Go to file
Jan Gru ebb47f35ef Add reverse turing tests
Add reverse Turing tests, which mimick checks found in real world
samples like the UpClicker trojan, leaked source code of Ursnif/Gozi,
a "DarkRiver" dropper, the MyWeb-backdoor and XLM 4.0-macros used as
droppers.
2021-11-07 06:53:25 +01:00
.github Create FUNDING.yml 2021-10-02 12:05:18 +02:00
pafish Add reverse turing tests 2021-11-07 06:53:25 +01:00
screenshots Add v057 screenshot 2016-03-16 19:38:13 +01:00
.gitignore Added Vagrantfile 2019-02-16 14:15:38 +00:00
CHANGELOG Bump v058 2016-08-27 13:42:56 +02:00
LICENSE.txt Added LICENSE.txt 2013-03-23 18:03:28 +01:00
pafish.exe Bump v058 2016-08-27 13:42:56 +02:00
README.md Update README.md 2021-10-04 18:13:50 +02:00
Vagrantfile Automatically build pafish during Vagrant initialization 2019-02-16 14:23:31 +00:00

pafish-logo

Pafish

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.

The project is open source, you can read the code of all anti-analysis checks. You can also download the executable of the latest stable version.

pafish screenshot

Scope

The objective of this project is to collect usual tricks seen in malware samples. This allows us to study them, and test if our analysis environments are properly implemented.

Build

Pafish is written in C and can be built with MinGW (gcc + make).

Check out "How to build" for detailed instructions.

Author

Alberto Ortega

License

GPL-3.0