Sample viewer

vx.netlux.org/Virus.DOS.Nov7.482

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:14:25.817321398Z 42 PC: 12e32 | Get date 0x12e32: cmp dh, 0xb
0x12e35: jne 0x12e61
0x12e37: cmp dl, 7
0x12e3a: jne 0x12e61
0x12e3c: mov di, 0x1d1
0x12e3f: nop
0x12e40: push si
0x12e41: add si, di
0x12e43: lodsb al, byte ptr [si]
0x12e44: or al, al
0x12e46: je 0x12e52
0x12e48: shr al, 1
0x12e4a: mov ah, 0xe
0x12e4c: mov bl, 7
0x12e4e: int 0x10
0x12e50: jmp 0x12e43
0x12e52: mov cx, 1
0x12e55: mov dx, 0x80
0x12e58: mov ax, 0x301
0x12e5b: int 0x13
2018-12-17T22:14:25.820659164Z 9 PC: 12e26 | Display string (String= 'Hello - Copyright S & S International, 1990 ')

{"DateBased":true,"Day":7,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2721,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:19.193311486Z 42 PC: 12e32 | Get date 0x12e32: cmp dh, 0xb
0x12e35: jne 0x12e61
0x12e37: cmp dl, 7
0x12e3a: jne 0x12e61
0x12e3c: mov di, 0x1d1
0x12e3f: nop
0x12e40: push si
0x12e41: add si, di
0x12e43: lodsb al, byte ptr [si]
0x12e44: or al, al
0x12e46: je 0x12e52
0x12e48: shr al, 1
0x12e4a: mov ah, 0xe
0x12e4c: mov bl, 7
0x12e4e: int 0x10
0x12e50: jmp 0x12e43
0x12e52: mov cx, 1
0x12e55: mov dx, 0x80
0x12e58: mov ax, 0x301
0x12e5b: int 0x13

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2721,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:19.441749251Z 42 PC: 12e32 | Get date 0x12e32: cmp dh, 0xb
0x12e35: jne 0x12e61
0x12e37: cmp dl, 7
0x12e3a: jne 0x12e61
0x12e3c: mov di, 0x1d1
0x12e3f: nop
0x12e40: push si
0x12e41: add si, di
0x12e43: lodsb al, byte ptr [si]
0x12e44: or al, al
0x12e46: je 0x12e52
0x12e48: shr al, 1
0x12e4a: mov ah, 0xe
0x12e4c: mov bl, 7
0x12e4e: int 0x10
0x12e50: jmp 0x12e43
0x12e52: mov cx, 1
0x12e55: mov dx, 0x80
0x12e58: mov ax, 0x301
0x12e5b: int 0x13
2018-12-25T11:46:19.444666473Z 9 PC: 12e26 | Display string (String= 'Hello - Copyright S & S International, 1990 ')

{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2721,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:19.820751232Z 42 PC: 12e32 | Get date 0x12e32: cmp dh, 0xb
0x12e35: jne 0x12e61
0x12e37: cmp dl, 7
0x12e3a: jne 0x12e61
0x12e3c: mov di, 0x1d1
0x12e3f: nop
0x12e40: push si
0x12e41: add si, di
0x12e43: lodsb al, byte ptr [si]
0x12e44: or al, al
0x12e46: je 0x12e52
0x12e48: shr al, 1
0x12e4a: mov ah, 0xe
0x12e4c: mov bl, 7
0x12e4e: int 0x10
0x12e50: jmp 0x12e43
0x12e52: mov cx, 1
0x12e55: mov dx, 0x80
0x12e58: mov ax, 0x301
0x12e5b: int 0x13
2018-12-25T11:46:19.823155747Z 9 PC: 12e26 | Display string (String= 'Hello - Copyright S & S International, 1990 ')