Sample viewer

vx.netlux.org/Virus.DOS.Grog.2083

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:31:13.29915096Z 75 PC: 12ba2 | Execute program
2018-12-17T22:31:13.30045189Z 46 PC: 12ba9 | Set verify flag
2018-12-17T22:31:13.302514783Z 47 PC: 12bad | Get disk transfer address
2018-12-17T22:31:13.304266226Z 52 PC: 12c24 | Get InDOS flag pointer
2018-12-17T22:31:13.306039489Z 67 PC: 12c6b | Get or set file attributes
2018-12-17T22:31:13.311957397Z 98 PC: 12c76 | Get current PSP
2018-12-17T22:31:13.312935165Z 26 PC: 132c2 | Set disk transfer address
2018-12-17T22:31:13.314332339Z 53 PC: 9e3e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.316510599Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.318353768Z 67 PC: 9e3e2 | Get or set file attributes
2018-12-17T22:31:13.32917233Z 61 PC: 9e3e2 | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T22:31:13.335952596Z 87 PC: 9e3e2 | Get or set file date and time
2018-12-17T22:31:13.337292133Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.338562173Z 62 PC: 9e3e2 | Close file
2018-12-17T22:31:13.341276363Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.342303866Z 42 PC: 9e3e2 | Get date 0x9e3e2: ret
0x9e3e3: jne 0x9e3ba
0x9e3e5: int 0x20
0x9e3e7: and byte ptr [bx + 0x72], al
0x9e3ea: outsw dx, word ptr [si]
0x9e3eb: and byte ptr [esi + 0x34], dh
0x9e3ef: xor byte ptr cs:[bx + si], ah
0x9e3f2: imul si, word ptr [bp + di + 0x20], 0x6568
0x9e3f7: jb 0x9e45e
0x9e3f9: and word ptr [bx + si], sp
0x9e3fb: dec ax
0x9e3fc: popaw
0x9e3fd: dec ax
0x9e3fe: popaw
0x9e3ff: dec ax
0x9e400: popaw
0x9e401: and ax, di
0x9e403: inc ax
0x9e404: sbb word ptr [bx + si], ax
2018-12-17T22:31:13.345540573Z 67 PC: 12bd9 | Get or set file attributes
2018-12-17T22:31:13.354878528Z 78 PC: 132c2 | Find first file
2018-12-17T22:31:13.360799551Z 53 PC: 9e3e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.361896788Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.366989203Z 67 PC: 9e3e2 | Get or set file attributes
2018-12-17T22:31:13.373069942Z 61 PC: 9e3e2 | Open file
2018-12-17T22:31:13.380334253Z 87 PC: 9e3e2 | Get or set file date and time
2018-12-17T22:31:13.382328408Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.384194068Z 62 PC: 9e3e2 | Close file
2018-12-17T22:31:13.386407761Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.388103561Z 42 PC: 9e3e2 | Get date 0x9e3e2: ret
0x9e3e3: xchg ax, di
0x9e3e4: add bp, cx
0x9e3e6: and byte ptr [bx + si], ah
0x9e3e8: inc di
0x9e3e9: jb 0x9e45a
0x9e3eb: and byte ptr [esi + 0x34], dh
0x9e3ef: xor byte ptr cs:[bx + si], ah
0x9e3f2: imul si, word ptr [bp + di + 0x20], 0x6568
0x9e3f7: jb 0x9e45e
0x9e3f9: and word ptr [bx + si], sp
0x9e3fb: dec ax
0x9e3fc: popaw
0x9e3fd: dec ax
0x9e3fe: popaw
0x9e3ff: dec ax
0x9e400: popaw
0x9e401: and ax, di
0x9e403: inc ax
0x9e404: sbb word ptr [bx + si], ax
2018-12-17T22:31:13.391284508Z 67 PC: 12bf8 | Get or set file attributes
2018-12-17T22:31:13.397086532Z 79 PC: 132c2 | Find next file
2018-12-17T22:31:13.39997114Z 53 PC: 9e3e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.402174912Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.403505925Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.404727582Z 42 PC: 9e3e2 | Get date 0x9e3e2: ret
0x9e3e3: xchg ax, di
0x9e3e4: add bp, cx
0x9e3e6: and byte ptr [bx + si], ah
0x9e3e8: inc di
0x9e3e9: jb 0x9e45a
0x9e3eb: and byte ptr [esi + 0x34], dh
0x9e3ef: xor byte ptr cs:[bx + si], ah
0x9e3f2: imul si, word ptr [bp + di + 0x20], 0x6568
0x9e3f7: jb 0x9e45e
0x9e3f9: and word ptr [bx + si], sp
0x9e3fb: dec ax
0x9e3fc: popaw
0x9e3fd: dec ax
0x9e3fe: popaw
0x9e3ff: dec ax
0x9e400: popaw
0x9e401: and ax, di
0x9e403: inc ax
0x9e404: sbb word ptr [bx + si], ax
2018-12-17T22:31:13.407767753Z 67 PC: 12bf8 | Get or set file attributes
2018-12-17T22:31:13.413198886Z 79 PC: 132c2 | Find next file
2018-12-17T22:31:13.415657695Z 53 PC: 9e3e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.417121851Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.418600223Z 67 PC: 9e3e2 | Get or set file attributes
2018-12-17T22:31:13.424072489Z 61 PC: 9e3e2 | Open file
2018-12-17T22:31:13.431190299Z 87 PC: 9e3e2 | Get or set file date and time
2018-12-17T22:31:13.432860941Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.434263824Z 62 PC: 9e3e2 | Close file
2018-12-17T22:31:13.437192726Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.43824945Z 42 PC: 9e3e2 | Get date 0x9e3e2: ret
0x9e3e3: sbb ax, word ptr [bx + si]
0x9e3e5: int 0x20
0x9e3e7: and byte ptr [bx + 0x72], al
0x9e3ea: outsw dx, word ptr [si]
0x9e3eb: and byte ptr [esi + 0x34], dh
0x9e3ef: xor byte ptr cs:[bx + si], ah
0x9e3f2: imul si, word ptr [bp + di + 0x20], 0x6568
0x9e3f7: jb 0x9e45e
0x9e3f9: and word ptr [bx + si], sp
0x9e3fb: dec ax
0x9e3fc: popaw
0x9e3fd: dec ax
0x9e3fe: popaw
0x9e3ff: dec ax
0x9e400: popaw
0x9e401: and ax, di
0x9e403: inc ax
0x9e404: sbb word ptr [bx + si], ax
2018-12-17T22:31:13.440335567Z 67 PC: 12bf8 | Get or set file attributes
2018-12-17T22:31:13.446249369Z 79 PC: 132c2 | Find next file
2018-12-17T22:31:13.448991447Z 53 PC: 9e3e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.450762823Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.452856425Z 67 PC: 9e3e2 | Get or set file attributes
2018-12-17T22:31:13.458421749Z 61 PC: 9e3e2 | Open file
2018-12-17T22:31:13.464675797Z 87 PC: 9e3e2 | Get or set file date and time
2018-12-17T22:31:13.466452253Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.467747924Z 62 PC: 9e3e2 | Close file
2018-12-17T22:31:13.469502626Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.47141028Z 42 PC: 9e3e2 | Get date 0x9e3e2: ret
0x9e3e3: pop sp
0x9e3e4: add ch, cl
0x9e3e6: and byte ptr [bx + si], ah
0x9e3e8: inc di
0x9e3e9: jb 0x9e45a
0x9e3eb: and byte ptr [esi + 0x34], dh
0x9e3ef: xor byte ptr cs:[bx + si], ah
0x9e3f2: imul si, word ptr [bp + di + 0x20], 0x6568
0x9e3f7: jb 0x9e45e
0x9e3f9: and word ptr [bx + si], sp
0x9e3fb: dec ax
0x9e3fc: popaw
0x9e3fd: dec ax
0x9e3fe: popaw
0x9e3ff: dec ax
0x9e400: popaw
0x9e401: and ax, di
0x9e403: inc ax
0x9e404: sbb word ptr [bx + si], ax
2018-12-17T22:31:13.473688543Z 67 PC: 12bf8 | Get or set file attributes
2018-12-17T22:31:13.479779644Z 79 PC: 132c2 | Find next file
2018-12-17T22:31:13.483003588Z 53 PC: 9e3e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.484370509Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.485980263Z 67 PC: 9e3e2 | Get or set file attributes
2018-12-17T22:31:13.492011549Z 61 PC: 9e3e2 | Open file
2018-12-17T22:31:13.498473679Z 87 PC: 9e3e2 | Get or set file date and time
2018-12-17T22:31:13.499863112Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.502029848Z 62 PC: 9e3e2 | Close file
2018-12-17T22:31:13.514864265Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.515877414Z 42 PC: 9e3e2 | Get date 0x9e3e2: ret
0x9e3e3: sbb ax, 0xcd00
0x9e3e6: and byte ptr [bx + si], ah
0x9e3e8: inc di
0x9e3e9: jb 0x9e45a
0x9e3eb: and byte ptr [esi + 0x34], dh
0x9e3ef: xor byte ptr cs:[bx + si], ah
0x9e3f2: imul si, word ptr [bp + di + 0x20], 0x6568
0x9e3f7: jb 0x9e45e
0x9e3f9: and word ptr [bx + si], sp
0x9e3fb: dec ax
0x9e3fc: popaw
0x9e3fd: dec ax
0x9e3fe: popaw
0x9e3ff: dec ax
0x9e400: popaw
0x9e401: and ax, di
0x9e403: inc ax
0x9e404: sbb word ptr [bx + si], ax
2018-12-17T22:31:13.519101441Z 67 PC: 12bf8 | Get or set file attributes
2018-12-17T22:31:13.524336155Z 79 PC: 132c2 | Find next file
2018-12-17T22:31:13.526701095Z 53 PC: 9e3e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.529342828Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.530851093Z 67 PC: 9e3e2 | Get or set file attributes
2018-12-17T22:31:13.536229203Z 61 PC: 9e3e2 | Open file
2018-12-17T22:31:13.54275857Z 87 PC: 9e3e2 | Get or set file date and time
2018-12-17T22:31:13.544270283Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.545775462Z 62 PC: 9e3e2 | Close file
2018-12-17T22:31:13.548657717Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.551512585Z 42 PC: 9e3e2 | Get date 0x9e3e2: ret
0x9e3e3: sbb ax, 0xcd00
0x9e3e6: and byte ptr [bx + si], ah
0x9e3e8: inc di
0x9e3e9: jb 0x9e45a
0x9e3eb: and byte ptr [esi + 0x34], dh
0x9e3ef: xor byte ptr cs:[bx + si], ah
0x9e3f2: imul si, word ptr [bp + di + 0x20], 0x6568
0x9e3f7: jb 0x9e45e
0x9e3f9: and word ptr [bx + si], sp
0x9e3fb: dec ax
0x9e3fc: popaw
0x9e3fd: dec ax
0x9e3fe: popaw
0x9e3ff: dec ax
0x9e400: popaw
0x9e401: and ax, di
0x9e403: inc ax
0x9e404: sbb word ptr [bx + si], ax
2018-12-17T22:31:13.553778167Z 67 PC: 12bf8 | Get or set file attributes
2018-12-17T22:31:13.559410308Z 79 PC: 132c2 | Find next file
2018-12-17T22:31:13.563256273Z 53 PC: 9e3e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.566581522Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.568149985Z 67 PC: 9e3e2 | Get or set file attributes
2018-12-17T22:31:13.576311404Z 61 PC: 9e3e2 | Open file
2018-12-17T22:31:13.582791328Z 87 PC: 9e3e2 | Get or set file date and time
2018-12-17T22:31:13.586023907Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.588541957Z 62 PC: 9e3e2 | Close file
2018-12-17T22:31:13.590631016Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.592022956Z 42 PC: 9e3e2 | Get date 0x9e3e2: ret
0x9e3e3: cmc
0x9e3e4: add bp, cx
0x9e3e6: and byte ptr [bx + si], ah
0x9e3e8: inc di
0x9e3e9: jb 0x9e45a
0x9e3eb: and byte ptr [esi + 0x34], dh
0x9e3ef: xor byte ptr cs:[bx + si], ah
0x9e3f2: imul si, word ptr [bp + di + 0x20], 0x6568
0x9e3f7: jb 0x9e45e
0x9e3f9: and word ptr [bx + si], sp
0x9e3fb: dec ax
0x9e3fc: popaw
0x9e3fd: dec ax
0x9e3fe: popaw
0x9e3ff: dec ax
0x9e400: popaw
0x9e401: and ax, di
0x9e403: inc ax
0x9e404: sbb word ptr [bx + si], ax
2018-12-17T22:31:13.595508588Z 67 PC: 12bf8 | Get or set file attributes
2018-12-17T22:31:13.601113488Z 79 PC: 132c2 | Find next file
2018-12-17T22:31:13.603864217Z 53 PC: 9e3e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.605730251Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.607456811Z 67 PC: 9e3e2 | Get or set file attributes
2018-12-17T22:31:13.613491314Z 61 PC: 9e3e2 | Open file
2018-12-17T22:31:13.620333642Z 87 PC: 9e3e2 | Get or set file date and time
2018-12-17T22:31:13.621711684Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.623240334Z 62 PC: 9e3e2 | Close file
2018-12-17T22:31:13.626151551Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.627443217Z 42 PC: 9e3e2 | Get date 0x9e3e2: ret
0x9e3e3: sbb ax, 0xcd00
0x9e3e6: and byte ptr [bx + si], ah
0x9e3e8: inc di
0x9e3e9: jb 0x9e45a
0x9e3eb: and byte ptr [esi + 0x34], dh
0x9e3ef: xor byte ptr cs:[bx + si], ah
0x9e3f2: imul si, word ptr [bp + di + 0x20], 0x6568
0x9e3f7: jb 0x9e45e
0x9e3f9: and word ptr [bx + si], sp
0x9e3fb: dec ax
0x9e3fc: popaw
0x9e3fd: dec ax
0x9e3fe: popaw
0x9e3ff: dec ax
0x9e400: popaw
0x9e401: and ax, di
0x9e403: inc ax
0x9e404: sbb word ptr [bx + si], ax
2018-12-17T22:31:13.629613404Z 67 PC: 12bf8 | Get or set file attributes
2018-12-17T22:31:13.635637763Z 79 PC: 132c2 | Find next file
2018-12-17T22:31:13.638310727Z 53 PC: 9e3e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.639632896Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.641942177Z 67 PC: 9e3e2 | Get or set file attributes
2018-12-17T22:31:13.647369194Z 61 PC: 9e3e2 | Open file
2018-12-17T22:31:13.653600372Z 87 PC: 9e3e2 | Get or set file date and time
2018-12-17T22:31:13.655978039Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.657426541Z 62 PC: 9e3e2 | Close file
2018-12-17T22:31:13.65964104Z 67 PC: 9e3e2 | Get or set file attributes
2018-12-17T22:31:13.678012795Z 61 PC: 9e3e2 | Open file
2018-12-17T22:31:13.684647034Z 87 PC: 9e3e2 | Get or set file date and time
2018-12-17T22:31:13.686087679Z 63 PC: 9e3e2 | Read file or device (Read 2083 bytes on handle 5)
2018-12-17T22:31:13.694415838Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.696071663Z 64 PC: 9e3e2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:31:13.705012133Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.707776934Z 64 PC: 9e3e2 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:31:13.71059214Z 66 PC: 9e3e2 | Move file pointer
2018-12-17T22:31:13.711976497Z 44 PC: 9e3e2 | Get time 0x9e3e2: ret
0x9e3e3: out dx, ax
0x9e3e4: or cl, ch
0x9e3e6: and byte ptr [bx + si], ah
0x9e3e8: inc di
0x9e3e9: jb 0x9e45a
0x9e3eb: and byte ptr [esi + 0x34], dh
0x9e3ef: xor byte ptr cs:[bx + si], ah
0x9e3f2: imul si, word ptr [bp + di + 0x20], 0x6568
0x9e3f7: jb 0x9e45e
0x9e3f9: and word ptr [bx + si], sp
0x9e3fb: dec ax
0x9e3fc: popaw
0x9e3fd: dec ax
0x9e3fe: popaw
0x9e3ff: dec ax
0x9e400: popaw
0x9e401: and ax, di
0x9e403: inc ax
0x9e404: sbb word ptr [bx + si], ax
2018-12-17T22:31:13.715807802Z 64 PC: 9e3e2 | Write file or device (Write 2083 bytes on handle 5)
2018-12-17T22:31:13.724421941Z 87 PC: 9e3e2 | Get or set file date and time
2018-12-17T22:31:13.72592585Z 62 PC: 9e3e2 | Close file
2018-12-17T22:31:13.735235974Z 67 PC: 9e3e2 | Get or set file attributes
2018-12-17T22:31:13.745669551Z 37 PC: 9e3e2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:31:13.747235532Z 42 PC: 9e3e2 | Get date 0x9e3e2: ret
0x9e3e3: out dx, ax
0x9e3e4: or cl, ch
0x9e3e6: and byte ptr [bx + si], ah
0x9e3e8: inc di
0x9e3e9: jb 0x9e45a
0x9e3eb: and byte ptr [esi + 0x34], dh
0x9e3ef: xor byte ptr cs:[bx + si], ah
0x9e3f2: imul si, word ptr [bp + di + 0x20], 0x6568
0x9e3f7: jb 0x9e45e
0x9e3f9: and word ptr [bx + si], sp
0x9e3fb: dec ax
0x9e3fc: popaw
0x9e3fd: dec ax
0x9e3fe: popaw
0x9e3ff: dec ax
0x9e400: popaw
0x9e401: and ax, di
0x9e403: inc ax
0x9e404: sbb word ptr [bx + si], ax
2018-12-17T22:31:13.750646569Z 67 PC: 12bf8 | Get or set file attributes
2018-12-17T22:31:13.757042237Z 79 PC: 132c2 | Find next file
2018-12-17T22:31:13.759634458Z 26 PC: 132c2 | Set disk transfer address