Sample viewer

vx.netlux.org/Virus.DOS.VCC.Corp.645

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:32:04.893156698Z 26 PC: 12a72 | Set disk transfer address
2018-12-17T22:32:04.894715848Z 37 PC: 12a80 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:32:04.895792227Z 37 PC: 12a84 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:32:04.896814608Z 78 PC: 12acf | Find first file
2018-12-17T22:32:04.902465322Z 61 PC: 12c59 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:32:04.909004121Z 63 PC: 12c68 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:32:04.914905827Z 66 PC: 12c77 | Move file pointer
2018-12-17T22:32:04.916006144Z 66 PC: 12c86 | Move file pointer
2018-12-17T22:32:04.917695681Z 64 PC: 12c92 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:32:04.920022591Z 66 PC: 12c9e | Move file pointer
2018-12-17T22:32:04.921187272Z 44 PC: 12ca2 | Get time 0x12ca2: mov byte ptr [bp + 0x285], dl
0x12ca6: call 0x12cbc
0x12ca9: mov ah, 0x40
0x12cab: mov cx, 0x285
0x12cae: lea dx, word ptr [bp + 6]
0x12cb2: int 0x21
0x12cb4: call 0x12cbc
0x12cb7: mov ah, 0x3e
0x12cb9: int 0x21
0x12cbb: ret
0x12cbc: lea si, word ptr [bp + 0x1f]
0x12cc0: mov cx, 0x247
0x12cc3: xor byte ptr [si], 0
0x12cc6: inc si
0x12cc7: dec cx
0x12cc8: jne 0x12cc3
0x12cca: ret
0x12ccb: add word ptr [bx], di
0x12ccd: aas
0x12cce: aas
2018-12-17T22:32:04.923946166Z 64 PC: 12cb4 | Write file or device (Write 645 bytes on handle 5)
2018-12-17T22:32:04.938455023Z 62 PC: 12cbb | Close file
2018-12-17T22:32:04.94609458Z 79 PC: 12acf | Find next file
2018-12-17T22:32:04.949302186Z 61 PC: 12c59 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:32:04.955460203Z 63 PC: 12c68 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:32:04.961724206Z 66 PC: 12c77 | Move file pointer
2018-12-17T22:32:04.963586021Z 66 PC: 12c86 | Move file pointer
2018-12-17T22:32:04.964817631Z 64 PC: 12c92 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:32:04.96717696Z 66 PC: 12c9e | Move file pointer
2018-12-17T22:32:04.968981141Z 44 PC: 12ca2 | Get time 0x12ca2: mov byte ptr [bp + 0x285], dl
0x12ca6: call 0x12cbc
0x12ca9: mov ah, 0x40
0x12cab: mov cx, 0x285
0x12cae: lea dx, word ptr [bp + 6]
0x12cb2: int 0x21
0x12cb4: call 0x12cbc
0x12cb7: mov ah, 0x3e
0x12cb9: int 0x21
0x12cbb: ret
0x12cbc: lea si, word ptr [bp + 0x1f]
0x12cc0: mov cx, 0x247
0x12cc3: xor byte ptr [si], 0x43
0x12cc6: inc si
0x12cc7: dec cx
0x12cc8: jne 0x12cc3
0x12cca: ret
0x12ccb: add word ptr [bx], di
0x12ccd: aas
0x12cce: aas
2018-12-17T22:32:04.974366883Z 64 PC: 12cb4 | Write file or device (Write 645 bytes on handle 5)
2018-12-17T22:32:04.982113136Z 62 PC: 12cbb | Close file
2018-12-17T22:32:04.990857571Z 79 PC: 12acf | Find next file
2018-12-17T22:32:04.993425747Z 61 PC: 12c59 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:32:04.999682573Z 63 PC: 12c68 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:32:05.00651269Z 66 PC: 12c77 | Move file pointer
2018-12-17T22:32:05.007592886Z 66 PC: 12c86 | Move file pointer
2018-12-17T22:32:05.008931485Z 64 PC: 12c92 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:32:05.01093322Z 66 PC: 12c9e | Move file pointer
2018-12-17T22:32:05.012071777Z 44 PC: 12ca2 | Get time 0x12ca2: mov byte ptr [bp + 0x285], dl
0x12ca6: call 0x12cbc
0x12ca9: mov ah, 0x40
0x12cab: mov cx, 0x285
0x12cae: lea dx, word ptr [bp + 6]
0x12cb2: int 0x21
0x12cb4: call 0x12cbc
0x12cb7: mov ah, 0x3e
0x12cb9: int 0x21
0x12cbb: ret
0x12cbc: lea si, word ptr [bp + 0x1f]
0x12cc0: mov cx, 0x247
0x12cc3: xor byte ptr [si], 0x48
0x12cc6: inc si
0x12cc7: dec cx
0x12cc8: jne 0x12cc3
0x12cca: ret
0x12ccb: add word ptr [bx], di
0x12ccd: aas
0x12cce: aas
2018-12-17T22:32:05.013618758Z 64 PC: 12cb4 | Write file or device (Write 645 bytes on handle 5)
2018-12-17T22:32:05.020634116Z 62 PC: 12cbb | Close file
2018-12-17T22:32:05.029220396Z 79 PC: 12acf | Find next file
2018-12-17T22:32:05.03164746Z 61 PC: 12c59 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:32:05.03899644Z 63 PC: 12c68 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:32:05.046057184Z 66 PC: 12c77 | Move file pointer
2018-12-17T22:32:05.047537539Z 66 PC: 12c86 | Move file pointer
2018-12-17T22:32:05.048961873Z 64 PC: 12c92 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:32:05.052210185Z 66 PC: 12c9e | Move file pointer
2018-12-17T22:32:05.053510986Z 44 PC: 12ca2 | Get time 0x12ca2: mov byte ptr [bp + 0x285], dl
0x12ca6: call 0x12cbc
0x12ca9: mov ah, 0x40
0x12cab: mov cx, 0x285
0x12cae: lea dx, word ptr [bp + 6]
0x12cb2: int 0x21
0x12cb4: call 0x12cbc
0x12cb7: mov ah, 0x3e
0x12cb9: int 0x21
0x12cbb: ret
0x12cbc: lea si, word ptr [bp + 0x1f]
0x12cc0: mov cx, 0x247
0x12cc3: xor byte ptr [si], 0x48
0x12cc6: inc si
0x12cc7: dec cx
0x12cc8: jne 0x12cc3
0x12cca: ret
0x12ccb: add word ptr [bx], di
0x12ccd: aas
0x12cce: aas
2018-12-17T22:32:05.055700986Z 64 PC: 12cb4 | Write file or device (Write 645 bytes on handle 5)
2018-12-17T22:32:05.064598678Z 62 PC: 12cbb | Close file
2018-12-17T22:32:05.073001008Z 79 PC: 12acf | Find next file
2018-12-17T22:32:05.075467117Z 61 PC: 12c59 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:32:05.08258658Z 63 PC: 12c68 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:32:05.088780199Z 66 PC: 12c77 | Move file pointer
2018-12-17T22:32:05.090364037Z 66 PC: 12c86 | Move file pointer
2018-12-17T22:32:05.092604935Z 64 PC: 12c92 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:32:05.096173276Z 66 PC: 12c9e | Move file pointer
2018-12-17T22:32:05.097769245Z 44 PC: 12ca2 | Get time 0x12ca2: mov byte ptr [bp + 0x285], dl
0x12ca6: call 0x12cbc
0x12ca9: mov ah, 0x40
0x12cab: mov cx, 0x285
0x12cae: lea dx, word ptr [bp + 6]
0x12cb2: int 0x21
0x12cb4: call 0x12cbc
0x12cb7: mov ah, 0x3e
0x12cb9: int 0x21
0x12cbb: ret
0x12cbc: lea si, word ptr [bp + 0x1f]
0x12cc0: mov cx, 0x247
0x12cc3: xor byte ptr [si], 0x4e
0x12cc6: inc si
0x12cc7: dec cx
0x12cc8: jne 0x12cc3
0x12cca: ret
0x12ccb: add word ptr [bx], di
0x12ccd: aas
0x12cce: aas
2018-12-17T22:32:05.100480814Z 64 PC: 12cb4 | Write file or device (Write 645 bytes on handle 5)
2018-12-17T22:32:05.108954533Z 62 PC: 12cbb | Close file
2018-12-17T22:32:05.116964123Z 79 PC: 12acf | Find next file
2018-12-17T22:32:05.119858893Z 61 PC: 12c59 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:32:05.126513529Z 63 PC: 12c68 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:32:05.132827419Z 66 PC: 12c77 | Move file pointer
2018-12-17T22:32:05.134371094Z 66 PC: 12c86 | Move file pointer
2018-12-17T22:32:05.136296105Z 64 PC: 12c92 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:32:05.138959224Z 66 PC: 12c9e | Move file pointer
2018-12-17T22:32:05.140496397Z 44 PC: 12ca2 | Get time 0x12ca2: mov byte ptr [bp + 0x285], dl
0x12ca6: call 0x12cbc
0x12ca9: mov ah, 0x40
0x12cab: mov cx, 0x285
0x12cae: lea dx, word ptr [bp + 6]
0x12cb2: int 0x21
0x12cb4: call 0x12cbc
0x12cb7: mov ah, 0x3e
0x12cb9: int 0x21
0x12cbb: ret
0x12cbc: lea si, word ptr [bp + 0x1f]
0x12cc0: mov cx, 0x247
0x12cc3: xor byte ptr [si], 0x53
0x12cc6: inc si
0x12cc7: dec cx
0x12cc8: jne 0x12cc3
0x12cca: ret
0x12ccb: add word ptr [bx], di
0x12ccd: aas
0x12cce: aas
2018-12-17T22:32:05.145876923Z 64 PC: 12cb4 | Write file or device (Write 645 bytes on handle 5)
2018-12-17T22:32:05.154787336Z 62 PC: 12cbb | Close file
2018-12-17T22:32:05.163605989Z 79 PC: 12acf | Find next file
2018-12-17T22:32:05.16731275Z 61 PC: 12c59 | Open file (Filename = 'PAH.COM')
2018-12-17T22:32:05.173669687Z 63 PC: 12c68 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:32:05.17971292Z 66 PC: 12c77 | Move file pointer
2018-12-17T22:32:05.182153226Z 66 PC: 12c86 | Move file pointer
2018-12-17T22:32:05.183618872Z 64 PC: 12c92 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:32:05.186389968Z 66 PC: 12c9e | Move file pointer
2018-12-17T22:32:05.188353997Z 44 PC: 12ca2 | Get time 0x12ca2: mov byte ptr [bp + 0x285], dl
0x12ca6: call 0x12cbc
0x12ca9: mov ah, 0x40
0x12cab: mov cx, 0x285
0x12cae: lea dx, word ptr [bp + 6]
0x12cb2: int 0x21
0x12cb4: call 0x12cbc
0x12cb7: mov ah, 0x3e
0x12cb9: int 0x21
0x12cbb: ret
0x12cbc: lea si, word ptr [bp + 0x1f]
0x12cc0: mov cx, 0x247
0x12cc3: xor byte ptr [si], 0x53
0x12cc6: inc si
0x12cc7: dec cx
0x12cc8: jne 0x12cc3
0x12cca: ret
0x12ccb: add word ptr [bx], di
0x12ccd: aas
0x12cce: aas
2018-12-17T22:32:05.19110623Z 64 PC: 12cb4 | Write file or device (Write 645 bytes on handle 5)
2018-12-17T22:32:05.199841647Z 62 PC: 12cbb | Close file
2018-12-17T22:32:05.208985917Z 26 PC: 12ae9 | Set disk transfer address
2018-12-17T22:32:05.210483434Z 19 PC: 12afb | Delete file
2018-12-17T22:32:05.216382476Z 9 PC: 12b2d | Display string (String= 'QUALITY The race for quality has no finish line Just alot of unused starting lines!!! ')