Sample viewer

vx.netlux.org/Virus.DOS.Birgit.329.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:52:02.867694439Z 53 PC: 12aa7 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:02.869385097Z 37 PC: 12ab7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:02.870653307Z 71 PC: 12ac0 | Get current directory
2018-12-17T22:52:02.873777138Z 53 PC: 12ac7 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:02.875040929Z 37 PC: 12ad0 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:52:02.877204604Z 78 PC: 12b01 | Find first file
2018-12-17T22:52:02.884455437Z 67 PC: 12b0a | Get or set file attributes
2018-12-17T22:52:02.897125565Z 67 PC: 12b14 | Get or set file attributes
2018-12-17T22:52:02.915362353Z 61 PC: 12b18 | Open file (Filename = '')
2018-12-17T22:52:02.922804908Z 87 PC: 12b1d | Get or set file date and time
2018-12-17T22:52:02.924468847Z 63 PC: 12b28 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:52:02.931836691Z 66 PC: 12b37 | Move file pointer
2018-12-17T22:52:02.933285869Z 44 PC: 12a50 | Get time 0x12a50: cmp dl, 0
0x12a53: je 0x12a4c
0x12a55: mov byte ptr [0x10a], dl
0x12a59: call 0x12a6e
0x12a5c: pop bx
0x12a5d: mov cx, 0x149
0x12a60: mov dx, 0x100
0x12a63: mov ah, 0x40
0x12a65: int3
0x12a66: inc byte ptr [0x249]
0x12a6a: call 0x12a6e
0x12a6d: ret
0x12a6e: mov bx, 0x146
0x12a71: mov al, byte ptr [0x10a]
0x12a75: cmp al, 0
0x12a77: je 0x12a85
0x12a79: xor byte ptr [bx], al
0x12a7c: inc bx
0x12a7d: add al, bh
0x12a7f: cmp bx, 0x22d
2018-12-17T22:52:02.936310759Z 64 PC: 12a66 | Write file or device (Write 329 bytes on handle 5)
2018-12-17T22:52:02.939545521Z 87 PC: 12b42 | Get or set file date and time
2018-12-17T22:52:02.941204423Z 62 PC: 12b45 | Close file
2018-12-17T22:52:02.949134051Z 67 PC: 12b50 | Get or set file attributes
2018-12-17T22:52:02.961147732Z 79 PC: 12b01 | Find next file
2018-12-17T22:52:02.964398711Z 67 PC: 12b0a | Get or set file attributes
2018-12-17T22:52:02.970710084Z 67 PC: 12b14 | Get or set file attributes
2018-12-17T22:52:02.98161475Z 61 PC: 12b18 | Open file (Filename = '')
2018-12-17T22:52:02.99053138Z 87 PC: 12b1d | Get or set file date and time
2018-12-17T22:52:02.992498992Z 63 PC: 12b28 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:52:02.999725565Z 66 PC: 12b37 | Move file pointer
2018-12-17T22:52:03.002075915Z 44 PC: 12a50 | Get time 0x12a50: cmp dl, 0
0x12a53: je 0x12a4c
0x12a55: mov byte ptr [0x10a], dl
0x12a59: call 0x12a6e
0x12a5c: pop bx
0x12a5d: mov cx, 0x149
0x12a60: mov dx, 0x100
0x12a63: mov ah, 0x40
0x12a65: int3
0x12a66: inc byte ptr [0x249]
0x12a6a: call 0x12a6e
0x12a6d: ret
0x12a6e: mov bx, 0x146
0x12a71: mov al, byte ptr [0x10a]
0x12a75: cmp al, 0
0x12a77: je 0x12a85
0x12a79: xor byte ptr [bx], al
0x12a7c: inc bx
0x12a7d: add al, bh
0x12a7f: cmp bx, 0x22d
2018-12-17T22:52:03.004556154Z 64 PC: 12a66 | Write file or device (Write 329 bytes on handle 5)
2018-12-17T22:52:03.007860278Z 87 PC: 12b42 | Get or set file date and time
2018-12-17T22:52:03.010804059Z 62 PC: 12b45 | Close file
2018-12-17T22:52:03.01905513Z 67 PC: 12b50 | Get or set file attributes
2018-12-17T22:52:03.0331085Z 79 PC: 12b01 | Find next file
2018-12-17T22:52:03.041347385Z 67 PC: 12b0a | Get or set file attributes
2018-12-17T22:52:03.047780651Z 67 PC: 12b14 | Get or set file attributes
2018-12-17T22:52:03.058387214Z 61 PC: 12b18 | Open file (Filename = '')
2018-12-17T22:52:03.065874303Z 87 PC: 12b1d | Get or set file date and time
2018-12-17T22:52:03.067265274Z 63 PC: 12b28 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:52:03.074168007Z 66 PC: 12b37 | Move file pointer
2018-12-17T22:52:03.075553237Z 44 PC: 12a50 | Get time 0x12a50: cmp dl, 0
0x12a53: je 0x12a4c
0x12a55: mov byte ptr [0x10a], dl
0x12a59: call 0x12a6e
0x12a5c: pop bx
0x12a5d: mov cx, 0x149
0x12a60: mov dx, 0x100
0x12a63: mov ah, 0x40
0x12a65: int3
0x12a66: inc byte ptr [0x249]
0x12a6a: call 0x12a6e
0x12a6d: ret
0x12a6e: mov bx, 0x146
0x12a71: mov al, byte ptr [0x10a]
0x12a75: cmp al, 0
0x12a77: je 0x12a85
0x12a79: xor byte ptr [bx], al
0x12a7c: inc bx
0x12a7d: add al, bh
0x12a7f: cmp bx, 0x22d
2018-12-17T22:52:03.078135375Z 64 PC: 12a66 | Write file or device (Write 329 bytes on handle 5)
2018-12-17T22:52:03.081078903Z 87 PC: 12b42 | Get or set file date and time
2018-12-17T22:52:03.082645876Z 62 PC: 12b45 | Close file
2018-12-17T22:52:03.091202753Z 67 PC: 12b50 | Get or set file attributes
2018-12-17T22:52:03.102589025Z 79 PC: 12b01 | Find next file
2018-12-17T22:52:03.105391034Z 67 PC: 12b0a | Get or set file attributes
2018-12-17T22:52:03.111940676Z 67 PC: 12b14 | Get or set file attributes
2018-12-17T22:52:03.122465306Z 61 PC: 12b18 | Open file (Filename = '')
2018-12-17T22:52:03.129584436Z 87 PC: 12b1d | Get or set file date and time
2018-12-17T22:52:03.138221274Z 63 PC: 12b28 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:52:03.145068918Z 66 PC: 12b37 | Move file pointer
2018-12-17T22:52:03.146480733Z 44 PC: 12a50 | Get time 0x12a50: cmp dl, 0
0x12a53: je 0x12a4c
0x12a55: mov byte ptr [0x10a], dl
0x12a59: call 0x12a6e
0x12a5c: pop bx
0x12a5d: mov cx, 0x149
0x12a60: mov dx, 0x100
0x12a63: mov ah, 0x40
0x12a65: int3
0x12a66: inc byte ptr [0x249]
0x12a6a: call 0x12a6e
0x12a6d: ret
0x12a6e: mov bx, 0x146
0x12a71: mov al, byte ptr [0x10a]
0x12a75: cmp al, 0
0x12a77: je 0x12a85
0x12a79: xor byte ptr [bx], al
0x12a7c: inc bx
0x12a7d: add al, bh
0x12a7f: cmp bx, 0x22d
2018-12-17T22:52:03.149452277Z 64 PC: 12a66 | Write file or device (Write 329 bytes on handle 5)
2018-12-17T22:52:03.152694202Z 87 PC: 12b42 | Get or set file date and time
2018-12-17T22:52:03.154686087Z 62 PC: 12b45 | Close file
2018-12-17T22:52:03.163081252Z 67 PC: 12b50 | Get or set file attributes
2018-12-17T22:52:03.17452429Z 79 PC: 12b01 | Find next file
2018-12-17T22:52:03.177535819Z 67 PC: 12b0a | Get or set file attributes
2018-12-17T22:52:03.183847103Z 67 PC: 12b14 | Get or set file attributes
2018-12-17T22:52:03.192130416Z 61 PC: 12b18 | Open file (Filename = '')
2018-12-17T22:52:03.199049164Z 87 PC: 12b1d | Get or set file date and time
2018-12-17T22:52:03.200511952Z 63 PC: 12b28 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:52:03.214708648Z 66 PC: 12b37 | Move file pointer
2018-12-17T22:52:03.21610066Z 44 PC: 12a50 | Get time 0x12a50: cmp dl, 0
0x12a53: je 0x12a4c
0x12a55: mov byte ptr [0x10a], dl
0x12a59: call 0x12a6e
0x12a5c: pop bx
0x12a5d: mov cx, 0x149
0x12a60: mov dx, 0x100
0x12a63: mov ah, 0x40
0x12a65: int3
0x12a66: inc byte ptr [0x249]
0x12a6a: call 0x12a6e
0x12a6d: ret
0x12a6e: mov bx, 0x146
0x12a71: mov al, byte ptr [0x10a]
0x12a75: cmp al, 0
0x12a77: je 0x12a85
0x12a79: xor byte ptr [bx], al
0x12a7c: inc bx
0x12a7d: add al, bh
0x12a7f: cmp bx, 0x22d
2018-12-17T22:52:03.218502263Z 64 PC: 12a66 | Write file or device (Write 329 bytes on handle 5)
2018-12-17T22:52:03.222044053Z 87 PC: 12b42 | Get or set file date and time
2018-12-17T22:52:03.223680724Z 62 PC: 12b45 | Close file
2018-12-17T22:52:03.232074633Z 67 PC: 12b50 | Get or set file attributes
2018-12-17T22:52:03.243016709Z 79 PC: 12b01 | Find next file
2018-12-17T22:52:03.245715267Z 67 PC: 12b0a | Get or set file attributes
2018-12-17T22:52:03.251701607Z 67 PC: 12b14 | Get or set file attributes
2018-12-17T22:52:03.263201124Z 61 PC: 12b18 | Open file (Filename = '')
2018-12-17T22:52:03.270531314Z 87 PC: 12b1d | Get or set file date and time
2018-12-17T22:52:03.271988103Z 63 PC: 12b28 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:52:03.27938156Z 66 PC: 12b37 | Move file pointer
2018-12-17T22:52:03.280955304Z 44 PC: 12a50 | Get time 0x12a50: cmp dl, 0
0x12a53: je 0x12a4c
0x12a55: mov byte ptr [0x10a], dl
0x12a59: call 0x12a6e
0x12a5c: pop bx
0x12a5d: mov cx, 0x149
0x12a60: mov dx, 0x100
0x12a63: mov ah, 0x40
0x12a65: int3
0x12a66: inc byte ptr [0x249]
0x12a6a: call 0x12a6e
0x12a6d: ret
0x12a6e: mov bx, 0x146
0x12a71: mov al, byte ptr [0x10a]
0x12a75: cmp al, 0
0x12a77: je 0x12a85
0x12a79: xor byte ptr [bx], al
0x12a7c: inc bx
0x12a7d: add al, bh
0x12a7f: cmp bx, 0x22d
2018-12-17T22:52:03.283471772Z 64 PC: 12a66 | Write file or device (Write 329 bytes on handle 5)
2018-12-17T22:52:03.286925784Z 87 PC: 12b42 | Get or set file date and time
2018-12-17T22:52:03.28888669Z 62 PC: 12b45 | Close file
2018-12-17T22:52:03.297132074Z 67 PC: 12b50 | Get or set file attributes
2018-12-17T22:52:03.308455744Z 79 PC: 12b01 | Find next file
2018-12-17T22:52:03.31185936Z 67 PC: 12b0a | Get or set file attributes
2018-12-17T22:52:03.317971875Z 67 PC: 12b14 | Get or set file attributes
2018-12-17T22:52:03.328147427Z 61 PC: 12b18 | Open file (Filename = '')
2018-12-17T22:52:03.335113613Z 87 PC: 12b1d | Get or set file date and time
2018-12-17T22:52:03.336597743Z 63 PC: 12b28 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:52:03.343305095Z 66 PC: 12b37 | Move file pointer
2018-12-17T22:52:03.345391727Z 44 PC: 12a50 | Get time 0x12a50: cmp dl, 0
0x12a53: je 0x12a4c
0x12a55: mov byte ptr [0x10a], dl
0x12a59: call 0x12a6e
0x12a5c: pop bx
0x12a5d: mov cx, 0x149
0x12a60: mov dx, 0x100
0x12a63: mov ah, 0x40
0x12a65: int3
0x12a66: inc byte ptr [0x249]
0x12a6a: call 0x12a6e
0x12a6d: ret
0x12a6e: mov bx, 0x146
0x12a71: mov al, byte ptr [0x10a]
0x12a75: cmp al, 0
0x12a77: je 0x12a85
0x12a79: xor byte ptr [bx], al
0x12a7c: inc bx
0x12a7d: add al, bh
0x12a7f: cmp bx, 0x22d
2018-12-17T22:52:03.348051517Z 64 PC: 12a66 | Write file or device (Write 329 bytes on handle 5)
2018-12-17T22:52:03.351114676Z 87 PC: 12b42 | Get or set file date and time
2018-12-17T22:52:03.353057544Z 62 PC: 12b45 | Close file
2018-12-17T22:52:03.361377288Z 67 PC: 12b50 | Get or set file attributes
2018-12-17T22:52:03.37163973Z 79 PC: 12b01 | Find next file
2018-12-17T22:52:03.374614141Z 67 PC: 12b0a | Get or set file attributes
2018-12-17T22:52:03.380444175Z 67 PC: 12b14 | Get or set file attributes
2018-12-17T22:52:03.390486322Z 61 PC: 12b18 | Open file (Filename = '')
2018-12-17T22:52:03.395295021Z 87 PC: 12b1d | Get or set file date and time
2018-12-17T22:52:03.396763481Z 63 PC: 12b28 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:52:03.403881858Z 62 PC: 12b45 | Close file
2018-12-17T22:52:03.4061359Z 67 PC: 12b50 | Get or set file attributes
2018-12-17T22:52:03.419505883Z 79 PC: 12b01 | Find next file
2018-12-17T22:52:03.421862305Z 59 PC: 12ae5 | Change current directory
2018-12-17T22:52:03.426417512Z 59 PC: 12aed | Change current directory
2018-12-17T22:52:03.428161259Z 37 PC: 12af9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')