Forum Discussion
kevinh
9 months agoBronze II
Practical Malware Analysis: Static Analysis question 18
for finding the exact name of the executable file. After dynamically overriding the function as shown in the briefing I cant seem to find any meaningful creation of the filename matching the p...
- 9 months ago
You're seeing Microsoft Security Centre in your string. You want a file name that is trying to mimic Security Centre... famously in WannaCry.
Its also right in your C code you posted. Use the first 4 letters of that in strings and I bet you have the file name.
netcat
Advocate
9 months agoThe question is "What is the exact name of the executable file this malware adopts", and I can't see how this could be related to sprintf. The solution is right under your nose.