Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Legs.7000

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:02:00.908863575Z 48 PC: 12b4b | Get DOS version
2018-12-17T22:02:00.91120831Z 53 PC: 12c83 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:00.912504853Z 53 PC: 12c90 | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:02:00.920935596Z 53 PC: 12c9d | Get interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T22:02:00.923174988Z 53 PC: 12caa | Get interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T22:02:00.924596191Z 37 PC: 12cbe | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:00.926176582Z 74 PC: 12bf3 | Reallocate memory
2018-12-17T22:02:00.928509361Z 68 PC: 13f49 | I/O control for devices (Set for = '1')
2018-12-17T22:02:00.931191748Z 68 PC: 13f49 | I/O control for devices (Set for = '')
2018-12-17T22:02:00.933607731Z 61 PC: 14119 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:02:00.940127812Z 68 PC: 13eed | I/O control for devices (Set for = '')
2018-12-17T22:02:00.94224559Z 63 PC: 14202 | Read file or device (Read 7000 bytes on handle 5)
2018-12-17T22:02:00.9496616Z 62 PC: 13dae | Close file
2018-12-17T22:02:00.951251054Z 25 PC: 13cb7 | Get default drive
2018-12-17T22:02:00.95287111Z 71 PC: 13e6f | Get current directory
2018-12-17T22:02:00.955812455Z 47 PC: 13dca | Get disk transfer address
2018-12-17T22:02:00.956926038Z 26 PC: 13dd3 | Set disk transfer address
2018-12-17T22:02:00.958527891Z 78 PC: 13ddd | Find first file
2018-12-17T22:02:00.965239452Z 26 PC: 13de5 | Set disk transfer address
2018-12-17T22:02:00.966387082Z 67 PC: 13cd6 | Get or set file attributes
2018-12-17T22:02:00.973288007Z 67 PC: 13cd6 | Get or set file attributes
2018-12-17T22:02:00.989075691Z 61 PC: 14119 | Open file (Filename = '')
2018-12-17T22:02:00.996138429Z 68 PC: 13eed | I/O control for devices (Set for = '6c#![% u3?&8u_^%]#')
2018-12-17T22:02:00.998855138Z 66 PC: 13f6d | Move file pointer
2018-12-17T22:02:01.000642437Z 63 PC: 14202 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:02:01.003663429Z 62 PC: 13dae | Close file
2018-12-17T22:02:01.007783282Z 47 PC: 13dfc | Get disk transfer address
2018-12-17T22:02:01.012150445Z 26 PC: 13e05 | Set disk transfer address
2018-12-17T22:02:01.014301606Z 79 PC: 13e09 | Find next file
2018-12-17T22:02:01.01764879Z 26 PC: 13e11 | Set disk transfer address
2018-12-17T22:02:01.019208077Z 47 PC: 13dca | Get disk transfer address
2018-12-17T22:02:01.020550576Z 26 PC: 13dd3 | Set disk transfer address
2018-12-17T22:02:01.022166759Z 78 PC: 13ddd | Find first file
2018-12-17T22:02:01.028369179Z 26 PC: 13de5 | Set disk transfer address
2018-12-17T22:02:01.029800381Z 67 PC: 13cd6 | Get or set file attributes
2018-12-17T22:02:01.037015415Z 67 PC: 13cd6 | Get or set file attributes
2018-12-17T22:02:01.060018162Z 61 PC: 14119 | Open file (Filename = '')
2018-12-17T22:02:01.066899265Z 68 PC: 13eed | I/O control for devices (Set for = '6c#![% u3?&8u_^%]#')
2018-12-17T22:02:01.068935755Z 66 PC: 13f6d | Move file pointer
2018-12-17T22:02:01.071283399Z 63 PC: 14202 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:02:01.077806056Z 87 PC: 13101 | Get or set file date and time
2018-12-17T22:02:01.079708672Z 66 PC: 13e32 | Move file pointer
2018-12-17T22:02:01.082308921Z 66 PC: 13e3f | Move file pointer
2018-12-17T22:02:01.084013912Z 66 PC: 13e4e | Move file pointer
2018-12-17T22:02:01.085677151Z 66 PC: 13f6d | Move file pointer
2018-12-17T22:02:01.088395275Z 63 PC: 14202 | Read file or device (Read 407 bytes on handle 5)
2018-12-17T22:02:01.091483905Z 66 PC: 13f6d | Move file pointer
2018-12-17T22:02:01.093188233Z 64 PC: 144e8 | Write file or device (Write 7000 bytes on handle 5)
2018-12-17T22:02:01.103025726Z 66 PC: 13f6d | Move file pointer
2018-12-17T22:02:01.105200806Z 64 PC: 144e8 | Write file or device (Write 407 bytes on handle 5)
2018-12-17T22:02:01.113519807Z 87 PC: 13203 | Get or set file date and time
2018-12-17T22:02:01.116032454Z 62 PC: 13dae | Close file
2018-12-17T22:02:01.123598157Z 59 PC: 13ca7 | Change current directory
2018-12-17T22:02:01.1277831Z 59 PC: 13ca7 | Change current directory
2018-12-17T22:02:01.130090936Z 14 PC: 13cc3 | Set default drive (Drive = 'A')
2018-12-17T22:02:01.132507086Z 67 PC: 13cd6 | Get or set file attributes
2018-12-17T22:02:01.138426838Z 67 PC: 13cd6 | Get or set file attributes
2018-12-17T22:02:01.155953851Z 61 PC: 14119 | Open file (Filename = '')
2018-12-17T22:02:01.168149582Z 68 PC: 13eed | I/O control for devices (Set for = '6c#![% u3?&8u_^%]#')
2018-12-17T22:02:01.169574895Z 44 PC: 138dc | Get time 0x138dc: mov word ptr [si], cx
0x138de: mov word ptr [si + 2], dx
0x138e1: pop si
0x138e2: pop bp
0x138e3: ret
0x138e4: push bp
0x138e5: mov bp, sp
0x138e7: sub sp, 6
0x138ea: push si
0x138eb: push di
0x138ec: mov di, word ptr [bp + 6]
0x138ef: push di
0x138f0: mov ax, word ptr [bp + 0xc]
0x138f3: or ax, 2
0x138f6: push ax
0x138f7: call 0x142de
0x138fa: mov di, ax
0x138fc: or ax, ax
0x138fe: jne 0x1390b
0x13900: mov word ptr [0x2369], 2
2018-12-17T22:02:01.171857314Z 87 PC: 12f05 | Get or set file date and time
2018-12-17T22:02:01.173883664Z 66 PC: 13e32 | Move file pointer
2018-12-17T22:02:01.175201885Z 66 PC: 13e3f | Move file pointer
2018-12-17T22:02:01.17652595Z 66 PC: 13e4e | Move file pointer
2018-12-17T22:02:01.178845632Z 66 PC: 13f6d | Move file pointer
2018-12-17T22:02:01.180241318Z 63 PC: 14202 | Read file or device (Read 46 bytes on handle 5)
2018-12-17T22:02:01.192905186Z 66 PC: 13f6d | Move file pointer
2018-12-17T22:02:01.195559046Z 64 PC: 144e8 | Write file or device (Write 46 bytes on handle 5)
2018-12-17T22:02:01.20274754Z 66 PC: 13cf6 | Move file pointer
2018-12-17T22:02:01.204351304Z 66 PC: 13d07 | Move file pointer
2018-12-17T22:02:01.209011145Z 66 PC: 13d79 | Move file pointer
2018-12-17T22:02:01.210469326Z 64 PC: 13d81 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:02:01.219429952Z 66 PC: 13d8f | Move file pointer
2018-12-17T22:02:01.221691548Z 87 PC: 13022 | Get or set file date and time
2018-12-17T22:02:01.223338682Z 62 PC: 13dae | Close file
2018-12-17T22:02:01.232526567Z 47 PC: 13dca | Get disk transfer address
2018-12-17T22:02:01.234960282Z 26 PC: 13dd3 | Set disk transfer address
2018-12-17T22:02:01.23726981Z 78 PC: 13ddd | Find first file
2018-12-17T22:02:01.244334529Z 26 PC: 13de5 | Set disk transfer address
2018-12-17T22:02:01.248061259Z 41 PC: 14c92 | Parse filename
2018-12-17T22:02:01.249772036Z 41 PC: 14ca0 | Parse filename
2018-12-17T22:02:01.251445335Z 75 PC: 14ce0 | Execute program
2018-12-17T22:02:01.263135235Z 77 PC: 14d04 | Get program return code
2018-12-17T22:02:01.264653293Z 61 PC: 14119 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:02:01.272200917Z 68 PC: 13eed | I/O control for devices (Set for = '')
2018-12-17T22:02:01.274887512Z 66 PC: 13f6d | Move file pointer
2018-12-17T22:02:01.276347628Z 63 PC: 14202 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:02:01.278205749Z 87 PC: 13101 | Get or set file date and time
2018-12-17T22:02:01.280129941Z 66 PC: 13e32 | Move file pointer
2018-12-17T22:02:01.281665144Z 66 PC: 13e3f | Move file pointer
2018-12-17T22:02:01.283212023Z 66 PC: 13e4e | Move file pointer
2018-12-17T22:02:01.28547369Z 66 PC: 13f6d | Move file pointer
2018-12-17T22:02:01.287193933Z 63 PC: 14202 | Read file or device (Read 46 bytes on handle 5)
2018-12-17T22:02:01.290300326Z 66 PC: 13f6d | Move file pointer
2018-12-17T22:02:01.292598601Z 64 PC: 144e8 | Write file or device (Write 7000 bytes on handle 5)
2018-12-17T22:02:01.302222058Z 66 PC: 13f6d | Move file pointer
2018-12-17T22:02:01.304233589Z 64 PC: 144e8 | Write file or device (Write 46 bytes on handle 5)
2018-12-17T22:02:01.307527246Z 87 PC: 13203 | Get or set file date and time
2018-12-17T22:02:01.309248432Z 62 PC: 13dae | Close file
2018-12-17T22:02:01.317940262Z 37 PC: 12cca | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:01.320951221Z 37 PC: 12cd5 | Set interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:02:01.322383148Z 37 PC: 12ce0 | Set interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T22:02:01.323709334Z 37 PC: 12ceb | Set interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T22:02:01.325495255Z 76 PC: 12c74 | Terminate with return code (Return code = '0')