diff --git a/README.md b/README.md index b6621d3..cc442d2 100644 --- a/README.md +++ b/README.md @@ -17,7 +17,7 @@ But for the UPX packed calc.exe, ILT is empty for all entries in Import Director But if the program has delayed import directory, like Mimikatz, it gets more complex. For the normal mimikatz.exe, the delayed import directory is as follows: -![image](/screenshot/mimikatz_pebear.jpg) +![image](/screenshot/mimikat_pebear.jpg) But for the UPX packed mimikatz.exe, PE Bear is unable to parse it, so do I. ![image](/screenshot/packed_mimikatz.jpg)