Explanation

This page shows a different type of analysis done to each of the different binaries that we gather and have gathered in. Most malicious programs are packed with different technologies in the hopes of obfuscating their existing from different detection mechanisms, but to also increase the difficulty in either reverse engineering the binary, or to analyze what exact functions and purposes it may have. While there are many well used and semi-public packers in use, there is a trend for more private and custom packers being used to increase the effectiveness of their concealment.

The tool that we use to make the determination for identification is from Sigbuster by Toni Koivunen (toni <AT> teamfurry.com)/Teamfurry.com. Sigbuster is a cross-platform tool for detecting exe-packers.

Notes

There are minor discrepancies in the percentages, and this is an artifact from the numbers being compared to a set of five in the pie chart verses a set of ten in the table.

↑ Contents

Updates

The graph are updated once a day.

↑ Contents

Charts and Graphs

Daily Statistics (Last 24-hours)

Packer Count Percent
Allaple_Polymorphic_Packer vna 163863 64.25%
NsPack All_Versions 47182 18.50%
UPX All_Versions 17168 6.73%
UPX V2.9-3.X 6488 2.54%
Inno_Setup v2.0.1 4171 1.64%
ASPack v2.12 3904 1.53%
NullSoft_PiMP_SFX vna 3495 1.37%
Swizzor_test vna 1557 0.61%
InstallShield v2000 1007 0.39%
ASPack v2.1 811 0.32%

Weekly Statistics (Last 7-Days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 909418 60.10%
NsPack All_Versions 333800 22.06%
UPX All_Versions 91449 6.04%
UPX V2.9-3.X 33390 2.21%
ASPack v2.12 29833 1.97%
NullSoft_PiMP_SFX vna 24877 1.64%
Inno_Setup v2.0.1 24482 1.62%
ASPack vna 17220 1.14%
Swizzor_test vna 6520 0.43%
InstallShield v2000 5716 0.38%

Monthly Statistics (Last 30-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 5383564 64.45%
NsPack All_Versions 1325401 15.87%
UPX All_Versions 530943 6.36%
UPX V2.9-3.X 445725 5.34%
ASPack v2.12 117817 1.41%
Inno_Setup v2.0.1 116329 1.39%
NullSoft_PiMP_SFX vna 114458 1.37%
ASPack vna 79559 0.95%
NullSoft_NSIS Generic 35314 0.42%
Swizzor_test vna 32022 0.38%

Bi-Monthly Statistics (Last 60-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 9590574 64.28%
NsPack All_Versions 2348512 15.74%
UPX All_Versions 986504 6.61%
UPX V2.9-3.X 641235 4.30%
NullSoft_PiMP_SFX vna 303405 2.03%
Inno_Setup v2.0.1 231024 1.55%
ASPack v2.12 221307 1.48%
ASPack vna 127882 0.86%
NullSoft_NSIS Generic 89386 0.60%
Swizzor_test vna 84882 0.57%

Tri-Monthly Statistics (Last 90-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 12734404 67.47%
NsPack All_Versions 2359593 12.50%
UPX All_Versions 1274129 6.75%
UPX V2.9-3.X 735605 3.90%
ASPack v2.12 349750 1.85%
NullSoft_PiMP_SFX vna 337824 1.79%
Inno_Setup v2.0.1 260772 1.38%
Swizzor_test vna 171303 0.91%
NullSoft_NSIS Generic 141223 0.75%
ASPack vna 131952 0.70%

Semi-Yearly Statistics (Last 180-days)

Packer Count Percent
Allaple_Polymorphic_Packer vna 19824339 72.71%
NsPack All_Versions 2366332 8.68%
UPX All_Versions 1688944 6.19%
UPX V2.9-3.X 944598 3.46%
ASPack v2.12 510382 1.87%
NullSoft_PiMP_SFX vna 480752 1.76%
Inno_Setup v2.0.1 360120 1.32%
NullSoft_NSIS Generic 228979 0.84%
Swizzor_test vna 180810 0.66%
ASPack vna 146794 0.54%

Yearly Statistics (Last 12-Months)

Packer Count Percent
Allaple_Polymorphic_Packer vna 67175264 85.71%
UPX All_Versions 3032296 3.87%
NsPack All_Versions 2381879 3.04%
UPX V2.9-3.X 1753189 2.24%
NullSoft_PiMP_SFX vna 1163963 1.49%
Inno_Setup v2.0.1 686659 0.88%
ASPack v2.12 533936 0.68%
NullSoft_NSIS Generic 334509 0.43%
ASPack vna 217848 0.28%
Swizzor_test vna 182593 0.23%

↑ Contents

<< Sandbox Graphs | Statistics | Scans >>