Sample viewer

vx.netlux.org/Virus.DOS.VCC.367

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:05:07.27307007Z 26 PC: 12ac2 | Set disk transfer address
2018-12-17T22:05:07.27461942Z 37 PC: 12acd | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:05:07.275656468Z 37 PC: 12ad1 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:05:07.276565267Z 78 PC: 12b18 | Find first file
2018-12-17T22:05:07.282554798Z 61 PC: 12ba1 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:05:07.288776482Z 63 PC: 12bb0 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:05:07.294694915Z 66 PC: 12bbf | Move file pointer
2018-12-17T22:05:07.296298173Z 66 PC: 12bce | Move file pointer
2018-12-17T22:05:07.297528625Z 64 PC: 12bda | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:05:07.299892261Z 66 PC: 12be6 | Move file pointer
2018-12-17T22:05:07.317275298Z 44 PC: 12bea | Get time 0x12bea: mov byte ptr [bp + 0x16f], dl
0x12bee: call 0x12c04
0x12bf1: mov ah, 0x40
0x12bf3: mov cx, 0x16f
0x12bf6: lea dx, word ptr [bp + 6]
0x12bfa: int 0x21
0x12bfc: call 0x12c04
0x12bff: mov ah, 0x3e
0x12c01: int 0x21
0x12c03: ret
0x12c04: lea si, word ptr [bp + 0x11]
0x12c08: mov cx, 0x13f
0x12c0b: xor byte ptr [si], 5
0x12c0e: inc si
0x12c0f: dec cx
0x12c10: jne 0x12c0b
0x12c12: ret
0x12c13: add word ptr [bx], di
0x12c15: aas
0x12c16: aas
2018-12-17T22:05:07.31992366Z 64 PC: 12bfc | Write file or device (Write 367 bytes on handle 5)
2018-12-17T22:05:07.386725921Z 62 PC: 12c03 | Close file
2018-12-17T22:05:07.397313226Z 79 PC: 12b18 | Find next file
2018-12-17T22:05:07.399298581Z 61 PC: 12ba1 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:05:07.403732261Z 63 PC: 12bb0 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:05:07.408779169Z 66 PC: 12bbf | Move file pointer
2018-12-17T22:05:07.410473811Z 66 PC: 12bce | Move file pointer
2018-12-17T22:05:07.411544415Z 64 PC: 12bda | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:05:07.413351174Z 66 PC: 12be6 | Move file pointer
2018-12-17T22:05:07.415232269Z 44 PC: 12bea | Get time 0x12bea: mov byte ptr [bp + 0x16f], dl
0x12bee: call 0x12c04
0x12bf1: mov ah, 0x40
0x12bf3: mov cx, 0x16f
0x12bf6: lea dx, word ptr [bp + 6]
0x12bfa: int 0x21
0x12bfc: call 0x12c04
0x12bff: mov ah, 0x3e
0x12c01: int 0x21
0x12c03: ret
0x12c04: lea si, word ptr [bp + 0x11]
0x12c08: mov cx, 0x13f
0x12c0b: xor byte ptr [si], 0x3d
0x12c0e: inc si
0x12c0f: dec cx
0x12c10: jne 0x12c0b
0x12c12: ret
0x12c13: add word ptr [bx], di
0x12c15: aas
0x12c16: aas
2018-12-17T22:05:07.41684813Z 64 PC: 12bfc | Write file or device (Write 367 bytes on handle 5)
2018-12-17T22:05:07.418910107Z 62 PC: 12c03 | Close file
2018-12-17T22:05:07.429102925Z 26 PC: 12b28 | Set disk transfer address
2018-12-17T22:05:07.430379276Z 9 PC: 12aa2 | Display string (String= 'ABCDE - This is a 100 byte COM test, 1994 ')