Performance Metrics

The cbc-binary-analysis tool packaged with the CBC Binary Toolkit was tested on multiple operating systems with the following results coming from a macOS 10.15 Catalina laptop. The tested utilized 10000 binaries that only differed by a sequence of randomly generated bytes appended to the end of the executable code.

Binary size: 918kb
Number of hashes:: 10000
Time: 2:49:48.382821
Rate: 1.0188 binary/sec
DB size on completetion: 4 Mb

Factors

The following factors will affect the rate at which the cbc-binary-analysis tool can process binaries.

• Binary size
• Network speed
• Analysis engine processing time
  • ie. Yara rule complexity and quantity

You may need to adjust your configured expiration_seconds based on how many hashes you submit and the rate at which they can be processed otherwise the AWS S3 download url may expire before the binary is processed. Documentation on modifying your expiration_seconds can be found here.