Semi-Yearly Statistics (Last 180-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 21016741 65.05%
NsPack All_Versions 4174338 12.92%
UPX All_Versions 2313482 7.16%
UPX V2.9-3.X 1527230 4.73%
ASPack v2.12 668195 2.07%
NullSoft_PiMP_SFX vna 585518 1.81%
Inno_Setup v2.0.1 539397 1.67%
Swizzor_test vna 260926 0.81%
NullSoft_NSIS Generic 235246 0.73%
ASPack vna 164696 0.51%

Yearly Statistics (Last 12-Months)

Packer Count Percent
Allaple_Polymorphic_Packer vna 71084569 84.01%
NsPack All_Versions 4182552 4.94%
UPX All_Versions 3011806 3.56%
UPX V2.9-3.X 2002123 2.37%
NullSoft_PiMP_SFX vna 970313 1.15%
ASPack v2.12 755459 0.89%
Inno_Setup v2.0.1 752908 0.89%
NullSoft_NSIS Generic 329182 0.39%
Swizzor_test vna 262719 0.31%
ASPack vna 210947 0.25%

↑ Contents

<< Sandbox Graphs | Statistics | Scans >>