Signature Detail
Short Name |
SHELLCODE:X86:ALPHA2-GETEIP-ENC |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
SHELLCODE |
Keywords |
X86 Alpha2 GetEIPs Encoder Routine |
Release Date |
2015/10/22 |
Update Number |
2549 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SHELLCODE: X86 Alpha2 GetEIPs Encoder Routine
This signature detects payloads being transferred over network that have been using x86 Alpha2 GetEIPs Encoder Routine. This may be an indication of someone trying to evade anti-virus/IPS solutions and possibly drop malicious code.