Sample viewer

vx.netlux.org/Virus.DOS.Birgit.330

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:52:37.582742136Z 53 PC: 12aa2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:37.584197897Z 37 PC: 12ab2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:37.585359796Z 53 PC: 12ab9 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:37.58650718Z 37 PC: 12ac2 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T21:52:37.587736524Z 78 PC: 12ade | Find first file
2018-12-17T21:52:37.593859147Z 67 PC: 12afb | Get or set file attributes
2018-12-17T21:52:37.599449811Z 67 PC: 12b05 | Get or set file attributes
2018-12-17T21:52:37.824680126Z 61 PC: 12b09 | Open file (Filename = '')
2018-12-17T21:52:37.831684626Z 87 PC: 12b0e | Get or set file date and time
2018-12-17T21:52:37.833176789Z 63 PC: 12b19 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:52:37.83930274Z 66 PC: 12b28 | Move file pointer
2018-12-17T21:52:37.842411572Z 44 PC: 12a50 | Get time 0x12a50: mov byte ptr [0x10a], dl
0x12a54: call 0x12a69
0x12a57: pop bx
0x12a58: mov cx, 0x14a
0x12a5b: mov dx, 0x100
0x12a5e: mov ah, 0x40
0x12a60: int3
0x12a61: inc byte ptr [0x24a]
0x12a65: call 0x12a69
0x12a68: ret
0x12a69: mov bx, 0x141
0x12a6c: mov al, byte ptr [0x10a]
0x12a70: cmp al, 0
0x12a72: je 0x12a80
0x12a74: xor byte ptr [bx], al
0x12a77: inc bx
0x12a78: add al, bh
0x12a7a: cmp bx, 0x21b
0x12a7e: jle 0x12a74
0x12a80: ret
2018-12-17T21:52:37.844849277Z 64 PC: 12a61 | Write file or device (Write 330 bytes on handle 5)
2018-12-17T21:52:37.84753745Z 87 PC: 12b33 | Get or set file date and time
2018-12-17T21:52:37.849720532Z 62 PC: 12b36 | Close file
2018-12-17T21:52:37.857053246Z 67 PC: 12b41 | Get or set file attributes
2018-12-17T21:52:37.86754026Z 79 PC: 12ade | Find next file
2018-12-17T21:52:37.879470623Z 67 PC: 12afb | Get or set file attributes
2018-12-17T21:52:37.885076729Z 67 PC: 12b05 | Get or set file attributes
2018-12-17T21:52:37.894558968Z 61 PC: 12b09 | Open file (Filename = '')
2018-12-17T21:52:37.902023076Z 87 PC: 12b0e | Get or set file date and time
2018-12-17T21:52:37.903396211Z 63 PC: 12b19 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:52:37.910254853Z 66 PC: 12b28 | Move file pointer
2018-12-17T21:52:37.912015279Z 44 PC: 12a50 | Get time 0x12a50: mov byte ptr [0x10a], dl
0x12a54: call 0x12a69
0x12a57: pop bx
0x12a58: mov cx, 0x14a
0x12a5b: mov dx, 0x100
0x12a5e: mov ah, 0x40
0x12a60: int3
0x12a61: inc byte ptr [0x24a]
0x12a65: call 0x12a69
0x12a68: ret
0x12a69: mov bx, 0x141
0x12a6c: mov al, byte ptr [0x10a]
0x12a70: cmp al, 0
0x12a72: je 0x12a80
0x12a74: xor byte ptr [bx], al
0x12a77: inc bx
0x12a78: add al, bh
0x12a7a: cmp bx, 0x21b
0x12a7e: jle 0x12a74
0x12a80: ret
2018-12-17T21:52:37.914193433Z 64 PC: 12a61 | Write file or device (Write 330 bytes on handle 5)
2018-12-17T21:52:37.917545311Z 87 PC: 12b33 | Get or set file date and time
2018-12-17T21:52:37.919934961Z 62 PC: 12b36 | Close file
2018-12-17T21:52:38.266868267Z 67 PC: 12b41 | Get or set file attributes
2018-12-17T21:52:38.574184791Z 79 PC: 12ade | Find next file
2018-12-17T21:52:38.576976216Z 67 PC: 12afb | Get or set file attributes
2018-12-17T21:52:38.584025632Z 67 PC: 12b05 | Get or set file attributes
2018-12-17T21:52:38.593520979Z 61 PC: 12b09 | Open file (Filename = '')
2018-12-17T21:52:38.600046131Z 87 PC: 12b0e | Get or set file date and time
2018-12-17T21:52:38.602071842Z 63 PC: 12b19 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:52:38.608200113Z 66 PC: 12b28 | Move file pointer
2018-12-17T21:52:38.609831447Z 44 PC: 12a50 | Get time 0x12a50: mov byte ptr [0x10a], dl
0x12a54: call 0x12a69
0x12a57: pop bx
0x12a58: mov cx, 0x14a
0x12a5b: mov dx, 0x100
0x12a5e: mov ah, 0x40
0x12a60: int3
0x12a61: inc byte ptr [0x24a]
0x12a65: call 0x12a69
0x12a68: ret
0x12a69: mov bx, 0x141
0x12a6c: mov al, byte ptr [0x10a]
0x12a70: cmp al, 0
0x12a72: je 0x12a80
0x12a74: xor byte ptr [bx], al
0x12a77: inc bx
0x12a78: add al, bh
0x12a7a: cmp bx, 0x21b
0x12a7e: jle 0x12a74
0x12a80: ret
2018-12-17T21:52:38.612575362Z 64 PC: 12a61 | Write file or device (Write 330 bytes on handle 5)
2018-12-17T21:52:38.615214498Z 87 PC: 12b33 | Get or set file date and time
2018-12-17T21:52:38.61656964Z 62 PC: 12b36 | Close file
2018-12-17T21:52:38.625069218Z 67 PC: 12b41 | Get or set file attributes
2018-12-17T21:52:38.634666998Z 79 PC: 12ade | Find next file
2018-12-17T21:52:38.637200428Z 67 PC: 12afb | Get or set file attributes
2018-12-17T21:52:38.643506199Z 67 PC: 12b05 | Get or set file attributes
2018-12-17T21:52:38.653269322Z 61 PC: 12b09 | Open file (Filename = '')
2018-12-17T21:52:38.659548846Z 87 PC: 12b0e | Get or set file date and time
2018-12-17T21:52:38.661295304Z 63 PC: 12b19 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:52:38.66738766Z 66 PC: 12b28 | Move file pointer
2018-12-17T21:52:38.668624642Z 44 PC: 12a50 | Get time 0x12a50: mov byte ptr [0x10a], dl
0x12a54: call 0x12a69
0x12a57: pop bx
0x12a58: mov cx, 0x14a
0x12a5b: mov dx, 0x100
0x12a5e: mov ah, 0x40
0x12a60: int3
0x12a61: inc byte ptr [0x24a]
0x12a65: call 0x12a69
0x12a68: ret
0x12a69: mov bx, 0x141
0x12a6c: mov al, byte ptr [0x10a]
0x12a70: cmp al, 0
0x12a72: je 0x12a80
0x12a74: xor byte ptr [bx], al
0x12a77: inc bx
0x12a78: add al, bh
0x12a7a: cmp bx, 0x21b
0x12a7e: jle 0x12a74
0x12a80: ret
2018-12-17T21:52:38.671062689Z 64 PC: 12a61 | Write file or device (Write 330 bytes on handle 5)
2018-12-17T21:52:38.673965638Z 87 PC: 12b33 | Get or set file date and time
2018-12-17T21:52:38.675291377Z 62 PC: 12b36 | Close file
2018-12-17T21:52:38.683481703Z 67 PC: 12b41 | Get or set file attributes
2018-12-17T21:52:38.69356834Z 79 PC: 12ade | Find next file
2018-12-17T21:52:38.696084139Z 67 PC: 12afb | Get or set file attributes
2018-12-17T21:52:38.701827493Z 67 PC: 12b05 | Get or set file attributes
2018-12-17T21:52:38.711996804Z 61 PC: 12b09 | Open file (Filename = '')
2018-12-17T21:52:38.718298136Z 87 PC: 12b0e | Get or set file date and time
2018-12-17T21:52:38.719598138Z 63 PC: 12b19 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:52:38.725790344Z 66 PC: 12b28 | Move file pointer
2018-12-17T21:52:38.726946289Z 44 PC: 12a50 | Get time 0x12a50: mov byte ptr [0x10a], dl
0x12a54: call 0x12a69
0x12a57: pop bx
0x12a58: mov cx, 0x14a
0x12a5b: mov dx, 0x100
0x12a5e: mov ah, 0x40
0x12a60: int3
0x12a61: inc byte ptr [0x24a]
0x12a65: call 0x12a69
0x12a68: ret
0x12a69: mov bx, 0x141
0x12a6c: mov al, byte ptr [0x10a]
0x12a70: cmp al, 0
0x12a72: je 0x12a80
0x12a74: xor byte ptr [bx], al
0x12a77: inc bx
0x12a78: add al, bh
0x12a7a: cmp bx, 0x21b
0x12a7e: jle 0x12a74
0x12a80: ret
2018-12-17T21:52:38.729427523Z 64 PC: 12a61 | Write file or device (Write 330 bytes on handle 5)
2018-12-17T21:52:38.732063812Z 87 PC: 12b33 | Get or set file date and time
2018-12-17T21:52:38.733351606Z 62 PC: 12b36 | Close file
2018-12-17T21:52:38.740214548Z 67 PC: 12b41 | Get or set file attributes
2018-12-17T21:52:38.752983788Z 37 PC: 12ad6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')