Jerry_Chen comments

Repositories
Issues
Comments

Results 2 comments of


                                            Jerry_Chen

question

According to https://github.com/klezVirus/CVE-2021-40444, the field means `CFFILE.cbFile` (although it do not align perfectly), this field must large than `CFHEADER.cbCabinet`

`Binary.bz.WrappedSetupProgram` is a cab file

Hello, thanks for response, I use the original code on sample `0e01bad874c61d09d09ce06f76f5e46f6648a1fc943644874c8e1a53a93af9a7` and It can not extract the config, there is the debug info ``` [INFO] Starting Telekom Security DarkGate...