Signature Detail
Short Name |
SHELLCODE:PREPENDENCODER-HTTP |
|---|---|
Severity |
High |
Recommended |
Yes |
Category |
SHELLCODE |
Keywords |
Prepend Encoder Routine Detection Over HTTP |
Release Date |
2013/08/19 |
Update Number |
2291 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SHELLCODE: Prepend Encoder Routine Detection Over HTTP
This signature detects payloads being transferred over network that use the PrependEncoder routine. This may be an indication of someone trying to drop malicious file content on targeted systems to achieve remote code execution.