Sample viewer

vx.netlux.org/Virus.DOS.HLLO.Joker.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:54:37.072633399Z 53 PC: 1384b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:54:37.074268537Z 53 PC: 13858 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:54:37.075489608Z 53 PC: 13865 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:54:37.076555759Z 53 PC: 13872 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:54:37.07817166Z 53 PC: 1387f | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:54:37.079421929Z 37 PC: 13892 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:54:37.080579037Z 37 PC: 1389a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:54:37.082329291Z 37 PC: 138a2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:54:37.083753474Z 68 PC: 13e9e | I/O control for devices (Set for = '')
2018-12-17T21:54:37.150973071Z 53 PC: 1321f | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:54:37.153053015Z 37 PC: 13232 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:54:37.154766241Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.156105486Z 78 PC: 1311e | Find first file
2018-12-17T21:54:37.162108282Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.163987862Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.166959392Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.168209825Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.171602064Z 44 PC: 13d2c | Get time 0x13d2c: mov word ptr [0x450a], cx
0x13d30: mov word ptr [0x450c], dx
0x13d34: retf
0x13d35: mov bx, sp
0x13d37: push ds
0x13d38: les di, ptr ss:[bx + 8]
0x13d3c: lds si, ptr ss:[bx + 4]
0x13d40: cld
0x13d41: xor ax, ax
0x13d43: stosw word ptr es:[di], ax
0x13d44: mov ax, 0xd7b0
0x13d47: stosw word ptr es:[di], ax
0x13d48: mov ax, 0x80
0x13d4b: stosw word ptr es:[di], ax
0x13d4c: xor ax, ax
0x13d4e: stosw word ptr es:[di], ax
0x13d4f: stosw word ptr es:[di], ax
0x13d50: stosw word ptr es:[di], ax
0x13d51: lea ax, word ptr [di + 0x74]
0x13d54: stosw word ptr es:[di], ax
2018-12-17T21:54:37.174172601Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.175406598Z 78 PC: 1311e | Find first file
2018-12-17T21:54:37.185211957Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.186454436Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.190150741Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.192448701Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.196137186Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.19769478Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.202607821Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.20389652Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.206871185Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.208655912Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.211916313Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.213034911Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.220336849Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.221745232Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.225266848Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.227571946Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.230956482Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.232121435Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.236464736Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.237859828Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.241196268Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.242651173Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.246511855Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.247678665Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.251282847Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.253009031Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.256671589Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.258164765Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.264625958Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.265889337Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.26947666Z 26 PC: 1311e | Set disk transfer address
2018-12-17T21:54:37.270860509Z 79 PC: 1311e | Find next file
2018-12-17T21:54:37.274387153Z 61 PC: 14214 | Open file (Filename = 'NC.EXE ')
2018-12-17T21:54:37.284362571Z 37 PC: 132fd | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:54:37.286045087Z 37 PC: 138ee | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:54:37.287130208Z 37 PC: 138f9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:54:37.289131988Z 37 PC: 13904 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:54:37.290852879Z 37 PC: 1390f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:54:37.292190529Z 37 PC: 1391a | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:54:37.29356782Z 76 PC: 13a5d | Terminate with return code (Return code = '0')