{"DateBased":true,"Day":31,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10780,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:29:13.290323131Z | 42 | PC: 12a70 | Get date 0x12a70: cmp dl, 0x1f 0x12a73: jne 0x12a7c 0x12a75: cmp dh, 0xc 0x12a78: jne 0x12a7c 0x12a7a: jmp 0x12afa 0x12a7c: mov ah, 0x47 0x12a7e: xor dl, dl 0x12a80: lea si, word ptr [bp + 0x1fb] 0x12a84: int 0x21 0x12a86: mov ah, 0x1a 0x12a88: lea dx, word ptr [bp + 0x23a] 0x12a8c: int 0x21 0x12a8e: mov ah, 0x4e 0x12a90: mov cx, 0x27 0x12a93: lea dx, word ptr [bp + 0x1f1] 0x12a97: int 0x21 0x12a99: jae 0x12a9e 0x12a9b: jmp 0x12b24 0x12a9e: mov ax, 0x4301 0x12aa1: xor cx, cx |
| 2018-12-25T12:29:13.305754833Z | 71 | PC: 12a86 | Get current directory |
| 2018-12-25T12:29:13.30870698Z | 26 | PC: 12a8e | Set disk transfer address |
| 2018-12-25T12:29:13.30978961Z | 78 | PC: 12a99 | Find first file |
| 2018-12-25T12:29:13.315802155Z | 67 | PC: 12aa9 | Get or set file attributes |
| 2018-12-25T12:29:13.331599243Z | 61 | PC: 12aae | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:29:13.339561758Z | 63 | PC: 12abb | Read file or device (Read 5 bytes on handle 5) |
| 2018-12-25T12:29:13.346001066Z | 66 | PC: 12acd | Move file pointer |
| 2018-12-25T12:29:13.348962788Z | 64 | PC: 12cde | Write file or device (Write 723 bytes on handle 5) |
| 2018-12-25T12:29:13.358022777Z | 66 | PC: 12cf8 | Move file pointer |
| 2018-12-25T12:29:13.359395419Z | 64 | PC: 12d03 | Write file or device (Write 5 bytes on handle 5) |
| 2018-12-25T12:29:13.367017835Z | 87 | PC: 12d10 | Get or set file date and time |
| 2018-12-25T12:29:13.368517558Z | 62 | PC: 12d14 | Close file |
| 2018-12-25T12:29:13.376057091Z | 67 | PC: 12ae6 | Get or set file attributes |
| 2018-12-25T12:29:13.393595155Z | 59 | PC: 12aee | Change current directory |
| 2018-12-25T12:29:13.39744736Z | 26 | PC: 12af5 | Set disk transfer address |
{"DateBased":true,"Day":31,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10780,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:29:13.293187893Z | 42 | PC: 12a70 | Get date 0x12a70: cmp dl, 0x1f 0x12a73: jne 0x12a7c 0x12a75: cmp dh, 0xc 0x12a78: jne 0x12a7c 0x12a7a: jmp 0x12afa 0x12a7c: mov ah, 0x47 0x12a7e: xor dl, dl 0x12a80: lea si, word ptr [bp + 0x1fb] 0x12a84: int 0x21 0x12a86: mov ah, 0x1a 0x12a88: lea dx, word ptr [bp + 0x23a] 0x12a8c: int 0x21 0x12a8e: mov ah, 0x4e 0x12a90: mov cx, 0x27 0x12a93: lea dx, word ptr [bp + 0x1f1] 0x12a97: int 0x21 0x12a99: jae 0x12a9e 0x12a9b: jmp 0x12b24 0x12a9e: mov ax, 0x4301 0x12aa1: xor cx, cx |
| 2018-12-25T12:29:13.29631499Z | 9 | PC: 12b02 | Display string (String= 'Tienes metido en tu ordenador un virus inofensivo llamado � :-) Este virus esta dedicado a la �nica, la maravillosa, la sensacional letra: ������ �� � � � � � � � � �� ') |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10780,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:29:13.858361196Z | 42 | PC: 12a70 | Get date 0x12a70: cmp dl, 0x1f 0x12a73: jne 0x12a7c 0x12a75: cmp dh, 0xc 0x12a78: jne 0x12a7c 0x12a7a: jmp 0x12afa 0x12a7c: mov ah, 0x47 0x12a7e: xor dl, dl 0x12a80: lea si, word ptr [bp + 0x1fb] 0x12a84: int 0x21 0x12a86: mov ah, 0x1a 0x12a88: lea dx, word ptr [bp + 0x23a] 0x12a8c: int 0x21 0x12a8e: mov ah, 0x4e 0x12a90: mov cx, 0x27 0x12a93: lea dx, word ptr [bp + 0x1f1] 0x12a97: int 0x21 0x12a99: jae 0x12a9e 0x12a9b: jmp 0x12b24 0x12a9e: mov ax, 0x4301 0x12aa1: xor cx, cx |
| 2018-12-25T12:29:13.860815172Z | 71 | PC: 12a86 | Get current directory |
| 2018-12-25T12:29:13.863604859Z | 26 | PC: 12a8e | Set disk transfer address |
| 2018-12-25T12:29:13.864604746Z | 78 | PC: 12a99 | Find first file |
| 2018-12-25T12:29:13.871677764Z | 67 | PC: 12aa9 | Get or set file attributes |
| 2018-12-25T12:29:14.688947738Z | 61 | PC: 12aae | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:29:14.697327757Z | 63 | PC: 12abb | Read file or device (Read 5 bytes on handle 5) |
| 2018-12-25T12:29:14.704530231Z | 66 | PC: 12acd | Move file pointer |
| 2018-12-25T12:29:14.707306333Z | 64 | PC: 12cde | Write file or device (Write 723 bytes on handle 5) |
| 2018-12-25T12:29:14.728350909Z | 66 | PC: 12cf8 | Move file pointer |
| 2018-12-25T12:29:14.729418984Z | 64 | PC: 12d03 | Write file or device (Write 5 bytes on handle 5) |
| 2018-12-25T12:29:14.734199937Z | 87 | PC: 12d10 | Get or set file date and time |
| 2018-12-25T12:29:14.735330211Z | 62 | PC: 12d14 | Close file |
| 2018-12-25T12:29:14.740489884Z | 67 | PC: 12ae6 | Get or set file attributes |
| 2018-12-25T12:29:14.746974386Z | 59 | PC: 12aee | Change current directory |
| 2018-12-25T12:29:14.749528954Z | 26 | PC: 12af5 | Set disk transfer address |