Explanation
This page shows a different type of analysis done to each of the different binaries that we gather and have gathered in. Most malicious programs are packed with different technologies in the hopes of obfuscating their existing from different detection mechanisms, but to also increase the difficulty in either reverse engineering the binary, or to analyze what exact functions and purposes it may have. While there are many well used and semi-public packers in use, there is a trend for more private and custom packers being used to increase the effectiveness of their concealment.
The tool that we use to make the determination for identification is from Sigbuster by Toni Koivunen (toni <AT> teamfurry.com)/Teamfurry.com. Sigbuster is a cross-platform tool for detecting exe-packers.
Notes
There are minor discrepancies in the percentages, and this is an artifact from the numbers being compared to a set of five in the pie chart verses a set of ten in the table.
↑ Contents
Updates
The graph are updated once a day.
↑ Contents
Charts and Graphs
Daily Statistics (Last 24-hours)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 342
| 57.29%
|
| NullSoft_NSIS Generic
| 197
| 33.00%
|
| ASPack v2.12
| 31
| 5.19%
|
| ASProtect v1.2x-1.3x
| 7
| 1.17%
|
| Crunch_PE vna
| 6
| 1.01%
|
| Crypto_Lock v2.02(Eng)
| 3
| 0.50%
|
| Swizzor_test vna
| 2
| 0.34%
|
| unknown_5
| 2
| 0.34%
|
| Crunch_PE v1.0.x.x
| 2
| 0.34%
|
| Alloy v4.x
| 1
| 0.17%
|
Weekly Statistics (Last 7-Days)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 73180
| 75.08%
|
| NullSoft_NSIS Generic
| 11636
| 11.94%
|
| ASPack v2.1
| 2031
| 2.08%
|
| ASPack v2.12
| 1072
| 1.10%
|
| Swizzor_test vna
| 906
| 0.93%
|
| PE_Compact v2.X
| 692
| 0.71%
|
| Allaple_Polymorphic_Packer vna
| 625
| 0.64%
|
| NullSoft_PiMP_SFX vna
| 583
| 0.60%
|
| UPX V2.9-3.X
| 555
| 0.57%
|
| NsPack All_Versions
| 480
| 0.49%
|
Monthly Statistics (Last 30-days)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 364772
| 70.13%
|
| NullSoft_NSIS Generic
| 78611
| 15.11%
|
| tElock v0.98
| 29673
| 5.71%
|
| ASPack v2.12
| 4188
| 0.81%
|
| Allaple_Polymorphic_Packer vna
| 3837
| 0.74%
|
| Swizzor_test vna
| 3639
| 0.70%
|
| ASPack v2.1
| 3625
| 0.70%
|
| UPX V2.9-3.X
| 3039
| 0.58%
|
| NullSoft_PiMP_SFX vna
| 2876
| 0.55%
|
| PE_Compact v2.X
| 2435
| 0.47%
|
Bi-Monthly Statistics (Last 60-days)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 860124
| 65.56%
|
| NullSoft_NSIS Generic
| 167267
| 12.75%
|
| ASPack v2.1
| 105086
| 8.01%
|
| tElock v0.98
| 46085
| 3.51%
|
| Allaple_Polymorphic_Packer vna
| 23187
| 1.77%
|
| ASPack v2.12
| 12517
| 0.95%
|
| Swizzor_test vna
| 11421
| 0.87%
|
| UPX V2.9-3.X
| 7787
| 0.59%
|
| PE_Compact v2.X
| 6940
| 0.53%
|
| NullSoft_PiMP_SFX vna
| 6121
| 0.47%
|
Tri-Monthly Statistics (Last 90-days)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 1238481
| 66.21%
|
| NullSoft_NSIS Generic
| 235611
| 12.60%
|
| ASPack v2.1
| 121445
| 6.49%
|
| Allaple_Polymorphic_Packer vna
| 56176
| 3.00%
|
| tElock v0.98
| 46645
| 2.49%
|
| PE_Compact V2.X
| 30210
| 1.62%
|
| Swizzor_test vna
| 20351
| 1.09%
|
| ASPack v2.12
| 15271
| 0.82%
|
| UPX V2.9-3.X
| 10436
| 0.56%
|
| NullSoft_PiMP_SFX vna
| 8266
| 0.44%
|
Semi-Yearly Statistics (Last 180-days)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 1921427
| 59.05%
|
| NullSoft_NSIS Generic
| 358893
| 11.03%
|
| ASPack v2.1
| 320722
| 9.86%
|
| Allaple_Polymorphic_Packer vna
| 135869
| 4.18%
|
| PE_Compact v2.X
| 72378
| 2.22%
|
| Swizzor_test vna
| 70374
| 2.16%
|
| UPX V2.9-3.X
| 58542
| 1.80%
|
| tElock v0.98
| 48085
| 1.48%
|
| ASPack v2.12
| 38090
| 1.17%
|
| NullSoft_PiMP_SFX vna
| 24435
| 0.75%
|
Yearly Statistics (Last 12-Months)
| Packer
| Count
| Percent
|
| Allaple_Polymorphic_Packer vna
| 26634587
| 47.36%
|
| UPX All_Versions
| 11881379
| 21.13%
|
| MEW v11SEv1.2
| 10662456
| 18.96%
|
| ASPack v2.1
| 3323465
| 5.91%
|
| FSG V1.3x
| 1266879
| 2.25%
|
| ASPack v2.12
| 429381
| 0.76%
|
| NullSoft_NSIS Generic
| 414785
| 0.74%
|
| PE_Compact v2.X
| 183402
| 0.33%
|
| Armadillo v1.xx-v2.xx
| 141260
| 0.25%
|
| Swizzor_test vna
| 108634
| 0.19%
|
↑ Contents
<< Sandbox Graphs | Statistics | Scans >>
