https://github.com/a0rtega/pafish

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
https://github.com/a0rtega/pafish

analysis-environments malware malware-analysis malware-families malware-research rdtsc reverse-engineering sandbox virtual-machine

Last synced: 1 day ago
JSON representation

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

• Host: GitHub
• URL: https://github.com/a0rtega/pafish
• Owner: a0rtega
• License: gpl-3.0
• Created: 2012-07-01T11:06:40.000Z (over 12 years ago)
• Default Branch: master
• Last Pushed: 2024-06-21T08:49:44.000Z (6 months ago)
• Last Synced: 2024-12-03T13:02:52.131Z (9 days ago)
• Topics: analysis-environments, malware, malware-analysis, malware-families, malware-research, rdtsc, reverse-engineering, sandbox, virtual-machine
• Language: C
• Homepage:
• Size: 1.21 MB
• Stars: 3,424
• Watchers: 176
• Forks: 463
• Open Issues: 16
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG
  • Funding: .github/FUNDING.yml
  • License: LICENSE.txt

Awesome Lists containing this project

• awesome-hacking-lists - a0rtega/pafish - Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do (C)
• awesome-cyber-security-tools - **Pefish** - Detects virtual machines and malware analysis environments. (Malware Reversing / Static Analysis)

README

        



# Pafish

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do.

The project is free and open source; the code of all the anti-analysis techniques is publicly available. Pafish executables for Windows (x86 32-bit and 64-bit) can be downloaded from the [releases page](https://github.com/a0rtega/pafish/releases).

![pafish screenshot](https://github.com/a0rtega/pafish/raw/dev/screenshots/v06/pafish_native_win10.png)

# Scope

The goal of this project is to collect techniques commonly observed in malware samples to evade analysis systems. This allows analysts to study them and test whether the analysis environments are properly implemented.

# Building Pafish

Pafish is written in C and can be built with `Mingw-w64` and `make`.

The wiki page "[How to build](https://github.com/a0rtega/pafish/wiki/How-to-build)" contains detailed instructions.

# Author

Alberto Ortega and many awesome [contributors](https://github.com/a0rtega/pafish/graphs/contributors).

# License

[GPL-3.0](LICENSE.txt)