Sample viewer

vx.netlux.org/Virus.DOS.Bolero.1300

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:52:44.197146171Z 67 PC: 9f3ad | Get or set file attributes
2018-12-17T21:52:44.536053194Z 61 PC: 9f3b2 | Open file (Filename = 'c:\dos\format.com')
2018-12-17T21:52:44.543623284Z 87 PC: 9f3be | Get or set file date and time
2018-12-17T21:52:44.545573038Z 63 PC: 9f3d4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T21:52:44.552141643Z 66 PC: 9f3e6 | Move file pointer
2018-12-17T21:52:44.554476227Z 44 PC: 9f45e | Get time 0x9f45e: mov di, 0x535
0x9f461: mov cx, 0x4f3
0x9f464: add byte ptr cs:[di], cl
0x9f467: add byte ptr cs:[di], dl
0x9f46a: cmp dl, 0x1e
0x9f46d: jb 0x9f475
0x9f46f: xor byte ptr cs:[di], dl
0x9f472: jmp 0x9f478
0x9f474: nop
0x9f475: add byte ptr cs:[di], dl
0x9f478: inc di
0x9f479: loop 0x9f464
0x9f47b: cmp dl, 0x1e
0x9f47e: jae 0x9f486
0x9f480: mov byte ptr cs:[0x52a], 0x28
0x9f486: mov byte ptr cs:[0x528], dl
0x9f48b: pop ax
0x9f48c: pop dx
0x9f48d: pop si
0x9f48e: pop es
2018-12-17T21:52:44.558196747Z 44 PC: 9f335 | Get time 0x9f335: cmp dl, 0x62
0x9f338: jb 0x9f34e
0x9f33a: mov ax, cs
0x9f33c: push ax
0x9f33d: pop ds
0x9f33e: mov dx, 0x4a9
0x9f341: mov ah, 0x40
0x9f343: mov byte ptr cs:[0x4bc], 1
0x9f349: mov cx, 0xf
0x9f34c: int 0x21
0x9f34e: pop ax
0x9f34f: pop dx
0x9f350: pop ds
0x9f351: pop cx
0x9f352: jmp 0x9f367
0x9f354: nop
0x9f355: pushf
0x9f356: pushaw
0x9f357: push ax
0x9f358: push dx
2018-12-17T21:52:44.562357948Z 64 PC: 9f411 | Write file or device (Write 1300 bytes on handle 5)
2018-12-17T21:52:44.57097924Z 66 PC: 9f41a | Move file pointer
2018-12-17T21:52:44.573056571Z 44 PC: 9f335 | Get time 0x9f335: cmp dl, 0x62
0x9f338: jb 0x9f34e
0x9f33a: mov ax, cs
0x9f33c: push ax
0x9f33d: pop ds
0x9f33e: mov dx, 0x4a9
0x9f341: mov ah, 0x40
0x9f343: mov byte ptr cs:[0x4bc], 1
0x9f349: mov cx, 0xf
0x9f34c: int 0x21
0x9f34e: pop ax
0x9f34f: pop dx
0x9f350: pop ds
0x9f351: pop cx
0x9f352: jmp 0x9f367
0x9f354: nop
0x9f355: pushf
0x9f356: pushaw
0x9f357: push ax
0x9f358: push dx
2018-12-17T21:52:44.576511992Z 64 PC: 9f424 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T21:52:44.579423261Z 87 PC: 9f436 | Get or set file date and time
2018-12-17T21:52:44.580954874Z 62 PC: 9f446 | Close file
2018-12-17T21:52:44.589267569Z 198 PC: 13bed | UNKNOWN!
2018-12-17T21:52:44.590368706Z 53 PC: 13c83 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T21:52:44.591643746Z 53 PC: 13c8c | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T21:52:44.593263975Z 37 PC: 13ca5 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T21:52:44.595168938Z 37 PC: 13cfc | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T21:52:44.596805103Z 37 PC: 13d0a | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T21:52:44.598500152Z 26 PC: 12a8d | Set disk transfer address
2018-12-17T21:52:44.600596839Z 15 PC: 12a96 | Open file (Filename = ' win TEMP=C:\WINDOWS\TEMP D Dosedit Date_:05-09-84 By Jack Gersbach Burlington, Vt.  !\! upP')
2018-12-17T21:52:44.603158882Z 9 PC: 132db | Display string (String= ' Alias List: ')
2018-12-17T21:52:44.608599844Z 2 PC: 12cf6 | Character output (Char = '0d')
2018-12-17T21:52:44.612437355Z 2 PC: 12cf6 | Character output (Char = '0a')
2018-12-17T21:52:44.617474722Z 49 PC: 13388 | Terminate and stay resident (Return code = '0' | Memory size = '162')