Sample viewer

vx.netlux.org/Virus.DOS.Tabulero.2048.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:34:23.406208883Z 224 PC: 1794b | UNKNOWN!
2018-12-17T22:34:23.408264514Z 74 PC: 12d91 | Reallocate memory
2018-12-17T22:34:23.410223363Z 53 PC: 12d96 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:34:23.412374043Z 37 PC: 12dad | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:34:23.415521584Z 53 PC: 12db3 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:34:23.4172482Z 37 PC: 12dcb | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:34:23.419807099Z 44 PC: 12dcf | Get time 0x12dcf: mov byte ptr cs:[0x3e], cl
0x12dd4: mov byte ptr cs:[0x3f], 0
0x12dda: mov ax, cs
0x12ddc: sub ax, 0x10
0x12ddf: mov ds, ax
0x12de1: mov ax, word ptr [0x2c]
0x12de4: mov ds, ax
0x12de6: mov dx, 0x20
0x12de9: push cs
0x12dea: pop es
0x12deb: lea bx, word ptr [0x72]
0x12def: mov word ptr cs:[0x72], 0
0x12df6: mov word ptr cs:[0x74], 0x80
0x12dfd: mov word ptr cs:[0x76], ds
0x12e02: mov word ptr cs:[0x78], 0x5c
0x12e09: mov word ptr cs:[0x7a], ds
0x12e0e: mov word ptr cs:[0x7c], 0x6c
0x12e15: mov word ptr cs:[0x7e], ds
0x12e1a: mov ax, 0x4b00
0x12e1d: pushf
2018-12-17T22:34:23.422960079Z 75 PC: 12e23 | Execute program
2018-12-17T22:34:23.446726051Z 80 PC: 14929 | Set current PSP
2018-12-17T22:34:23.455695498Z 48 PC: 1492e | Get DOS version
2018-12-17T22:34:23.458174878Z 99 PC: 1b110 | Get DBCS lead byte table pointer
2018-12-17T22:34:23.461444655Z 101 PC: 1aa70 | Get extended country info
2018-12-17T22:34:23.464835995Z 101 PC: 149b4 | Get extended country info
2018-12-17T22:34:23.466742264Z 99 PC: 149ba | Get DBCS lead byte table pointer
2018-12-17T22:34:23.469432732Z 74 PC: 14a1c | Reallocate memory
2018-12-17T22:34:23.472701296Z 25 PC: 14a53 | Get default drive
2018-12-17T22:34:23.474959999Z 37 PC: 14513 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:34:23.477202341Z 37 PC: 1451a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:34:23.479436886Z 37 PC: 14521 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:34:23.488963561Z 61 PC: 14c2a | Open file
2018-12-17T22:34:23.497538375Z 72 PC: 1529d | Allocate memory
2018-12-17T22:34:23.500065971Z 61 PC: 14d19 | Open file (Filename = 'RQS�Y�!\COMMAND.COM')
2018-12-17T22:34:23.507792091Z 89 PC: 18cdc | Get extended error info
2018-12-17T22:34:23.510052262Z 2 PC: 147dc | Character output (Char = '53')
2018-12-17T22:34:23.51294052Z 2 PC: 147dc | Character output (Char = '70')
2018-12-17T22:34:23.515668443Z 2 PC: 147dc | Character output (Char = '65')
2018-12-17T22:34:23.519279731Z 2 PC: 147dc | Character output (Char = '63')
2018-12-17T22:34:23.521784926Z 2 PC: 147dc | Character output (Char = '69')
2018-12-17T22:34:23.525537314Z 2 PC: 147dc | Character output (Char = '66')
2018-12-17T22:34:23.529425594Z 2 PC: 147dc | Character output (Char = '69')
2018-12-17T22:34:23.532113984Z 2 PC: 147dc | Character output (Char = '65')
2018-12-17T22:34:23.535081094Z 2 PC: 147dc | Character output (Char = '64')
2018-12-17T22:34:23.539670009Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.542111688Z 2 PC: 147dc | Character output (Char = '43')
2018-12-17T22:34:23.544627526Z 2 PC: 147dc | Character output (Char = '4f')
2018-12-17T22:34:23.548458231Z 2 PC: 147dc | Character output (Char = '4d')
2018-12-17T22:34:23.551208505Z 2 PC: 147dc | Character output (Char = '4d')
2018-12-17T22:34:23.55390238Z 2 PC: 147dc | Character output (Char = '41')
2018-12-17T22:34:23.557050847Z 2 PC: 147dc | Character output (Char = '4e')
2018-12-17T22:34:23.559743558Z 2 PC: 147dc | Character output (Char = '44')
2018-12-17T22:34:23.56229728Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.565850745Z 2 PC: 147dc | Character output (Char = '73')
2018-12-17T22:34:23.568548545Z 2 PC: 147dc | Character output (Char = '65')
2018-12-17T22:34:23.571002033Z 2 PC: 147dc | Character output (Char = '61')
2018-12-17T22:34:23.573432905Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:23.57596459Z 2 PC: 147dc | Character output (Char = '63')
2018-12-17T22:34:23.578252712Z 2 PC: 147dc | Character output (Char = '68')
2018-12-17T22:34:23.580822709Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.584645586Z 2 PC: 147dc | Character output (Char = '64')
2018-12-17T22:34:23.602674108Z 2 PC: 147dc | Character output (Char = '69')
2018-12-17T22:34:23.60553567Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:23.610265349Z 2 PC: 147dc | Character output (Char = '65')
2018-12-17T22:34:23.612985234Z 2 PC: 147dc | Character output (Char = '63')
2018-12-17T22:34:23.615435448Z 2 PC: 147dc | Character output (Char = '74')
2018-12-17T22:34:23.618495997Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:23.6212267Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:23.624235588Z 2 PC: 147dc | Character output (Char = '79')
2018-12-17T22:34:23.627936534Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.630326236Z 2 PC: 147dc | Character output (Char = '62')
2018-12-17T22:34:23.633148067Z 2 PC: 147dc | Character output (Char = '61')
2018-12-17T22:34:23.636656145Z 2 PC: 147dc | Character output (Char = '64')
2018-12-17T22:34:23.639139144Z 2 PC: 147dc | Character output (Char = '0d')
2018-12-17T22:34:23.641436562Z 2 PC: 147dc | Character output (Char = '0a')
2018-12-17T22:34:23.646859383Z 61 PC: 14c2a | Open file
2018-12-17T22:34:23.654245545Z 2 PC: 147dc | Character output (Char = '54')
2018-12-17T22:34:23.657692181Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:23.660468317Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:23.663685162Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.666494453Z 2 PC: 147dc | Character output (Char = '6d')
2018-12-17T22:34:23.669291592Z 2 PC: 147dc | Character output (Char = '61')
2018-12-17T22:34:23.672787833Z 2 PC: 147dc | Character output (Char = '6e')
2018-12-17T22:34:23.675366676Z 2 PC: 147dc | Character output (Char = '79')
2018-12-17T22:34:23.678097106Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.682483521Z 2 PC: 147dc | Character output (Char = '70')
2018-12-17T22:34:23.691325361Z 2 PC: 147dc | Character output (Char = '61')
2018-12-17T22:34:23.693964897Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:23.697136008Z 2 PC: 147dc | Character output (Char = '61')
2018-12-17T22:34:23.700198671Z 2 PC: 147dc | Character output (Char = '6d')
2018-12-17T22:34:23.703523749Z 2 PC: 147dc | Character output (Char = '65')
2018-12-17T22:34:23.707041365Z 2 PC: 147dc | Character output (Char = '74')
2018-12-17T22:34:23.709532307Z 2 PC: 147dc | Character output (Char = '65')
2018-12-17T22:34:23.714587984Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:23.717830081Z 2 PC: 147dc | Character output (Char = '73')
2018-12-17T22:34:23.720345115Z 2 PC: 147dc | Character output (Char = '0d')
2018-12-17T22:34:23.722580681Z 2 PC: 147dc | Character output (Char = '0a')
2018-12-17T22:34:23.727986341Z 2 PC: 147dc | Character output (Char = '54')
2018-12-17T22:34:23.730558225Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:23.733740622Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:23.736837486Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.739412074Z 2 PC: 147dc | Character output (Char = '6d')
2018-12-17T22:34:23.741877332Z 2 PC: 147dc | Character output (Char = '61')
2018-12-17T22:34:23.74584949Z 2 PC: 147dc | Character output (Char = '6e')
2018-12-17T22:34:23.752834922Z 2 PC: 147dc | Character output (Char = '79')
2018-12-17T22:34:23.755514894Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.765276313Z 2 PC: 147dc | Character output (Char = '70')
2018-12-17T22:34:23.768474963Z 2 PC: 147dc | Character output (Char = '61')
2018-12-17T22:34:23.771297266Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:23.77407361Z 2 PC: 147dc | Character output (Char = '61')
2018-12-17T22:34:23.779342404Z 2 PC: 147dc | Character output (Char = '6d')
2018-12-17T22:34:23.781712219Z 2 PC: 147dc | Character output (Char = '65')
2018-12-17T22:34:23.784350748Z 2 PC: 147dc | Character output (Char = '74')
2018-12-17T22:34:23.787045079Z 2 PC: 147dc | Character output (Char = '65')
2018-12-17T22:34:23.789441392Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:23.792026887Z 2 PC: 147dc | Character output (Char = '73')
2018-12-17T22:34:23.79516657Z 2 PC: 147dc | Character output (Char = '0d')
2018-12-17T22:34:23.797684322Z 2 PC: 147dc | Character output (Char = '0a')
2018-12-17T22:34:23.803826358Z 2 PC: 147dc | Character output (Char = '0d')
2018-12-17T22:34:23.811559474Z 2 PC: 147dc | Character output (Char = '0a')
2018-12-17T22:34:23.816370303Z 2 PC: 147dc | Character output (Char = '0d')
2018-12-17T22:34:23.818695354Z 2 PC: 147dc | Character output (Char = '0a')
2018-12-17T22:34:23.823841693Z 2 PC: 147dc | Character output (Char = '4d')
2018-12-17T22:34:23.826695763Z 2 PC: 147dc | Character output (Char = '69')
2018-12-17T22:34:23.829610523Z 2 PC: 147dc | Character output (Char = '63')
2018-12-17T22:34:23.833010281Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:23.835814276Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:23.84119643Z 2 PC: 147dc | Character output (Char = '73')
2018-12-17T22:34:23.84491332Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:23.847710593Z 2 PC: 147dc | Character output (Char = '66')
2018-12-17T22:34:23.850541086Z 2 PC: 147dc | Character output (Char = '74')
2018-12-17T22:34:23.854023329Z 2 PC: 147dc | Character output (Char = '28')
2018-12-17T22:34:23.856471385Z 2 PC: 147dc | Character output (Char = '52')
2018-12-17T22:34:23.859094616Z 2 PC: 147dc | Character output (Char = '29')
2018-12-17T22:34:23.863101316Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.865650397Z 2 PC: 147dc | Character output (Char = '4d')
2018-12-17T22:34:23.868565364Z 2 PC: 147dc | Character output (Char = '53')
2018-12-17T22:34:23.87218614Z 2 PC: 147dc | Character output (Char = '2d')
2018-12-17T22:34:23.874701129Z 2 PC: 147dc | Character output (Char = '44')
2018-12-17T22:34:23.877369596Z 2 PC: 147dc | Character output (Char = '4f')
2018-12-17T22:34:23.882712322Z 2 PC: 147dc | Character output (Char = '53')
2018-12-17T22:34:23.886135959Z 2 PC: 147dc | Character output (Char = '28')
2018-12-17T22:34:23.888493747Z 2 PC: 147dc | Character output (Char = '52')
2018-12-17T22:34:23.891557745Z 2 PC: 147dc | Character output (Char = '29')
2018-12-17T22:34:23.893956878Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.896144576Z 2 PC: 147dc | Character output (Char = '56')
2018-12-17T22:34:23.899007588Z 2 PC: 147dc | Character output (Char = '65')
2018-12-17T22:34:23.901492879Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:23.903967288Z 2 PC: 147dc | Character output (Char = '73')
2018-12-17T22:34:23.907019394Z 2 PC: 147dc | Character output (Char = '69')
2018-12-17T22:34:23.909374799Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:23.911573718Z 2 PC: 147dc | Character output (Char = '6e')
2018-12-17T22:34:23.915076718Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.917789459Z 2 PC: 147dc | Character output (Char = '36')
2018-12-17T22:34:23.920551488Z 2 PC: 147dc | Character output (Char = '2e')
2018-12-17T22:34:23.923609333Z 2 PC: 147dc | Character output (Char = '32')
2018-12-17T22:34:23.926687597Z 2 PC: 147dc | Character output (Char = '32')
2018-12-17T22:34:23.930838105Z 2 PC: 147dc | Character output (Char = '0d')
2018-12-17T22:34:23.933671717Z 2 PC: 147dc | Character output (Char = '0a')
2018-12-17T22:34:23.938259163Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.940990004Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.943873407Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.946996585Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.949494089Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.952168337Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.959145042Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.96338334Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.9663578Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.970526731Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.973379714Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.976325155Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.980437629Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:23.983240235Z 2 PC: 147dc | Character output (Char = '28')
2018-12-17T22:34:23.986026923Z 2 PC: 147dc | Character output (Char = '43')
2018-12-17T22:34:23.989845637Z 2 PC: 147dc | Character output (Char = '29')
2018-12-17T22:34:23.993039128Z 2 PC: 147dc | Character output (Char = '43')
2018-12-17T22:34:23.99537824Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:23.998425267Z 2 PC: 147dc | Character output (Char = '70')
2018-12-17T22:34:24.000918481Z 2 PC: 147dc | Character output (Char = '79')
2018-12-17T22:34:24.003396293Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:24.006822391Z 2 PC: 147dc | Character output (Char = '69')
2018-12-17T22:34:24.00924773Z 2 PC: 147dc | Character output (Char = '67')
2018-12-17T22:34:24.012193568Z 2 PC: 147dc | Character output (Char = '68')
2018-12-17T22:34:24.017328726Z 2 PC: 147dc | Character output (Char = '74')
2018-12-17T22:34:24.020128817Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:24.022544263Z 2 PC: 147dc | Character output (Char = '4d')
2018-12-17T22:34:24.026075213Z 2 PC: 147dc | Character output (Char = '69')
2018-12-17T22:34:24.028812833Z 2 PC: 147dc | Character output (Char = '63')
2018-12-17T22:34:24.031224889Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:24.034223196Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:24.036876997Z 2 PC: 147dc | Character output (Char = '73')
2018-12-17T22:34:24.039592872Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:24.04337658Z 2 PC: 147dc | Character output (Char = '66')
2018-12-17T22:34:24.048954426Z 2 PC: 147dc | Character output (Char = '74')
2018-12-17T22:34:24.05140578Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:24.054308197Z 2 PC: 147dc | Character output (Char = '43')
2018-12-17T22:34:24.056747489Z 2 PC: 147dc | Character output (Char = '6f')
2018-12-17T22:34:24.059238877Z 2 PC: 147dc | Character output (Char = '72')
2018-12-17T22:34:24.062326895Z 2 PC: 147dc | Character output (Char = '70')
2018-12-17T22:34:24.065108388Z 2 PC: 147dc | Character output (Char = '20')
2018-12-17T22:34:24.067906438Z 2 PC: 147dc | Character output (Char = '31')
2018-12-17T22:34:24.077620495Z 2 PC: 147dc | Character output (Char = '39')
2018-12-17T22:34:24.080649569Z 2 PC: 147dc | Character output (Char = '38')
2018-12-17T22:34:24.083205453Z 2 PC: 147dc | Character output (Char = '31')
2018-12-17T22:34:24.086443464Z 2 PC: 147dc | Character output (Char = '2d')
2018-12-17T22:34:24.088900492Z 2 PC: 147dc | Character output (Char = '31')
2018-12-17T22:34:24.091307147Z 2 PC: 147dc | Character output (Char = '39')
2018-12-17T22:34:24.094250974Z 2 PC: 147dc | Character output (Char = '39')
2018-12-17T22:34:24.096710014Z 2 PC: 147dc | Character output (Char = '34')
2018-12-17T22:34:24.099200448Z 2 PC: 147dc | Character output (Char = '2e')
2018-12-17T22:34:24.10290071Z 2 PC: 147dc | Character output (Char = '0d')
2018-12-17T22:34:24.104931096Z 2 PC: 147dc | Character output (Char = '0a')
2018-12-17T22:34:24.110211196Z 74 PC: 136bc | Reallocate memory
2018-12-17T22:34:24.124351691Z 72 PC: 136fd | Allocate memory
2018-12-17T22:34:24.126071969Z 73 PC: 1371f | Release memory
2018-12-17T22:34:24.127382107Z 72 PC: 13735 | Allocate memory
2018-12-17T22:34:24.129991028Z 72 PC: 1373d | Allocate memory