Performance Metrics

The cbc-binary-analysis tool packaged with the CBC Binary Toolkit was tested on multiple operating systems with the following results coming from a macOS 10.15 Catalina laptop. The tested utilized 10000 binaries that only differed by a sequence of randomly generated bytes appended to the end of the executable code.

Binary size: 918kb
Number of hashes:: 10000
Time: 2:49:48.382821
Rate: 1.0188 binary/sec
DB size: 4mb bytes

Factors

The following factors will affect the rate at which the cbc-binary-analysis tool can process binaries. You may need to adjust your expiration_seconds based on how many hashes you submit and the rate at which they can be processed otherwise the AWS S3 download url may expire.

• Binary size
• Network speed
• Analysis engine processing time
  • Yara rule complexity and quantity