Win32/Exploit.CVE-2013-0074 [Threat Name] go to Threat
Win32/Exploit.CVE-2013-0074.AA [Threat Variant Name]
| Category | trojan |
| Aliases | Exploit_c.AAKY (AVG) |
Short description
Win32/Exploit.CVE-2013-0074.AA is a detection for specially crafted *.xap, *.dll files, which exploit the CVE-2013-0074 vulnerability.
Installation
The program code of the malware is usually embedded in HTML pages.
Other information
Win32/Exploit.CVE-2013-0074.AA is a detection for specially crafted *.xap, *.dll files, which exploit the CVE-2013-0074 vulnerability.
The trojan contains a URL address. It tries to download a file from the address.
The file is stored in the following location:
- %temp%\%variable%.dll
A string with variable content is used instead of %variable% .
The file is then executed.