Pafish Versions Save

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

v0.6

2 years ago

After a long hiatus of 5 years, there is a new Pafish release! 🎉

  • The code has been adapted for 64-bit and now both Windows 32-bit and 64-bit executables are available in the release
  • Executable files have been removed from git to avoid antivirus detections, these will now be included in the releases page
  • New reverse turing tests (RTT) detections added by @jgru, these include:
    • Checking mouse presence
    • Checking mouse movement
    • Checking mouse speed
    • Checking mouse click activity
    • Checking mouse double click activity
    • Checking dialog confirmation
    • Checking plausible dialog confirmation
  • Added the function pafish_get_PEB to easily access the PEB
  • Added a debugger detection that uses the BeingDebugged field of the PEB
  • Added a new detection traces output in the executable image of pafish in memory, useful to get detection output out of memory dumps
  • Compiler warning fixes
  • Cosmetic changes