Sample viewer

vx.netlux.org/Virus.DOS.HLLO.8400

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:04:43.215474416Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:04:43.217876263Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:04:43.219366633Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:04:43.220978818Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:04:43.223537956Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:04:43.225089357Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:04:43.226570705Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:04:43.228275208Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:04:43.230993522Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:04:43.233349574Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:04:43.235728008Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:04:43.239194503Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:04:43.240258403Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:04:43.24150598Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:04:43.244122639Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:04:43.246083403Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:04:43.247958355Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:04:43.250797469Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:04:43.252843736Z 53 PC: 13bb2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:04:43.254892852Z 37 PC: 13bc7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:04:43.257746632Z 37 PC: 13bcf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:04:43.260151217Z 37 PC: 13bd7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:04:43.262685096Z 37 PC: 13bdf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:04:43.265813741Z 68 PC: 13f4f | I/O control for devices (Set for = '')
2018-12-17T23:04:43.358967216Z 37 PC: 13325 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:04:43.360680132Z 44 PC: 13959 | Get time 0x13959: xor ah, ah
0x1395b: mov al, dl
0x1395d: les di, ptr [bp + 6]
0x13960: stosw word ptr es:[di], ax
0x13961: mov al, dh
0x13963: les di, ptr [bp + 0xa]
0x13966: stosw word ptr es:[di], ax
0x13967: mov al, cl
0x13969: les di, ptr [bp + 0xe]
0x1396c: stosw word ptr es:[di], ax
0x1396d: mov al, ch
0x1396f: les di, ptr [bp + 0x12]
0x13972: stosw word ptr es:[di], ax
0x13973: pop bp
0x13974: retf 0x10
0x13977: push bp
0x13978: mov bp, sp
0x1397a: mov ch, byte ptr [bp + 0xc]
0x1397d: mov cl, byte ptr [bp + 0xa]
0x13980: mov dh, byte ptr [bp + 8]
2018-12-17T23:04:43.363926226Z 41 PC: 13aaf | Parse filename
2018-12-17T23:04:43.366343747Z 41 PC: 13abd | Parse filename
2018-12-17T23:04:43.368330634Z 75 PC: 13ac8 | Execute program
2018-12-17T23:04:43.391769906Z 80 PC: 274e9 | Set current PSP
2018-12-17T23:04:43.393879808Z 48 PC: 274ee | Get DOS version
2018-12-17T23:04:43.395657344Z 99 PC: 2dcd0 | Get DBCS lead byte table pointer
2018-12-17T23:04:43.39867161Z 101 PC: 27574 | Get extended country info
2018-12-17T23:04:43.400716572Z 99 PC: 2757a | Get DBCS lead byte table pointer
2018-12-17T23:04:43.403077348Z 74 PC: 275dc | Reallocate memory
2018-12-17T23:04:43.404714912Z 25 PC: 27613 | Get default drive
2018-12-17T23:04:43.406733914Z 37 PC: 270d3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:04:43.408058606Z 37 PC: 270da | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:04:43.409432335Z 37 PC: 270e1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:04:43.415253841Z 74 PC: 2627c | Reallocate memory
2018-12-17T23:04:43.416987212Z 72 PC: 262bd | Allocate memory
2018-12-17T23:04:43.418771006Z 72 PC: 262f5 | Allocate memory
2018-12-17T23:04:43.421818587Z 72 PC: 262fd | Allocate memory