Sample viewer

vx.netlux.org/Virus.DOS.Ku.334.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:33:41.198812847Z 132 PC: 12c24 | UNKNOWN!
2018-12-17T22:33:41.200261629Z 25 PC: 138f8 | Get default drive
2018-12-17T22:33:41.20220829Z 73 PC: 12c72 | Release memory
2018-12-17T22:33:41.205931365Z 72 PC: 12c7b | Allocate memory
2018-12-17T22:33:41.208773143Z 74 PC: 12c8a | Reallocate memory
2018-12-17T22:33:41.210694585Z 74 PC: 12c99 | Reallocate memory
2018-12-17T22:33:41.214032904Z 53 PC: 12b94 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:33:41.217261055Z 37 PC: 12bcb | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:33:41.219358803Z 76 PC: 12a8d | Terminate with return code (Return code = '0')
2018-12-17T22:33:41.223581444Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:33:41.225933124Z 72 PC: 12174 | Allocate memory
2018-12-17T22:33:41.228558411Z 72 PC: 1218d | Allocate memory
2018-12-17T22:33:41.231664507Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:33:41.234606905Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:33:41.236222822Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:33:41.237730447Z 69 PC: 9ec85 | Duplicate handle
2018-12-17T22:33:41.241200245Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.243855266Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.24626017Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.250129459Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.252537409Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.258623264Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.260625618Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.263501101Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.265412486Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.2673642Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.270146819Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.286580487Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.289895663Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.292977592Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.295327897Z 62 PC: 122ab | Close file
2018-12-17T22:33:41.299215594Z 61 PC: 9f3de | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T22:33:41.306533669Z 87 PC: 9ec85 | Get or set file date and time
2018-12-17T22:33:41.308330116Z 66 PC: 9f408 | Move file pointer
2018-12-17T22:33:41.310209796Z 66 PC: 12372 | Move file pointer
2018-12-17T22:33:41.31306347Z 63 PC: 9f434 | Read file or device (Read 44693 bytes on handle 5)
2018-12-17T22:33:41.328230497Z 62 PC: 1238a | Close file
2018-12-17T22:33:41.332157692Z 99 PC: 99227 | Get DBCS lead byte table pointer
2018-12-17T22:33:41.334110621Z 56 PC: 93a49 | Get or set country info
2018-12-17T22:33:41.336890674Z 64 PC: 99498 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:33:41.343595691Z 25 PC: 93ab2 | Get default drive
2018-12-17T22:33:41.34589939Z 71 PC: 95d2d | Get current directory
2018-12-17T22:33:41.350740177Z 64 PC: 99498 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:33:41.356906726Z 2 PC: 95d02 | Character output (Char = '3e')
2018-12-17T22:33:41.359641106Z 93 PC: 93b70 | File sharing functions
2018-12-17T22:33:41.361799744Z 93 PC: 93b77 | File sharing functions
2018-12-17T22:33:41.364902485Z 10 PC: 93b89 | Buffered keyboard input
2018-12-17T22:33:56.16733448Z 0 PC: 0 | Program terminate
2018-12-17T22:33:57.521541754Z 0 PC: 0 | Program terminate
2018-12-17T22:33:57.624371135Z 64 PC: 99498 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:33:57.630793499Z 41 PC: 93bfe | Parse filename
2018-12-17T22:33:57.633568929Z 41 PC: 93c7f | Parse filename
2018-12-17T22:33:57.63672168Z 41 PC: 93c9c | Parse filename
2018-12-17T22:33:57.639244151Z 26 PC: 97147 | Set disk transfer address
2018-12-17T22:33:57.641660707Z 71 PC: 97343 | Get current directory
2018-12-17T22:33:57.65040705Z 78 PC: 9f0f5 | Find first file
2018-12-17T22:33:57.660430415Z 47 PC: 9ec85 | Get disk transfer address
2018-12-17T22:33:57.663105888Z 71 PC: 971bc | Get current directory
2018-12-17T22:33:57.666685935Z 73 PC: 96859 | Release memory
2018-12-17T22:33:57.669343526Z 67 PC: 9ec85 | Get or set file attributes
2018-12-17T22:33:57.676166633Z 67 PC: 9ec85 | Get or set file attributes
2018-12-17T22:33:57.694960612Z 61 PC: 9ec85 | Open file (Filename = '')
2018-12-17T22:33:57.702710373Z 87 PC: 9ec85 | Get or set file date and time
2018-12-17T22:33:57.704511982Z 87 PC: 9ec85 | Get or set file date and time
2018-12-17T22:33:57.706466366Z 87 PC: 9ec85 | Get or set file date and time
2018-12-17T22:33:57.708423266Z 66 PC: 9ec85 | Move file pointer
2018-12-17T22:33:57.710467056Z 63 PC: 9ec85 | Read file or device (Read 24 bytes on handle 5)
2018-12-17T22:33:57.718018274Z 44 PC: 9ec85 | Get time 0x9ec85: ret
0x9ec86: popf
0x9ec87: mov bh, byte ptr cs:[0x1223]
0x9ec8c: mov dx, 0x1990
0x9ec8f: iret
0x9ec90: popf
0x9ec91: jmp 0x9ec8c
0x9ec93: pop dx
0x9ec94: pop ds
0x9ec95: jmp 0x9ebed
0x9ec98: call 0x9f63d
0x9ec9b: call 0x9eca1
0x9ec9e: jmp 0x9ebee
0x9eca1: call 0x9eca7
0x9eca4: jmp 0x9ece8
0x9eca6: nop
0x9eca7: xor ax, ax
0x9eca9: mov es, ax
0x9ecab: les ax, ptr es:[0x90]
0x9ecb0: mov word ptr cs:[0x11e1], ax
2018-12-17T22:33:57.720618914Z 66 PC: 9ec85 | Move file pointer
2018-12-17T22:33:57.7222929Z 87 PC: 9ec85 | Get or set file date and time
2018-12-17T22:33:57.72472742Z 62 PC: 9ec85 | Close file
2018-12-17T22:33:57.732482877Z 67 PC: 9ec85 | Get or set file attributes
2018-12-17T22:33:57.744276847Z 75 PC: 11821 | Execute program
2018-12-17T22:33:57.756749507Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-17T22:33:57.761451166Z 76 PC: 12a4b | Terminate with return code (Return code = '36')