Sample viewer

vx.netlux.org/Virus.DOS.Comi.1947

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:28:46.60736272Z 42 PC: 13016 | Get date 0x13016: cmp dh, 2
0x13019: jne 0x1307d
0x1301b: cmp dl, 0xe
0x1301e: jne 0x1307d
0x13020: push es
0x13021: push ds
0x13022: push cs
0x13023: pop ds
0x13024: mov cx, 0xcd
0x13027: mov bx, 0
0x1302a: mov dx, 0x28
0x1302d: call 0x22e3e
0x13030: mov di, sp
0x13032: mov cl, 1
0x13034: mov ah, 0x13
0x13036: int 0x2f
0x13038: push es
0x13039: push bx
0x1303a: push ds
0x1303b: push dx
2018-12-17T22:28:46.610860294Z 171 PC: 13082 | UNKNOWN!
2018-12-17T22:28:46.612371233Z 53 PC: 1312b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:28:46.613769956Z 37 PC: 1314b | Set interrupt vector (Interrupt = '33' AKA 'Random read')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5135,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:53:44.116483408Z 42 PC: 13016 | Get date 0x13016: cmp dh, 2
0x13019: jne 0x1307d
0x1301b: cmp dl, 0xe
0x1301e: jne 0x1307d
0x13020: push es
0x13021: push ds
0x13022: push cs
0x13023: pop ds
0x13024: mov cx, 0xcd
0x13027: mov bx, 0
0x1302a: mov dx, 0x28
0x1302d: call 0x22e3e
0x13030: mov di, sp
0x13032: mov cl, 1
0x13034: mov ah, 0x13
0x13036: int 0x2f
0x13038: push es
0x13039: push bx
0x1303a: push ds
0x1303b: push dx
2018-12-25T11:53:44.118985799Z 171 PC: 13082 | UNKNOWN!
2018-12-25T11:53:44.12000123Z 53 PC: 1312b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:53:44.122895681Z 37 PC: 1314b | Set interrupt vector (Interrupt = '33' AKA 'Random read')

{"DateBased":true,"Day":1,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5135,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:53:44.291638045Z 42 PC: 13016 | Get date 0x13016: cmp dh, 2
0x13019: jne 0x1307d
0x1301b: cmp dl, 0xe
0x1301e: jne 0x1307d
0x13020: push es
0x13021: push ds
0x13022: push cs
0x13023: pop ds
0x13024: mov cx, 0xcd
0x13027: mov bx, 0
0x1302a: mov dx, 0x28
0x1302d: call 0x22e3e
0x13030: mov di, sp
0x13032: mov cl, 1
0x13034: mov ah, 0x13
0x13036: int 0x2f
0x13038: push es
0x13039: push bx
0x1303a: push ds
0x1303b: push dx
2018-12-25T11:53:44.302100523Z 171 PC: 13082 | UNKNOWN!
2018-12-25T11:53:44.303196461Z 53 PC: 1312b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:53:44.304302659Z 37 PC: 1314b | Set interrupt vector (Interrupt = '33' AKA 'Random read')

{"DateBased":true,"Day":14,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5135,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:53:44.371618526Z 42 PC: 13016 | Get date 0x13016: cmp dh, 2
0x13019: jne 0x1307d
0x1301b: cmp dl, 0xe
0x1301e: jne 0x1307d
0x13020: push es
0x13021: push ds
0x13022: push cs
0x13023: pop ds
0x13024: mov cx, 0xcd
0x13027: mov bx, 0
0x1302a: mov dx, 0x28
0x1302d: call 0x22e3e
0x13030: mov di, sp
0x13032: mov cl, 1
0x13034: mov ah, 0x13
0x13036: int 0x2f
0x13038: push es
0x13039: push bx
0x1303a: push ds
0x1303b: push dx
2018-12-25T11:53:44.374428581Z 2 PC: 12e4c | Character output (Char = '49')
2018-12-25T11:53:44.37681723Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.379155122Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.381483287Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.384349843Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.386720992Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.389684596Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.392445735Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.394718238Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.396987405Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.404640386Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.406998623Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.409313515Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.412148677Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.414167222Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.416214834Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.419114325Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.422013163Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.425127911Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.42843664Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.430827713Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.432944319Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.435973845Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.438195643Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.44023761Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.442478713Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.445627415Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.447653113Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.450169772Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.454543064Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.456721303Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.459049733Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.461819175Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.463972112Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.465988911Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.468761552Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.472372165Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.474655297Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.477786624Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.479826678Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.482131764Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.484740148Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.486944575Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.488917797Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.491482224Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.493704732Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.500306389Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.504778804Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.507200743Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.51137064Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.514757416Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.517723786Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.520062821Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.522425557Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.526217691Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.528269796Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.530156323Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.532910199Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.534933556Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.536955382Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.539921265Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.542328035Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.544631134Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.54705877Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.556519571Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.558574398Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.560986845Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.563696818Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.565562935Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.567475681Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.570316488Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.57245903Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.574424103Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.576982749Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.579074914Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.581370544Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.584552418Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.586903754Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.589126868Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.592201946Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.594784651Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.597794923Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.600817168Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.603410499Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.605688803Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.608710453Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.612752369Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.614915657Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.618728724Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.621189058Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.623202635Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.625349666Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.627877843Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.630011346Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.632259479Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.635428812Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.637652409Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.639962947Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.643143793Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.645436696Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.649126608Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.652177507Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.654407174Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.656628412Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.659532158Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.66203179Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.664239235Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.667195301Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.669675857Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.671954374Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.675113794Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.680051956Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.681965926Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.68468282Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.686761631Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.688927535Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.69153036Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.69362806Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.695558552Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.69842071Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.700562271Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.702765267Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.705067345Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.707954013Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.710106272Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.712625632Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.715467607Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.717715068Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.719920346Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.722431784Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.724357999Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.726323972Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.730411256Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.732653238Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.735019454Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.740267722Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.7424008Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.74454819Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.747615169Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.750387304Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.752323405Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.755175603Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.757318782Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.759932235Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.762653936Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.764627191Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.766575961Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.769541221Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.772345548Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.774809103Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.7777211Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.780104315Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.782333499Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.784971492Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.786982416Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.788981163Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.791761667Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.794298872Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.796394106Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.80914514Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.811607356Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.81378122Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.816794837Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.819056961Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.822378748Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.824845042Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.828082152Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.830144754Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.833451112Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.836145663Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.838112404Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.844595266Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.84658278Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.848698549Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.851112095Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.853870483Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.856086411Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.858948615Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.861104804Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.863364203Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.865320849Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.867298835Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.869818754Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.871864399Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.873803536Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.876714191Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.879111366Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.881131991Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.88531386Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.887929813Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.891796487Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.894844731Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.897119617Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.899364634Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.902552426Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.904781908Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.907011781Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.910038254Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.91262971Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.915628639Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.923589971Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.925688805Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.927736387Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.930569596Z 2 PC: 12e4c | Character output (See above)
2018-12-25T11:53:44.934850825Z 2 PC: 12e4c | Character output (See above)