Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WARNING : volatility.plugins.mimikatz: [LsaDecryptor] unable to find signature! #15

Open
GoogleCodeExporter opened this issue Apr 4, 2015 · 2 comments

Comments

@GoogleCodeExporter
Copy link

I already have Volatility and pycrypto installed.
I downloaded Construct and installed that. I hopefully located the correct one.

However when I run Volatility with the mimikatz.pl plugin, I keep getting the 
following warning message;

"WARNING : volatility.plugins.mimikatz: [LsaDecryptor] unable to find 
signature!"

As for the output, I see the Module, User and Domain columns populated, but 
nothing under the Password column. I tried running a pair of memory captures 
that I made with Belka. 

Original issue reported on code.google.com by [email protected] on 5 May 2014 at 6:29

@GoogleCodeExporter
Copy link
Author

Do you happen to have a test memory capture or one that you can suggest to use 
to test my installation+mimikatz plugin?

Original comment by [email protected] on 5 May 2014 at 6:33

@GoogleCodeExporter
Copy link
Author

Hi glentc,
so sorry for the lag... usually the following error
"WARNING : volatility.plugins.mimikatz: [LsaDecryptor] unable to find 
signature!"
means "something is paged out..."... probably the lsasrv.dll module...

Original comment by francesco.picasso on 25 Nov 2014 at 4:10

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant