Sample viewer

vx.netlux.org/Virus.DOS.Trivial.Trident.64

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:51:58.573911465Z 78 PC: 12a47 | Find first file
2018-12-17T22:51:58.589236482Z 61 PC: 12a51 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:51:58.597924764Z 64 PC: 12a5b | Write file or device (Write 64 bytes on handle 5)
2018-12-17T22:51:58.617959299Z 62 PC: 12a5f | Close file
2018-12-17T22:51:58.633868285Z 79 PC: 12a47 | Find next file
2018-12-17T22:51:58.637450274Z 61 PC: 12a51 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:51:58.642833927Z 64 PC: 12a5b | Write file or device (Write 64 bytes on handle 5)
2018-12-17T22:51:58.649115267Z 62 PC: 12a5f | Close file
2018-12-17T22:51:58.658572663Z 79 PC: 12a47 | Find next file
2018-12-17T22:51:58.662059293Z 61 PC: 12a51 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:51:58.669353826Z 64 PC: 12a5b | Write file or device (Write 64 bytes on handle 5)
2018-12-17T22:51:58.676999018Z 62 PC: 12a5f | Close file
2018-12-17T22:51:58.685868239Z 79 PC: 12a47 | Find next file
2018-12-17T22:51:58.688707893Z 61 PC: 12a51 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:51:58.696642208Z 64 PC: 12a5b | Write file or device (Write 64 bytes on handle 5)
2018-12-17T22:51:58.70449001Z 62 PC: 12a5f | Close file
2018-12-17T22:51:58.713203809Z 79 PC: 12a47 | Find next file
2018-12-17T22:51:58.716471828Z 61 PC: 12a51 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:51:58.730368313Z 64 PC: 12a5b | Write file or device (Write 64 bytes on handle 5)
2018-12-17T22:51:58.737980543Z 62 PC: 12a5f | Close file
2018-12-17T22:51:58.746509175Z 79 PC: 12a47 | Find next file
2018-12-17T22:51:58.750264579Z 61 PC: 12a51 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:51:58.75837244Z 64 PC: 12a5b | Write file or device (Write 64 bytes on handle 5)
2018-12-17T22:51:58.765768424Z 62 PC: 12a5f | Close file
2018-12-17T22:51:58.8022787Z 79 PC: 12a47 | Find next file
2018-12-17T22:51:58.805789816Z 61 PC: 12a51 | Open file (Filename = 'PAH.COM')
2018-12-17T22:51:58.822988474Z 64 PC: 12a5b | Write file or device (Write 64 bytes on handle 5)
2018-12-17T22:51:58.832153451Z 62 PC: 12a5f | Close file
2018-12-17T22:51:58.841227686Z 79 PC: 12a47 | Find next file
2018-12-17T22:51:58.844569073Z 61 PC: 12a51 | Open file (Filename = 'TEST.COM')
2018-12-17T22:51:58.852905874Z 64 PC: 12a5b | Write file or device (Write 64 bytes on handle 5)
2018-12-17T22:51:58.85653422Z 62 PC: 12a5f | Close file
2018-12-17T22:51:58.87979704Z 79 PC: 12a47 | Find next file
2018-12-17T22:51:58.883303337Z 44 PC: 12a74 | Get time 0x12a74: cmp dl, 0xa
0x12a77: ja 0x12a7f
0x12a79: mov al, 2
0x12a7b: xor dx, dx
0x12a7d: int 0x25
0x12a7f: ret
0x12a80: lodsb al, byte ptr [si]
0x12a81: cmp al, 0x25
0x12a83: jne 0x12a96
0x12a85: mov dl, byte ptr [si]
0x12a87: sub dl, 0x31
0x12a8a: cmp dl, 9
0x12a8d: jae 0x12a96
0x12a8f: call 0x12a9f
0x12a92: inc si
0x12a93: dec cx
0x12a94: jmp 0x12a9c
0x12a96: mov dl, al
0x12a98: mov ah, 2
0x12a9a: int 0x21