Sample viewer

vx.netlux.org/Virus.DOS.HLLC.Viruslog.10736

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:56:13.3426911Z 53 PC: 1410a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:13.344843801Z 53 PC: 1410a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:56:13.345965383Z 53 PC: 1410a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:56:13.347250807Z 53 PC: 1410a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:56:13.348886799Z 53 PC: 1410a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:13.35035229Z 53 PC: 1410a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:13.352279784Z 53 PC: 1410a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:56:13.353599345Z 53 PC: 1410a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:56:13.355050248Z 53 PC: 1410a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:56:13.356338088Z 53 PC: 1410a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:56:13.358419347Z 53 PC: 1410a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:56:13.360541766Z 53 PC: 1410a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:56:13.362120867Z 53 PC: 1410a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:56:13.364363391Z 53 PC: 1410a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:56:13.367175373Z 53 PC: 1410a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:56:13.368659185Z 53 PC: 1410a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:56:13.370094047Z 53 PC: 1410a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:56:13.372019121Z 53 PC: 1410a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:56:13.373176539Z 53 PC: 1410a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:56:13.374394091Z 37 PC: 1411f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:13.37611065Z 37 PC: 14127 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:13.378138519Z 37 PC: 1412f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:13.379977174Z 37 PC: 14137 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:56:13.382543244Z 68 PC: 14e0d | I/O control for devices (Set for = '�'��B�%�d�����0����>s')
2018-12-17T22:56:13.537266456Z 37 PC: 13781 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:56:13.539022594Z 42 PC: 13d17 | Get date 0x13d17: xor ah, ah
0x13d19: les di, ptr [bp + 6]
0x13d1c: stosw word ptr es:[di], ax
0x13d1d: mov al, dl
0x13d1f: les di, ptr [bp + 0xa]
0x13d22: stosw word ptr es:[di], ax
0x13d23: mov al, dh
0x13d25: les di, ptr [bp + 0xe]
0x13d28: stosw word ptr es:[di], ax
0x13d29: xchg ax, cx
0x13d2a: les di, ptr [bp + 0x12]
0x13d2d: stosw word ptr es:[di], ax
0x13d2e: pop bp
0x13d2f: retf 0x10
0x13d32: push bp
0x13d33: mov bp, sp
0x13d35: mov cx, word ptr [bp + 0xa]
0x13d38: mov dh, byte ptr [bp + 8]
0x13d3b: mov dl, byte ptr [bp + 6]
0x13d3e: mov ah, 0x2b
2018-12-17T22:56:13.541237449Z 26 PC: 13de9 | Set disk transfer address
2018-12-17T22:56:13.542713269Z 78 PC: 13df5 | Find first file
2018-12-17T22:56:13.54695035Z 26 PC: 13e0d | Set disk transfer address
2018-12-17T22:56:13.548071477Z 79 PC: 13e12 | Find next file
2018-12-17T22:56:13.550551205Z 37 PC: 14261 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:13.551637517Z 37 PC: 14261 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:56:13.552738219Z 37 PC: 14261 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:56:13.554482233Z 37 PC: 14261 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:56:13.555672657Z 37 PC: 14261 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:13.556879739Z 37 PC: 14261 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:13.559398473Z 37 PC: 14261 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:56:13.561257787Z 37 PC: 14261 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:56:13.562438159Z 37 PC: 14261 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:56:13.564074172Z 37 PC: 14261 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:56:13.565415206Z 37 PC: 14261 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:56:13.567045859Z 37 PC: 14261 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:56:13.573005102Z 37 PC: 14261 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:56:13.574522464Z 37 PC: 14261 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:56:13.575959641Z 37 PC: 14261 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:56:13.577600409Z 37 PC: 14261 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:56:13.579317481Z 37 PC: 14261 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:56:13.580619352Z 37 PC: 14261 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:56:13.581875357Z 37 PC: 14261 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:56:13.583520968Z 76 PC: 142a0 | Terminate with return code (Return code = '0')