Open-source atomic malware analysis

Analyze another

_ni_label.c

C
Verdict: BENIGN
SHA256: c9bdfae322e09cd124bd4c3327652f2561acdaf025b5e6e8a4e2340038372a31
Mal-ecule
O(Er₃)H₂(PoDb)Md
Size 1.3 MB download
First seen 110 days ago
Analyzed 105 days ago
Ecosystem pypi

Objectives

component severity, 70% confident.
evasion/kernel-hide Scanning for x86 0x66 prefix
component severity, 90% confident.
evasion/process/injection Memory copy in source code

Micro-behaviors

notable severity, 92% confident.
process/interpreter Python C extension module in native source
baseline severity, 100% confident.
data/control-flow Infinite loop structure (e.g. for(;;) or while(1))

Metadata

notable severity, 90% confident.
encoded-payload Encoded payload detected: xor → base64

Identity

SHA-256 c9bdfae322e09cd124bd4c3327652f2561acdaf025b5e6e8a4e2340038372a31
Filename _ni_label.c

Origin

Source harvest
Ecosystem pypi

Timeline

First seen 24 Apr 2026 16:11 UTC
Last analyzed 29 Apr 2026 23:29 UTC
Last updated 29 Apr 2026 23:29 UTC

Labeling

Label good
Label source harvest
Traits version f6eaa