Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by recent malicious documents found in the public.

The VBS / VBA code is open source, you can study the code of all evasion tricks.

Code is licensed under GNU/GPL version 3.

You can download the pafish macro document here.

The goal of this project is find and collect evasion tricks seen in recent Office malware samples. The code enables to understand evasions and helps to improve malware analysis systems and sandboxes.

This project is based on famous Pafish by Alberto Ortega

Joe Security (@joe4security - webpage)