kevinh
Bronze I
Bronze IPractical Malware Analysis: Static Analysis question 18
for finding the exact name of the executable file.
After dynamically overriding the function as shown in the briefing
I cant seem to find any meaningful creation of the filename matching the patter provided in sprintf.
I am wondering if I should be overriding a different function? as I cant seem to find any meaningful leads when searching for references or traveling to the next data.
I also cant seem to find any leads from searching specifically for local_104 and unaff_EDI references as well.
The question is "What is the exact name of the executable file this malware adopts", and I can't see how this could be related to sprintf. The solution is right under your nose.
