Sample viewer

vx.netlux.org/Virus.DOS.Birgit.342

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:58:11.658568468Z 53 PC: 12aa9 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:58:11.660822397Z 37 PC: 12aba | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:58:11.663297346Z 71 PC: 12ac4 | Get current directory
2018-12-17T22:58:11.666513574Z 53 PC: 12acb | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:58:11.667971057Z 37 PC: 12ad4 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:58:11.670533328Z 78 PC: 12b08 | Find first file
2018-12-17T22:58:11.677079378Z 67 PC: 12b11 | Get or set file attributes
2018-12-17T22:58:11.683139689Z 67 PC: 12b1b | Get or set file attributes
2018-12-17T22:58:11.700555385Z 61 PC: 12b1f | Open file (Filename = '')
2018-12-17T22:58:11.709504727Z 87 PC: 12b24 | Get or set file date and time
2018-12-17T22:58:11.7110636Z 63 PC: 12b30 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:58:11.721779609Z 66 PC: 12b3f | Move file pointer
2018-12-17T22:58:11.72322854Z 44 PC: 12a50 | Get time 0x12a50: cmp dl, 0
0x12a53: je 0x12a4c
0x12a55: mov byte ptr [0x10a], dl
0x12a59: call 0x12a6f
0x12a5c: pop bx
0x12a5d: mov cx, 0x156
0x12a60: lea dx, word ptr [0x100]
0x12a64: mov ah, 0x40
0x12a66: int3
0x12a67: inc byte ptr [0x256]
0x12a6b: call 0x12a6f
0x12a6e: ret
0x12a6f: lea bx, word ptr [0x148]
0x12a73: mov al, byte ptr [0x10a]
0x12a77: cmp al, 0
0x12a79: je 0x12a87
0x12a7b: xor byte ptr [bx], al
0x12a7e: inc bx
0x12a7f: add al, bh
0x12a81: cmp bx, 0x235
2018-12-17T22:58:11.725692385Z 64 PC: 12a67 | Write file or device (Write 342 bytes on handle 5)
2018-12-17T22:58:11.728385979Z 87 PC: 12b4a | Get or set file date and time
2018-12-17T22:58:11.730102165Z 62 PC: 12b4d | Close file
2018-12-17T22:58:11.738995836Z 67 PC: 12b58 | Get or set file attributes
2018-12-17T22:58:11.749507162Z 79 PC: 12b08 | Find next file
2018-12-17T22:58:11.754060396Z 67 PC: 12b11 | Get or set file attributes
2018-12-17T22:58:11.759931316Z 67 PC: 12b1b | Get or set file attributes
2018-12-17T22:58:11.770235985Z 61 PC: 12b1f | Open file (Filename = '')
2018-12-17T22:58:11.775432415Z 87 PC: 12b24 | Get or set file date and time
2018-12-17T22:58:11.776702244Z 63 PC: 12b30 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:58:11.780916041Z 66 PC: 12b3f | Move file pointer
2018-12-17T22:58:11.783743904Z 44 PC: 12a50 | Get time 0x12a50: cmp dl, 0
0x12a53: je 0x12a4c
0x12a55: mov byte ptr [0x10a], dl
0x12a59: call 0x12a6f
0x12a5c: pop bx
0x12a5d: mov cx, 0x156
0x12a60: lea dx, word ptr [0x100]
0x12a64: mov ah, 0x40
0x12a66: int3
0x12a67: inc byte ptr [0x256]
0x12a6b: call 0x12a6f
0x12a6e: ret
0x12a6f: lea bx, word ptr [0x148]
0x12a73: mov al, byte ptr [0x10a]
0x12a77: cmp al, 0
0x12a79: je 0x12a87
0x12a7b: xor byte ptr [bx], al
0x12a7e: inc bx
0x12a7f: add al, bh
0x12a81: cmp bx, 0x235
2018-12-17T22:58:11.786340363Z 64 PC: 12a67 | Write file or device (Write 342 bytes on handle 5)
2018-12-17T22:58:11.789661667Z 87 PC: 12b4a | Get or set file date and time
2018-12-17T22:58:11.791835748Z 62 PC: 12b4d | Close file
2018-12-17T22:58:11.801253613Z 67 PC: 12b58 | Get or set file attributes
2018-12-17T22:58:11.812730916Z 79 PC: 12b08 | Find next file
2018-12-17T22:58:11.816135097Z 67 PC: 12b11 | Get or set file attributes
2018-12-17T22:58:11.82271795Z 67 PC: 12b1b | Get or set file attributes
2018-12-17T22:58:11.833608893Z 61 PC: 12b1f | Open file (Filename = '')
2018-12-17T22:58:11.841110947Z 87 PC: 12b24 | Get or set file date and time
2018-12-17T22:58:11.842874824Z 63 PC: 12b30 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:58:11.849903528Z 66 PC: 12b3f | Move file pointer
2018-12-17T22:58:11.851380482Z 44 PC: 12a50 | Get time 0x12a50: cmp dl, 0
0x12a53: je 0x12a4c
0x12a55: mov byte ptr [0x10a], dl
0x12a59: call 0x12a6f
0x12a5c: pop bx
0x12a5d: mov cx, 0x156
0x12a60: lea dx, word ptr [0x100]
0x12a64: mov ah, 0x40
0x12a66: int3
0x12a67: inc byte ptr [0x256]
0x12a6b: call 0x12a6f
0x12a6e: ret
0x12a6f: lea bx, word ptr [0x148]
0x12a73: mov al, byte ptr [0x10a]
0x12a77: cmp al, 0
0x12a79: je 0x12a87
0x12a7b: xor byte ptr [bx], al
0x12a7e: inc bx
0x12a7f: add al, bh
0x12a81: cmp bx, 0x235
2018-12-17T22:58:11.855039118Z 64 PC: 12a67 | Write file or device (Write 342 bytes on handle 5)
2018-12-17T22:58:11.858208511Z 87 PC: 12b4a | Get or set file date and time
2018-12-17T22:58:11.859967012Z 62 PC: 12b4d | Close file
2018-12-17T22:58:11.869200064Z 67 PC: 12b58 | Get or set file attributes
2018-12-17T22:58:11.88123212Z 59 PC: 12af4 | Change current directory
2018-12-17T22:58:11.883562003Z 37 PC: 12b00 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')