Explanation
This page shows a different type of analysis done to each of the different binaries that we gather and have gathered in. Most malicious programs are packed with different technologies in the hopes of obfuscating their existing from different detection mechanisms, but to also increase the difficulty in either reverse engineering the binary, or to analyze what exact functions and purposes it may have. While there are many well used and semi-public packers in use, there is a trend for more private and custom packers being used to increase the effectiveness of their concealment.
The tool that we use to make the determination for identification is from Sigbuster by Toni Koivunen (toni <AT> teamfurry.com)/Teamfurry.com. Sigbuster is a cross-platform tool for detecting exe-packers.
Notes
There are minor discrepancies in the percentages, and this is an artifact from the numbers being compared to a set of five in the pie chart verses a set of ten in the table.
↑ Contents
Updates
The graph are updated once a day.
↑ Contents
Charts and Graphs
Daily Statistics (Last 24-hours)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 4873
| 45.46%
|
| NullSoft_NSIS Generic
| 1116
| 10.41%
|
| NullSoft_PiMP_SFX vna
| 1070
| 9.98%
|
| Xtreme_Protector v1.05
| 785
| 7.32%
|
| UPX V2.9-3.X
| 462
| 4.31%
|
| Upack v0.24~v0.28alpha
| 444
| 4.14%
|
| InstallShield v2000
| 377
| 3.52%
|
| Unknown_33
| 214
| 2.00%
|
| FSG V1.31
| 196
| 1.83%
|
| PE_Compact v2.X
| 189
| 1.76%
|
Weekly Statistics (Last 7-Days)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 96312
| 37.81%
|
| MEW v11SEv1.2
| 63776
| 25.04%
|
| NullSoft_PiMP_SFX vna
| 18259
| 7.17%
|
| Unknown_33
| 16800
| 6.60%
|
| NullSoft_NSIS Generic
| 11238
| 4.41%
|
| UPX V2.9-3.X
| 8212
| 3.22%
|
| Inno_Setup v2.0.1
| 6899
| 2.71%
|
| NsPack All_Versions
| 5616
| 2.20%
|
| Upack v0.24~v0.28alpha
| 3918
| 1.54%
|
| InstallShield v2000
| 3193
| 1.25%
|
Monthly Statistics (Last 30-days)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 329952
| 45.69%
|
| NullSoft_PiMP_SFX vna
| 72192
| 10.00%
|
| MEW v11SEv1.2
| 65703
| 9.10%
|
| UPX V2.9-3.X
| 38332
| 5.31%
|
| NullSoft_NSIS Generic
| 24907
| 3.45%
|
| Inno_Setup v2.0.1
| 23655
| 3.28%
|
| Allaple_Polymorphic_Packer vna
| 23587
| 3.27%
|
| Unknown_33
| 21516
| 2.98%
|
| NsPack All_Versions
| 13273
| 1.84%
|
| Xtreme_Protector v1.05
| 9790
| 1.36%
|
Bi-Monthly Statistics (Last 60-days)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 1094396
| 46.24%
|
| NullSoft_PiMP_SFX vna
| 203647
| 8.60%
|
| UPX V2.9-3.X
| 102420
| 4.33%
|
| Swizzor_test vna
| 101408
| 4.28%
|
| Inno_Setup v2.0.1
| 69527
| 2.94%
|
| MEW v11SEv1.2
| 68825
| 2.91%
|
| NullSoft_NSIS Generic
| 68743
| 2.90%
|
| NsPack All_Versions
| 57265
| 2.42%
|
| Allaple_Polymorphic_Packer vna
| 54104
| 2.29%
|
| InstallShield v2000
| 36535
| 1.54%
|
Tri-Monthly Statistics (Last 90-days)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 1560339
| 45.64%
|
| NullSoft_PiMP_SFX vna
| 256118
| 7.49%
|
| UPX V2.9-3.X
| 148588
| 4.35%
|
| Swizzor_test vna
| 142109
| 4.16%
|
| NsPack All_Versions
| 93940
| 2.75%
|
| Inno_Setup v2.0.1
| 92198
| 2.70%
|
| Upack v0.28-0.39(relocatedimagebase-Delphi,.NET,DLLorsomethingelse:)
| 82603
| 2.42%
|
| NullSoft_NSIS Generic
| 79690
| 2.33%
|
| MEW v11SEv1.2
| 72830
| 2.13%
|
| Allaple_Polymorphic_Packer vna
| 70242
| 2.05%
|
Semi-Yearly Statistics (Last 180-days)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 2190103
| 41.40%
|
| ASPack v2.12
| 700735
| 13.25%
|
| NullSoft_PiMP_SFX vna
| 353409
| 6.68%
|
| UPX V2.9-3.X
| 212467
| 4.02%
|
| Swizzor_test vna
| 146625
| 2.77%
|
| Allaple_Polymorphic_Packer vna
| 144292
| 2.73%
|
| NsPack All_Versions
| 131324
| 2.48%
|
| Inno_Setup v2.0.1
| 116531
| 2.20%
|
| NullSoft_NSIS Generic
| 109339
| 2.07%
|
| Upack v0.28-0.39(relocatedimagebase-Delphi,.NET,DLLorsomethingelse:)
| 95151
| 1.80%
|
Yearly Statistics (Last 12-Months)
| Packer
| Count
| Percent
|
| UPX All_Versions
| 4795896
| 49.55%
|
| ASPack v2.12
| 783274
| 8.09%
|
| NullSoft_PiMP_SFX vna
| 769448
| 7.95%
|
| UPX V2.9-3.X
| 376321
| 3.89%
|
| Allaple_Polymorphic_Packer vna
| 338966
| 3.50%
|
| NsPack All_Versions
| 198739
| 2.05%
|
| InstallShield v2000
| 192226
| 1.99%
|
| Swizzor_test vna
| 184809
| 1.91%
|
| Upack v0.28-0.39(relocatedimagebase-Delphi,.NET,DLLorsomethingelse:)
| 174065
| 1.80%
|
| NullSoft_NSIS Generic
| 167767
| 1.73%
|
↑ Contents
<< Sandbox Graphs | Statistics | Scans >>
