SHELLCODE: Shikata Ga Nai Encoder Routine Over FTP-CTS
This signature detects payloads being transferred over FTP protocol that have been encoded using Shikata Ga Nai encoder routine. This may be an indication of someone trying to evade anti-virus/IPS solutions and possibly drop malicious code.
Short Name
SHELLCODE:WIN:SHIKATAGANAI-21C
Severity
Critical
Recommended
False
Recommended Action
Drop
Category
SHELLCODE
Keywords
Encoder FTP-CTS Ga Nai Over Routine Shikata
Release Date
08/12/2014
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown