Anya is a powerful malware analysis platform designed for quick and efficient file examination without the need for execution. Built in Rust, Anya focuses on static analysis to provide insights into a variety of file types, including PE, ELF, Mach-O, PDFs, Office documents, scripts, archives, and disk images. With support for over 24 different formats, Anya rapidly analyzes files at a rate of 250+ files per minute and operates entirely offline, ensuring privacy and security.

Key Features

• Extensive File Support: Handle analysis of multiple file formats, including executables, documents, and archives.
• Detailed Insights: Generate hashes, calculate entropy, extract imports, analyze sections, and identify Indicator of Compromise (IOC) indicators.
• Confidence Scoring: Receive a confidence-scored verdict with a risk score based on deep analysis.
• Batch Analysis: Easily analyze multiple files or directories in one go, enhancing workflow efficiency.
• User-Friendly Interface: A graphical user interface combined with a command-line interface ensures accessibility for all users.
• MITRE ATT&CK Integration: Mapped techniques help in comprehending attack vectors and enhancing threat intelligence.

CLI Example Usage

anya --file suspicious.exe                          # Analyze a file
anya --file suspicious.exe --json                   # JSON output
anya --directory ./samples --recursive              # Batch scan with progress bar
anya --file suspicious.exe --case nightfall         # Save to investigation case

GUI Highlights

• Overview Dashboard: Displays risk scores, verdicts, and key file attributes.
• Entropy Analysis: Visual representations for deeper insights into file structure.
• Security Indicators: Check features like ASLR, DEP, and Authenticode.
• Interactive Graphs: Visualize relationships and evidence for enhanced analysis.

Anya is distinguished by its offline capabilities, allowing users to conduct thorough analysis without uploading files to the cloud. The platform aggregates a wealth of data and tools to provide a comprehensive malware assessment solution, making it a valuable resource for security professionals and researchers alike.