# imprint

> imprint analyzes Windows PE files by parsing import, delay-import and export directories without executing the image. It maps imported Windows APIs to categories and MITRE ATT&CK techniques, then reports capability patterns with the imports that triggered each finding in text or JSON.

- Type: Tool
- Targets: Binary
- Category: Native analysis tools
- Relationship: Foundation tool
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-06
- Original resource: <https://github.com/hamodywe/imprint>
- Primary source: <https://github.com/hamodywe/imprint/blob/b63df337336333e9db566144fdb8ffea056c6a89/README.md>
- Catalog page: <https://awesomerea.org/resources/imprint-pe-triage/>
- Record JSON: <https://awesomerea.org/resources/imprint-pe-triage/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/imprint-pe-triage/index.md)

## Requirements & limits

- **Prerequisites:** A C11 compiler such as gcc, clang or MinGW is required to build it.
- **Limits:** Imports indicate possible capabilities, not observed execution; dynamically resolved APIs and packed payloads may be hidden.
- **License:** MIT license.

## Primary sources

1. <https://github.com/hamodywe/imprint/blob/b63df337336333e9db566144fdb8ffea056c6a89/README.md>
2. <https://github.com/hamodywe/imprint/blob/b63df337336333e9db566144fdb8ffea056c6a89/docs/architecture.md>

## More in Native binaries

- [kdemulator](https://awesomerea.org/resources/kdemulator/index.md) · Tool
- [DownUnderCTF: masked-squares flag checker](https://awesomerea.org/resources/rea-ctf-case/index.md) · Case study
- [Show Your Work: a measured dissection of REA's evidence architecture](https://awesomerea.org/resources/noflag-rea-evidence-architecture-study/index.md) · Case study
- [Windows loader: static malware analysis with REA and Codex](https://awesomerea.org/resources/windows-loader-static-analysis-case/index.md) · Case study
- [OpenBSD netcat: static REA and Ghidra investigation](https://awesomerea.org/resources/netcat-openbsd-rea-static-case/index.md) · Case study
- [m0rph: tracing an obfuscated ELF flag checker](https://awesomerea.org/resources/m0rph-ctf-analysis-case/index.md) · Case study

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.