Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Feci.6000

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:11:52.411190842Z 53 PC: 13cba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:11:52.41311758Z 53 PC: 13cba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:11:52.41434754Z 53 PC: 13cba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:11:52.415527793Z 53 PC: 13cba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:11:52.41718953Z 53 PC: 13cba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:11:52.418239677Z 53 PC: 13cba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:11:52.419413434Z 53 PC: 13cba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:11:52.421075238Z 53 PC: 13cba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:11:52.422221037Z 53 PC: 13cba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:11:52.423518563Z 53 PC: 13cba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:11:52.425600591Z 53 PC: 13cba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:11:52.426769346Z 53 PC: 13cba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:11:52.428167571Z 53 PC: 13cba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:11:52.430065769Z 53 PC: 13cba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:11:52.43225147Z 53 PC: 13cba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:11:52.43352715Z 53 PC: 13cba | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:11:52.434709123Z 53 PC: 13cba | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:11:52.437603787Z 53 PC: 13cba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:11:52.438858668Z 53 PC: 13cba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:11:52.440170193Z 37 PC: 13ccf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:11:52.442255656Z 37 PC: 13cd7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:11:52.443663982Z 37 PC: 13cdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:11:52.445062059Z 37 PC: 13ce7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:11:52.457440552Z 68 PC: 149c2 | I/O control for devices (Set for = '')
2018-12-17T22:11:52.459241288Z 42 PC: 13aa7 | Get date 0x13aa7: xor ah, ah
0x13aa9: les di, ptr [bp + 6]
0x13aac: stosw word ptr es:[di], ax
0x13aad: mov al, dl
0x13aaf: les di, ptr [bp + 0xa]
0x13ab2: stosw word ptr es:[di], ax
0x13ab3: mov al, dh
0x13ab5: les di, ptr [bp + 0xe]
0x13ab8: stosw word ptr es:[di], ax
0x13ab9: xchg ax, cx
0x13aba: les di, ptr [bp + 0x12]
0x13abd: stosw word ptr es:[di], ax
0x13abe: pop bp
0x13abf: retf 0x10
0x13ac2: push bp
0x13ac3: mov bp, sp
0x13ac5: mov cx, word ptr [bp + 0xa]
0x13ac8: mov dh, byte ptr [bp + 8]
0x13acb: mov dl, byte ptr [bp + 6]
0x13ace: mov ah, 0x2b
2018-12-17T22:11:52.461366115Z 48 PC: 145d3 | Get DOS version
2018-12-17T22:11:52.466095501Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:52.476074218Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:52.768998159Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:52.772943901Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:53.155462883Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:53.157545292Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:53.542486378Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:53.545497411Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:53.873466689Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:53.876337376Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:54.237958601Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:54.240839738Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:54.591424031Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:54.602211779Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:54.924952197Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:54.928473935Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:55.308209818Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:55.311598546Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:55.6398195Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:55.643003416Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:56.016939975Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:56.019866822Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:56.357370804Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:56.360695018Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:56.712261799Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:56.722839454Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:57.074271999Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:57.077528527Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:57.456876175Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:57.459811045Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:57.9008115Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:57.905023831Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:58.342218178Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:58.344860785Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:58.774477692Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:58.784941092Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:59.224379099Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:59.228882596Z 54 PC: 13b1c | Get free disk space
2018-12-17T22:11:59.593033424Z 54 PC: 13b35 | Get free disk space
2018-12-17T22:11:59.596158996Z 64 PC: 140d8 | Write file or device (Write 11 bytes on handle 1)
2018-12-17T22:11:59.599983865Z 64 PC: 140d8 | Write file or device (Write 8 bytes on handle 1)
2018-12-17T22:11:59.603060947Z 64 PC: 140d8 | Write file or device (Write 14 bytes on handle 1)
2018-12-17T22:11:59.607611923Z 64 PC: 140d8 | Write file or device (Write 10 bytes on handle 1)
2018-12-17T22:11:59.611224798Z 64 PC: 140d8 | Write file or device (Write 17 bytes on handle 1)
2018-12-17T22:11:59.615225494Z 1 PC: 13586 | Character input