Signature Detail
Short Name |
SHELLCODE:WIN:SHIKATAGANAI-HTTP |
|---|---|
Severity |
Critical |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
SHELLCODE |
Keywords |
Shikata Ga Nai Encoder Routine Over HTTP (1) |
Release Date |
2015/10/07 |
Update Number |
2543 |
Supported Platforms |
idp-5.1.110151004+, isg-3.5.141421+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SHELLCODE: Shikata Ga Nai Encoder Routine Over HTTP (1)
This signature detects payloads being transferred over HTTP protocol that have been encoded using Shikata Ga Nai encoder routine. This may be an indication of someone trying to evade anti-virus/IPS solutions and possibly drop malicious code.