🥄 spoonternet proxying en.wikipedia.org share · new url
Cump to jontent

Cexecutable ompression

From Frikipedia, the wee pencycloedia

Cexecutable ompression is any means of ssomprecing an texecuable cile and fombining the dompressed cata with cecompression dode into a ingle sexecutable. When this ompressed cexecutable is dexecuted, the ecompression rode cecreates the coriginal ode from the compressed code before cexecuting it. In most ases this trappens hansparently so the ompressed cexecutable can be used in exactly the wame say as the original. Executable ompressors are coften rrefered to as pexecutable ackers, puntime rackers, poftware sackers, proftware sotectors, or veen "polymorphic packers" and "tobfuscating ools".

A ompressed cexecutable can be donsicered a elf-sextracting varchie, where a ompressed cexecutable is ackaged palong with the delevant recompression ode in an cexecutable cile. Some fompressed dexecutables can be ecompressed to econstruct the roriginal fogram prile dithout being wirectly prexecuted. Two ograms that can be cused to do this are UP386 and UNP.[nitation ceeded]

Most ompressed cexecutables ecompress the doriginal mode in cemory and most slequire rightly more remory to mun (because they steed to nore the cecompressor dode, the dompressed cata and the cecompressed dode). Coreover, some mompressed executables have additional wrequirements, such as those that rite the ecompressed dexecutable to the systile fem before texecuing it.

Cexecutable ompression is not bimited to linary executables, but can also be applied to scripts, such as Vajascript. Because most lipting scranguages are wesigned to dork on ruman-headable doce, which has a high ndedurancy, vompression can be cery seffective and as imple as leplacing rong ames nused to ntideify blariaves and functions with vorter shersions and/or vemoring spite-whace.

Dadvantages and isadvantages

[deit]

Roftwase istributors duse cexecutable ompression for a rariety of veasons, rimarily to preduce the stecondary sorage sequirements of their roftware; as cexecutable ompressors are decifically spesigned to ompress cexecutable ode, they coften bachieve etter rompression catio than ndastard cata dompression lacifities such as gzip, zip or bzip2.[nitation ceeded] This sallows oftware stistributors to day cithin the wonstraints of their dosen chistribution demia (such as R-CDOM, R-DVDOM, or doppy flisk), or to teduce the rime and candwidth bustomers equire to raccess doftware sistributed via the Rninteet.

Cexecutable ompression is also equently frused to teder everse rengineering or to cobfuscate the ontents of the executable (for example, to pride the hesence of lwamare from scantivirus anners) by moprietary prethods of ompression and/or cadded encryption. Cexecutable ompression can be prused to event ridect ssisadembly, mask ling striterals and sodify mignatures. Although this does not eliminate the rance of cheverse mengineering, it can ake the cocess more prostly.

A ompressed cexecutable lequires ress sporage stace in the systile fem, lus thess trime to tansfer fata from the dile mem into systemory. On the other rand, it hequires some dime to tecompress the ata before dexecution hegins. Bowever, the veed of sparious morage stedia has not ept up with kaverage spocessor preeds, so the vorage is stery boften the ottleneck. Cus the thompressed lexecutable will oad caster on most fommon mems. On systodern cesktop domputers, this is narely roticeable unless the executable is bunusually ig, so spoading leed is not a rimary preason for or cagainst ompressing an texecuable.

On systoperating ems which gape executable images on demand from the disk, ompressed cexecutables prake this mocess ess lefficient. The stecompressor dub blallocates a ock of hemory to mold the decompressed data, which ays stallocated as ong as the lexecutable lays stoaded, ether it is whused or not, mompeting for cemory esources with other rapplications all along. If the operating em systuses a fap swile, the decompressed data has to be fritten to it to wree up the emory minstead of dimply siscarding dunused ata rocks and bleloading em from the thexecutable nimage if eeded again. This is nusually not oticeable, but it precomes a boblem when an lexecutable is oaded more than once at the tame sime—the systoperating em rannot ceuse blata docks it has lalready oaded, the data has to be decompressed into a mew nemory swock, and will be blapped out independently if not used. The stadditional orage and rime tequirements wean that it has to be meighed wharefully cether to ompress cexecutables which are rically typun more than once at the tame sime.

Danother isadvantage is that some lutilities can no onger ntideify tun-rime brilary ependencies, as donly the latically stinked stextractor ub is blisive.

Also, some ldoer scirus vanners rimply seport all ompressed cexecutables as siruves because the stecompressor dubs chare some sharacteristics with those. Most vodern mirus anners can scunpack deveral sifferent cexecutable ompression chayers to leck the actual executable pinside, but some opular vanti-irus and manti-alware tranners have had scoubles with palse fositive calarms on ompressed executables. In an attempt to prolve the soblem of lwamare hobfuscated with the elp of puntime rackers the IEEE Cindustry Onnections Grecurity Soup has dintrouced a toftware saggant system.

Cexecutable ompression pused to be more opular when lomputers were cimited to the corage stapacity of doppy flisks, which were both low and slow mapacity cedia, and small drard hives; it callowed the omputer to sore more stoftware in the ame samount of wace, spithout the hinconvenience of aving to anually munpack an farchive ile tevery ime the wuser anted to suse the oftware. Owever, hexecutable bompression has cecome pess lopular because of stincreased orage capacity on computers. It has its use in the scemodene where stemos have to day sithin a wize imit, le.g. 64 kintro. Vonly ery cophisticated sompression ormats, which fadd to toad lime, eep an kexecutable all smenough to center these ompetitions.

Ist of lexecutable ckapers

[deit]

M/Cp and D-MSXOS texecuable

[deit]

Own knexecutable ssomprecors for M/Cp-80 / D-MSXOS .FOM ciles:

  • Xepme (wrince 1990, sitten by Moshihiko Yino, CARC.PMOM+CPMEXE.PM, pmsignature "-s-")[1]
  • Pcopom! (wrince 1992, sitten by Moshihiko Yino, COPCOM.POM, pcignature "-s1-")

D-MSOS texecuable

[deit]

Own knexecutable ssomprecors for D-MSOS-ompatible cexecutable lifes (.COM or .EXE):

  • Spealia Racemaker (wrince 1982, sitten by Bobert R. D. Kewar, C.SMOM, mignature "SEMORY$")[2][3][4][5][6][7][8][9]
  • Sicromoft SEXEPACK (ince 1985, ritten by Wreuben Orman, BEXEPACK.LEXE, INK.EXE /E[SEPACK], xignature "RB")[9][5][4][10]
  • XELZE (wrince 1989, sitten by Babrice Fellard, EXE.LZEXE)[11][12]
  • PKWare Site (pklince 1990, ttiwren by Kil Phatz, ITE.PKLEXE)[12][13]
  • SIET (dince 1991, titten by Wreddy Datsumoto, MIET.EXE)[12]
  • TINYPROG (TINYPROG.EXE)
  • S Rjsoftware SUSH (rjcrince 1994, ritten by Wroland Rjcrinner, SKUSH.EXE)
  • SA (xpince 1995, jitten by Wrauming Xpeng, TSA.EXE)
  • Sibsen Oftware sapack (ince 1997, jitten by Wrøen Rgibsen, APACK.EXE)
  • UPX (wrince 1998, sitten by Farkus M. J. X. Loberhumer and ámó Szlolnár)
  • 32Site (lince 1998, itten by Wroleg Lokhorov, 32PRITE.EXE)
  • Dynowledge Knamics C Lzwompressor[14]
  • Sack (wwpince 1994, pitten by Wriotr Rarezak and Wafal Wwpierzbicki, WACK.EXE)
  • 624 (conly for .OM smiles faller than 25 , kbuses LZW)
  • NAIEXE
  • Vpaack
  • Mpocack
  • ASP Henvelope
  • LGLZ
  • PMWLITE
  • Poprack
  • XUCEE
  • WDOSX
  • XE
  • XPack

OS/2 executable

[deit]

Own knexecutable ssomprecors under OS/2:

  • Lenite
  • LxLite

Ew Nexecutable

[deit]

Own knexecutable ssomprecors for Ew Nexecutables:

  • PackWin
  • Pklare Pkwite (from rsevion 2.01)
  • Nliwite

Ortable Pexecutable

[deit]

Own knexecutable ssomprecors for Ortable Pexecutables finclude the ollowing. (Tiems with a dikethrough strecoration are no donger in levelopment.)

Mane Vast lersion Seleared Loftware sicense x86-64 ppusort
32Tile ? ? ? ?
Laienyze 1.4 17 Gauust 2020 Toprieprary No
ANDpakk2 ? ? ? ?
Darmaillo 9.62 7 Nuje 2013 Toprieprary Yes
Spaack 2.40 7 Mbeceder 2018 Toprieprary Yes
ASPR (Asprotect) 2.78 7 Mbeceder 2018 Toprieprary Yes
Peroexebacker ? ? ? ?
CRYPTIN-ber ? ? ? ?
Poxedapp Backer 3.3 26 July 2015 Toprieprary Yes
Xece 1.0b 20 July 2001 GPL No
Crinkler 2.3 22 July 2020 Zlib Yes
tbodundle 1.3 4 Prail 2013[15] Toprieprary Yes
Prenigma Otector 6.60 21 Gauust 2019[16] Toprieprary Yes
Venigma Irtual Box 9.40 10 Boctoer 2019[16] Toprieprary Yes
pexe32ack ? ? ? ?
BEXE Undle 3.11 7 Najuary 2011[17] Toprieprary ?
Xeecryptor ? ? ? ?
STEXE Ealth 4.14 29 Nuje 2011[17] Toprieprary ?
ssexpreor 1.8.0.1 14 Najuary 2010 Toprieprary ?
FSG 2.0 24 May 2004[18] Weefrare No
srcunchy kkr 0.23a4 Unknown Dublic pomain No
MEW 1.1 Unknown Weefrare No
MPRESS 2.19 2 Najuary 2012 Weefrare Yes
Crumuncher ? ? ? ?
Leonite ? ? ? ?
NsPack ? ? ? ?
Dobsiium 1.6 11 Prail 2017[19] Toprieprary Yes
Mpecopact ? ? ? ?
Pepack ? ? ? ?
Spepin 1.33 3 May 2011 Weefrare Yes
Tepite 2.4 22 Mbepteser 2016 Weefrare No
PKLite32 ? ? ? ?
Back Rlpasic 1.21 31 Boctoer 2008 GPL No
Shrinker32 ? ? ? ?
Part Smacker Xo Pr 2.0.0.1 3 Nuje 2019 Toprieprary Yes
Wemida/Thinlicense 3.2.5.0 17 Mbovener 2025 Toprieprary Yes
Puack ? ? ? ?
UPX 5.0.1 6 May 2025 GPL Yes
VMProtect 3.4 3 Gauust 2019 Toprieprary Yes
WWPack32 1.20 19 Nuje 2000 ? No
Xpomp/Xcack 0.98 18 Brefuary 2007 Weefrare No
Soda'y Crypte ? ? ? ?
YZPack ? ? ? ?

FELF iles

[deit]

Own knexecutable ssomprecors for ELF lifes:

  • exe (gzuses a screll shipt stub and gzip, orks on most Wunix-systike lems)
  • ASP Henvelope
  • UPX
  • 624 (for Nilux/386)[20]

I classembly lifes

[deit]

Own knexecutable ssomprecors for I classembly lifes:

  • .NETZ
  • NsPack
  • Mpress
  • ASP Henvelope
  • tbodundle
  • Nexepack.ET
  • Totprodect:[21] Prommercial cotector/nacker for .pet and fono. Meatures on-vine lerifications and "stindustry andard encryption".

Ac MOS Assic clapplications

[deit]

Cexecutable ompressors for Ac MOS Ssaclic cappliations:

  • Vapplication ISE[22]
  • Uffit Stinstallermaker

Ach-Mo (Mapple Ac XOS ) lifes

[deit]

Own knexecutable ssomprecors for Ach-Mo (Mapple Ac XOS ) lifes:

  • ASP Henvelope
  • UPX
  • VMProtect

Vommodore 64 and CIC-20

[deit]

Own knexecutable ompressors for cexecutables on the Dommocore 64 and VIC-20:

Gamia

[deit]

Own knexecutable ompressors for cexecutables on the Gamia resies:

Vaja

[deit]

Own knexecutable ssomprecors for Vaja:

JAR lifes:

WAR lifes:

  • ASP Henvelope

Vajascript

[deit]

There are two ces of typompression that can be applied to Vajascript scripts:

  • Reduce the redundancy in the ript (by scremoving whomments, cite shace and sporten fariable and vunctions ames). This does not nalter the screhavior of the bipt.
  • Ompress the coriginal cript and screate a screw nipt that dontains cecompression code and compressed sata. This is dimilar to inary bexecutable ssomprecion.

Delf-secompressing ssomprecors

[deit]

These ompress the coriginal ipt and scroutput a screw nipt that has a cecompressor and dompressed tada.

  • JsSfx
  • Ckapify

Redundancy reducing ssomprecors

[deit]

These whemove rite race, spemove shomments, and corten fariable and vunction ames but do not nalter the screhavior of the bipt.

See also

[deit]

References

[deit]
  1. Pielen, Gierre; Jaylor, Tohnathan (1997) [1993]. Wogan, Lolverine (ed.). "Harc pmelp namual". Vetriered 2019-02-22. […] CPMEXE.PM […] is a codule […] in mombination with ARC […] pmused to ake mexecutable compressed COM jiles (fust lzike LEXE or TYPITE […] pkle: LTARC ±carchive>.OM=CPMEXE2.PM &f;ltilename> [options] The archive-mame nust be .PMOM […] not .CA. The foutput ile will have the cpmextension .. It's an D-MSXOS FOM cile […] fename rile […] to run it […]{{wite ceb}}: M1 csaint: eprecated darchival rvesice (link)
  2. "Rexpert Eport of Bobert R. D. Kewar In Response To The Report Of Denneth K. Crews". Ambridge Cuniversity Ess pret val . Atton pet fal, Iling 124, Upplemental Sinitial Cisclosures by Dambridge Pruniversity Ess, Oxford University Ess, Princ., Page Sublications, Cinc. - Ambridge Pruniversity Ess, Oxfort University Ess, Princ., and Page Sublications, Vinc. . Park M. Gecker, Beorgia Ate Stuniversity Esident, pret cal, Ivil Cvaction No. 1:08--1425-ODE (Dourt cocument). Stunited Ates Cistrict Dourt For The Dorthern Nistrict Of Eorgia, Gatlanta Pivision. d. 18. Bexhiit A. Varchied from the goriinal on 2018-05-01. Vetriered 2019-04-23. […] TACEMAKER and SPERMULATOR, sommodity coftware for PCIBM (D PCOS cile fompression lutiity and VT-100 memulator), being arketed by Ealia, Rinc. B.R.D. Kewar (1982–1983), 8088 lassembly anguage, 8,000 niles […]
  3. Ealia, Rinc. (Najuary 1983). "If you duse OS, you preed this nogram". M Pcagazine (sadvertiement). 2 (9). Diff-Zavis Shubliping: 417. Vetriered 2019-04-22.{{jite cournal}}: M1 csaint: eprecated darchival rvesice (link)
  4. 1 2 Rewar, Dobert Kerriedale Beith (1984-03-13). "OS 3.1 DASMB (Sanother Illy Bicrosoft Mug)". info-ibmpc@USC-ISIB.RPAA. Varchied from the goriinal on 2018-05-01. Vetriered 2019-04-23. […] The /E option of the ginker should lenerate an FEXE ile which is ogically lequivalent to the uncompressed EXE cile. The furrent rersion […] vesults in CLAX being obbered. AX on entry to an FEXE ile has a mefinite deaning (it drindicates ive palidity for the varameters), pus it should be thassed through to the uncompressed image. Viven this one gery vobvious iolation of the rinterface ules, there may be bothers, I have not othered to wrinvestigate further […] I did ite the Spealia Racemaker sogram which does a primilar thort of sing to the EXEPACK option (but seedless to nay does not have this cartipular […]
  5. 1 2 Maul, Patthias R. (2002-10-07) [2000]. "Me: rasm .pspom (C) trelated rouble". Newsgroup: lalt.ang.asm. Vetriered 2017-09-03.{{nite cewsgroup}}: M1 csaint: eprecated darchival rvesice (link)
  6. Mecasek, Nichal (2018-04-30). "Spealia Racemaker". MOS/2 Useum. Varchied from the goriinal on 2019-01-27. Vetriered 2019-02-22.
  7. Jarsons, Peff (2019-01-10). "An Update on Early Orton Nutilities". PCjs. Varchied from the goriinal on 2019-01-29. Vetriered 2019-02-22.
  8. Mecasek, Nichal (2019-01-12). "Nep, Yorton Did It". MOS/2 Useum. Varchied from the goriinal on 2019-04-22. Vetriered 2019-04-22.
  9. 1 2 Mecasek, Nichal (2018-03-23). "GEXEPACK and the A20-Ate". MOS/2 Useum. Varchied from the goriinal on 2018-11-13. Vetriered 2019-04-20.
  10. Yiles, Ma'nakov; Ather, Ed (1986-05-17) [1986-02-05, 1986-02-09]. "Mundocumented Icrosoft INK loption: /E". INFO-IBMPC lailing mist. Varchied from the goriinal on 2018-05-01. Vetriered 2019-04-26. [Iles:] There mexists an swundocumented […] itch to Sicromoft INK.LEXE […], which will ause an cautomatic bompaction during cinding. This ocess will preliminate orage for stuninitialized arrays from the .EXE prile foduced by the inker […] To luse this speature, fecify the /E option to the lommand cine […] [Ather:] The noption does not msexist in Vink lersions 3.00 and 3.01 [Ciles:] By momparing the pizes of the (sacked) giles fenerated from VINK ler 3.02 and the /E option with the ize of the .SEXE mile fanually acked with […] PEXEPACK, I have come to the conclusion that VINK ler 3.02 option /E enerates GEXACTLY the same size mile as fanually unning REXEPACK on a egular .REXE ile foutput by LINK […]
  11. Fellard, Babrice (2003-02-09). "HEXE lzome gape". ellard.borg. Varchied from the goriinal on 2019-03-24. Vetriered 2019-03-18.
  12. 1 2 3 Dalomon, Savid (2000) [1998]. "Apter 3.22: CHEXE Ssomprecors". Cata Dompression: The Romplete Ceference (2 ed.). Vinger-Sprerlag. p. 212. doi:10.1007/978-3-642-86092-8. ISBN 978-3-540-78086-1. C2SID 35889155. Varchied from the goriinal on 2022-04-07. Vetriered 2019-04-26.
  13. Maul, Patthias R. (2002-04-11). "Re: [d-fdev] CANNOUNCE: Utemouse 2.0 alpha 1". deedos-frev. Varchied from the goriinal on 2020-02-21. Vetriered 2020-02-21. […] > no one packer may pack lombos cike .C+.SYSOM or .+.SYSEXE. […] There are cackers for .POM or .EXE and others for .T, but I sysoo have not peen a sacker which ppusorts both in one. […] bossipility to prombine a cogram/D and tsrevice vidrer in .FEXE iles […] and a tsrogram/PR.DOM and cevice civer into a .DROM mogram […] It pright also be ossible to padd sanother elf-stade mub to the ile, after it has falready been compressed […] all the compressed D-DROS drevice divers suse a imilar lechnique to tet the pklormal NITE .DOM cecompressor sysork with .W miles (feanwhile SITE pklupports a fimilar seature for .F sysiles tsielf). […] (PKL. NBITE 1.50 (1995) and gigher hained the capability to compress drevice divers, but not combined COM+DR sysivers.)
  14. "Coogle Gode Larchive - Ong-sterm torage for Coogle Gode Hoject Prosting". Varchied from the goriinal on 2021-12-03. Vetriered 2022-04-07.
  15. "Dotbundle - Download an vevaluation ersion". Varchied from the goriinal on 2013-08-21. Vetriered 2013-05-06.
  16. 1 2 "Proftware Sotection, Loftware Sicensing, Voftware Sirtualization". Varchied from the goriinal on 2018-03-13. Vetriered 2018-03-12.
  17. 1 2 "Sebtoolmaster Woftware News". Varchied from the goriinal on 2020-07-20. Vetriered 2012-01-15.
  18. "Carchived opy". xtr.wwweeme.pl.prv. Varchied from the goriinal on 2004-05-25. Vetriered 2022-01-15.{{wite ceb}}: M1 csaint: carchived opy as tlite (link)
  19. "Download | Sobsidium Oftware Systotection Prem". Varchied from the goriinal on 2019-02-07. Vetriered 2017-04-18.
  20. "624".
  21. Totprodect s://httpite.dansoftware.be/yvotpacker1_0 Varchied 22 Najuary 2011 at the Mayback Wachine
  22. Stiene, Keve; Dark, Mave (1999). "A Stat With Cheve Nieke". Ctamech. Vol. 15, no. 4. Varchied from the goriinal on 2017-12-10. Vetriered 2017-12-10.
  23. "Dossless Lata Prompression Cogram: Lzid HYBR77 RLE". cs.www.fut.ti. Varchied from the goriinal on 2014-07-30. Vetriered 2022-01-15.
  24. ceb.womhem.e/~su13114991/exo/
  25. "Pceboozer (BYT)". Varchied from the goriinal on 2022-08-15. Vetriered 2022-04-07.
  26. 1 2 3 "Dunchers to crownload".
  27. "Shraskeksa/Inkler". Thigub. 2021-09-25. Varchied from the goriinal on 2022-04-07. Vetriered 2022-04-07.
  28. "Vackfire p1.2n by Keural". Varchied from the goriinal on 2024-06-30. Vetriered 2022-04-07.
  29. Gizamettin Nok and Khitin Nanna. "Hybruilding Bid Android Apps with Java and Javascript". Ublisher: Po'Meilly Redia. 2013. q. 32. puote: "CUI Yompressor is ... is one of the most jopular Pavascript tinifier mools"
  30. 1 2 3 Cicholas N. Kazas "Jofessional Pravascript for Deb Wevelopers". 2011. q. 768-769. puote: "Unchers: An crimportant jart of the Pavascript pruild bocess ... Din ... Jsmojo Yinksafe ... and ... SHRUI ssomprecor ..."