I would like to have some statistics about What percentage of malware use custom packer/cryptor to protect itself? I have been googling for a while but could only find technical study of some custom packers. Any help?

Edited January 3, 20178 yr by gundamfj

I can't say any number but at least half of them. What you can do to know that by yourself is:

• download some few tera bytes from VirusShare or any other source. 
• do some fuzzy hashing to filter out very similar samples to partially avoid false statistics and also filter out non PE files.
• write a small python script which will use yara / peid and store the results for each hash in a database.

You will be knowing how % of samples are not packed, packed with commercial packer, packed with custom packer.

Noteworthy.

Edited February 2, 20178 yr by Noteworthy