search

lluis97 / hotoloti

Automatically exported from code.google.com/p/hotoloti
0 stars 0 forks source link

WARNING : volatility.plugins.mimikatz: [LsaDecryptor] unable to find signature! #15

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
I already have Volatility and pycrypto installed.
I downloaded Construct and installed that. I hopefully located the correct one.

However when I run Volatility with the mimikatz.pl plugin, I keep getting the 
following warning message;

"WARNING : volatility.plugins.mimikatz: [LsaDecryptor] unable to find 
signature!"

As for the output, I see the Module, User and Domain columns populated, but 
nothing under the Password column. I tried running a pair of memory captures 
that I made with Belka.

Original issue reported on code.google.com by gle...@gmail.com on 5 May 2014 at 6:29

GoogleCodeExporter commented 8 years ago 
Do you happen to have a test memory capture or one that you can suggest to use 
to test my installation+mimikatz plugin?

Original comment by gle...@gmail.com on 5 May 2014 at 6:33

GoogleCodeExporter commented 8 years ago 
Hi glentc,
so sorry for the lag... usually the following error
"WARNING : volatility.plugins.mimikatz: [LsaDecryptor] unable to find 
signature!"
means "something is paged out..."... probably the lsasrv.dll module...

Original comment by francesco.picasso on 25 Nov 2014 at 4:10