SSB - Save Some Bytes

A lightweight PE packer for Windows x64 executables with semi-polymorphic output generation.

Features

• LZSS Compression - Efficient compression of PE sections
• Polymorphic Output - Each packed file is unique:
  • Random XOR keys for encoded strings
  • Random magic values and markers
  • Random section names from common PE names
  • Random process name masquerading (28 Windows process names)
• No Static Signatures - All constants computed at runtime
• Minimal Stub - ~34KB unpacker stub with no CRT dependency
• Manifest Preservation - Maintains application manifests for UAC compatibility
• Full PE Support - Handles imports, relocations, TLS, resources, and exception handlers

Requirements

• Windows 10/11 x64
• Visual Studio 2019+ (MSVC toolchain)
• Python 3.x

Building

build.bat

Usage

ssb.exe <input.exe>
ssb.exe --debug <input.exe>    # Verbose output

Output: <input>_packed.exe

Limitations

• x64 executables only (no 32-bit support)
• Native PE only (no .NET assemblies)

License

MIT

Credits

Copyright (C) 2025 0xROOTPLS