Cryptographic function detection in obfuscated binaries via bit-precise symbolic loop mapping ieeexplore.ieee.org

(May 2017)

Detecting packed executable file: Supervised or anomaly detection method? ieeexplore.ieee.org

(August 2016)

OEPdet ieeexplore.ieee.org

Automated original-entry-point detector.

Survey on malware evasion techniques: State of the art and challenges ieeexplore.ieee.org

(February 2012)

FatELF: Universal binaries for Linux (HALTED) icculus.org

aPLib ibsensoftware.com

Compression library based on the algorithm used in aPACK.

Uunp (IDA Pro plugin) hex-rays.com

IDA Pro debugger plug-in module automating the analysis and unpacking of packed binaries.

GetTyp helger.com

File format detection program for DOS based on special strings and byte code.

PExplorer heaventools.com

Most feature-packed program for inspecting the inner workings of your own software, and more importantly, third party Windows applications and libraries for which you do not have source code.

Building high-quality datasets of packed executables - Enhancing static detection models via curated packed binary… hdl.handle.net

(August 2025) :star:

Design and implementation of a modular executable packer - Experimenting with packing techniques and static detection hdl.handle.net

(June 2025) :star:

Incremental clustering of malware packers using features based on transformed CFG hal.science

(November 2022) :star:

Dynamic binary instrumentation for deobfuscation and unpacking hal.inria.fr

(November 2009)

NTPacker hacking-software-free-download.blogspot.com

PE file packer relying on aPlib for compression and/or XOR for encryption.

DexGuard guardsquare.com

Android app obfuscation & security protocols for mobile app protection.

Implementing your own generic unpacker gsec.hitb.org

Binutils gnu.org

The GNU Binutils are a collection of binary tools for Linux (it namely includes Readelf).

CauseWay Compressor gitlab.com

DOS EXE compressor.

Pefeats github.com

Utility for extracting 119 features from a PE file for use with machine learning algorithms.

Hyperion github.com

MalwareSamples github.com

Bringing you the best of the worst files on the Internet.

DIE github.com

Detect It Easy ; Program for determining types of files.

Ezuri github.com

A Simple Linux ELF Runtime Crypter.

Amber github.com

Position-independent(reflective) PE loader that enables in-memory execution of native PE files(EXE, DLL, SYS).

Morphine github.com

Application for PE files encryption.

GzExe git.savannah.gnu.org

Utility that allows to compress executables as a shell script.

elf (FreeBSD manual pages) freebsd.org

a.out (FreeBSD manual pages) freebsd.org

Tuts 4 you - UnPackMe (.NET) forum.tuts4you.com

Tuts 4 you | unpackme forum.tuts4you.com

EXETools forum.exetools.com

Forum for reverse engineering and executale packing related topics.

Android packers: Separating from the pack fortiguard.com

Advanced preprocessing of binary executable files and its usage in retargetable decompilation fit.vut.cz

(December 2014)

Preprocessing of binary executable files towards retargetable decompilation fit.vut.cz

(July 2013)

Pack-Ice files.dhs.nu

Fire-Pack files.dhs.nu

Making our own executable packer fasterthanli.me

Language 2000 farrokhi.net

Ultimate compiler detection utility.

Kkrunchy farbrausch.de

Small exe packer primarily meant for 64k intros.

Hyperion: Implementation of a PE-Crypter exploit-db.com

EXE Guarder exeicon.com

Licensing tool for PE files allowing to compress and specify a password notice.

EXECryptor execryptor.freedownloadscenter.com

Protects EXE programs from reverse engineering, analysis, modifications and cracking.

EXE Bundle exebundle.software.informer.com

Bundles application files into a single PE32 file.

Exe32Pack exe32pack.apponic.com

Compresses Win32 EXEs, DLLs, etc and dynamically expands them upon execution.

When malware is packing heat eurecom.fr

Modern Linux malware exposed eurecom.fr

(June 2018)

EtherUnpack ether.gtisc.gatech.edu

Precision universal automated unpacker (successor of PolyUnpack).

Enigma Virtual Box enigmaprotector.com

Application virtualization system for Windows.

Enigma Protector enigmaprotector.com

Professional system for executable files licensing and protection.

Comparison of executable file formats en.wikipedia.org