@nicolasbrulez One of our unpackers didn't work on such sample because author added a polymorphic layer after basic decompression. SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique