Executable compression

From Just Solve the File Format Problem
(Difference between revisions)
Jump to: navigation, search
(10 intermediate revisions by one user not shown)
Line 4: Line 4:
 
|thiscat=Executable compression
 
|thiscat=Executable compression
 
}}
 
}}
'''Executable compression''' takes an [[Executables|executable]] file, and makes it smaller, without changing its functionality. One way to do this is to compress the file and bundle it with a small decompression routine, which decompresses the file, in memory, every time it is executed.
+
'''Executable compression''' takes an [[Executables|executable]] file, and makes it smaller, without changing its functionality. One way to do that is to compress the file and bundle it with a small decompression routine, which decompresses the file, in memory, every time it is executed.
  
 
It is usually possible to identify a particular kind of compressed executable as such, and decompress it to its original form. Another possibility is to let the program decompress itself, then try to capture it in memory. However, some developers have used various tricks to try to make these things difficult.
 
It is usually possible to identify a particular kind of compressed executable as such, and decompress it to its original form. Another possibility is to let the program decompress itself, then try to capture it in memory. However, some developers have used various tricks to try to make these things difficult.
 +
 +
== Security information ==
 +
Executable compression frequently involves techniques, such as self-modifying code, that are also used by '''viruses''' and other malware. Compounding the problem, a compressed executable can't be properly scanned by anti-malware software unless it knows how to decompress it.
 +
 +
Don't be surprised if your anti-malware software thinks some compressed executable files look suspicious. Research into this topic should be considered '''NSFW'''.
  
 
== List of formats ==
 
== List of formats ==
  
* AXE (System Enhancement Associates)
+
* [[624]]
* COMPACK (Prominence Computer Services)
+
* AINEXE - See [[AIN#AINEXE]]
 +
* [[aPACK]]
 +
* [[AVPACK]] (Andrei Volkov)
 +
* [[AXE (executable compression)|AXE]]
 +
* [[COMPACK]]
 
* [[DIET (compression)|DIET]]
 
* [[DIET (compression)|DIET]]
* ICE (Keith P. Graham)
 
 
* [[EXEPACK]]
 
* [[EXEPACK]]
* LEXEM
+
* [[ICE (executable compression)|ICE]]
* LGLZ (George Lyapko)
+
* [[JAM (executable compression)|JAM]]
 +
* [[The JAM Packer]]
 
* [[LZEXE]]
 
* [[LZEXE]]
* PGMPak (Todor Todorov)
+
* [[Petite]]
 +
* [[PGMPak]] (Todor Todorov)
 
* [[PKLITE]]
 
* [[PKLITE]]
* PROPACKER (Rob Northern Computing)
+
* [[Pro-Pack|PRO-PACK]]
* SCRNCH
+
* [[SCRNCH]]
* SHRINK
+
* [[SHRINK (executable compression)|SHRINK]]
 
* [[TINYPROG]]
 
* [[TINYPROG]]
 +
* [[UCEXE]] (Ad Infinitum Programs)
 
* [[UPX]]
 
* [[UPX]]
* WWPACK (Piotr Warezak and Rafal Wierzbicki)
+
* [[WWPACK]]
* XPACK (JauMing Tseng)
+
* [[XPACK]]
 +
* [[X-pack for Executable‎]]
  
 
== Software ==
 
== Software ==
 +
* [https://www.sac.sk/ SAC FTP collection] → [https://www.sac.sk/files.php?d=7 PACK] (also at [ftp://ftp.elf.stuba.sk/pub/pc/pack/], [http://info.elf.stuba.sk/packages/pub/pc/pack/], [http://ebook.pldworld.com/%5Bmirroring%5D/ftp.elf.stuba.sk/pub/pc/pack/])
 +
* {{OldskoolDOSEXE}} → Executable Tools Pack → packers/, unpackers/
 
* [{{CdTextfilesURL|pdos9606/ARCHIVER/EXECOMP/}}] - A collection of some compression and decompression utilities for DOS
 
* [{{CdTextfilesURL|pdos9606/ARCHIVER/EXECOMP/}}] - A collection of some compression and decompression utilities for DOS
  

Revision as of 17:22, 9 October 2020

File Format
Name Executable compression
Ontology

Executable compression takes an executable file, and makes it smaller, without changing its functionality. One way to do that is to compress the file and bundle it with a small decompression routine, which decompresses the file, in memory, every time it is executed.

It is usually possible to identify a particular kind of compressed executable as such, and decompress it to its original form. Another possibility is to let the program decompress itself, then try to capture it in memory. However, some developers have used various tricks to try to make these things difficult.

Contents

Security information

Executable compression frequently involves techniques, such as self-modifying code, that are also used by viruses and other malware. Compounding the problem, a compressed executable can't be properly scanned by anti-malware software unless it knows how to decompress it.

Don't be surprised if your anti-malware software thinks some compressed executable files look suspicious. Research into this topic should be considered NSFW.

List of formats

Software

See also

Links

Personal tools
Namespaces

Variants
Actions
Navigation
Toolbox