AlushPacker vs PELock
AlushPacker
github.comPELock
pelock.comSide by side
| Figure | AlushPacker | PELock |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | — | — |
| Windows | Yes | Yes |
| Plans published | 1 | 2 |
| Spec score · Executable Packers | 7.9 (#7) | 7.7 (#11) |
| Maker | The maker's site identifies Alon Alush and describes itself as a blog documenting his Windows reverse engineering and malware analysis work. | The contact page identifies Bartosz Wójcik as the maker; the site footer identifies PELock LLC and shows 2001–2026. |
| Purpose | AlushPacker is a reflective PE packer that enables in-memory execution of native .exe files. | PELock protects 32-bit Windows applications against cracking, tampering, and reverse engineering, and includes a software licensing system. |
Plans
In their own words
AlushPacker
AlushPacker is a Windows utility for packing native Portable Executable (.exe) files for in-memory execution. Its builder compresses files with LZAV and encrypts them using a custom XTEA implementation. When run, its reflective loader decrypts and decompresses the embedded executable, then loads it from memory without disk I/O or assistance from the Windows loader. The project says packing can make static analysis and reverse engineering with tools such as IDA Pro or Ghidra more difficult. Listed support covers x86 and x64, including native console, GUI, and legacy EXE files. The loader resolves normal and delay-loaded imports by name or ordinal and supports relocations, SEH registration, and TLS callbacks. An optional -l key setting makes the output request a password before execution. The release ZIP contains packer.exe for generating packed executables. The source is available under the MIT License, which permits use, modification, distribution, sublicensing, and sale subject to its conditions. The project welcomes code improvements, bug reports, and feature suggestions for maintainer review.
PELock
PELock protects compiled 32-bit Windows applications against cracking, tampering, and reverse engineering, while providing software licensing tools. It protects Portable Executable formats including EXE, SCR, DLL, OCX, CPL, BPL, DPL, ACM, and AX. Anti-debugging methods detect cracking tools and block their actions. The license key manager handles users and keys, generates and verifies RSA-2048 keys, and can block illegally shared keys. Trials can be limited by days, executions, an expiration date, or minutes of use. A virtual DLL binder combines an application and libraries into one EXE, loading those libraries in memory without writing them to disk. SDK examples cover C/C++, Delphi, Lazarus, FreePascal, PureBasic, PowerBASIC, D, and Assembler. Plugins can add compression, detection, licensing checks, and loader functions. The maker lists Windows support from Windows 95 through Windows 10 and Server 2003 through 2012, with 32- and 64-bit support. Pricing starts at 59 one-time; listed licenses cost 159.00 USD or $299, paid once.