iSECPartners / jailbreak

Jailbreak
BSD 2-Clause "Simplified" License
467 stars 140 forks source link

Trojan.Cridex in jailbreakhook64.dll? #8

Open se-cure opened 6 years ago

se-cure commented 6 years ago

Symantec Endpoint Protection (version NIS-22.11.2.7) detects Trojan.Cridex in jailbreakhook64.dll. This is in addition to Hacktool.Jailbreak (which is expected)

Any idea why? Should I be worried? :) I have double checked all the sha256 sums.

BTW, virustotal.com only detects Hacktool.Jailbreak in this module.

tmeckel commented 6 years ago

The jailbreakhook64.dll can be compiled from the code available here in that project. The code of the required EasyHook library is available here. https://github.com/EasyHook/EasyHook

So if you are worrying about the binary stuff here, you can compile everything by yourself.