Sample viewer

vx.netlux.org/Virus.DOS.Sunset.1077

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:44:56.266063171Z 154 PC: 14e78 | UNKNOWN!
2018-12-17T22:44:56.2682094Z 42 PC: 14eed | Get date 0x14eed: cmp word ptr cs:[bp + 0xee], dx
0x14ef2: jne 0x14ef7
0x14ef4: call 0x151a0
0x14ef7: pop es
0x14ef8: pop ds
0x14ef9: jmp 0x14f0b
0x14efc: mov ax, 0xb1fc
0x14eff: mov word ptr [0x100], ax
0x14f02: mov al, 5
0x14f04: mov byte ptr [0x102], al
0x14f07: push 0x100
0x14f0a: ret
0x14f0b: mov ax, es
0x14f0d: add ax, 0x10
0x14f10: add word ptr cs:[bp + 0xf2], ax
0x14f15: add word ptr cs:[bp + 0xf6], ax
0x14f1a: mov ss, word ptr cs:[bp + 0xf6]
0x14f1f: mov sp, word ptr cs:[bp + 0xf4]
0x14f24: ljmp ptr cs:[bp + 0xf0]
0x14f29: cmp ax, 0x9aff
2018-12-17T22:44:56.270670661Z 53 PC: 1386e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:44:56.271836158Z 53 PC: 1386e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:44:56.274337087Z 53 PC: 1386e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:44:56.275706822Z 53 PC: 1386e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:56.276816336Z 53 PC: 1386e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:44:56.287323318Z 53 PC: 1386e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:56.288813414Z 53 PC: 1386e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:44:56.290119979Z 53 PC: 1386e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:44:56.292565367Z 53 PC: 1386e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:44:56.293947799Z 53 PC: 1386e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:44:56.295333611Z 53 PC: 1386e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:44:56.296974811Z 53 PC: 1386e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:44:56.298943532Z 53 PC: 1386e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:44:56.300304243Z 53 PC: 1386e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:44:56.301691466Z 53 PC: 1386e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:44:56.305003114Z 53 PC: 1386e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:44:56.306448655Z 53 PC: 1386e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:44:56.307895973Z 53 PC: 1386e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:44:56.310245196Z 53 PC: 1386e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:44:56.31170026Z 37 PC: 13883 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:44:56.313077839Z 37 PC: 1388a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:44:56.315618819Z 37 PC: 13891 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:56.316832226Z 37 PC: 13898 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:44:56.31845105Z 68 PC: 13c5d | I/O control for devices (Set for = '&�=')
2018-12-17T22:44:56.321229179Z 37 PC: 140a2 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:44:56.322383356Z 37 PC: 140a2 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:44:56.323545206Z 37 PC: 140a2 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:44:56.326057407Z 37 PC: 140a2 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:44:56.327253748Z 37 PC: 140a2 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:44:56.328374002Z 37 PC: 140a2 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:44:56.342205836Z 37 PC: 140a2 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:44:56.343517765Z 37 PC: 140a2 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:44:56.344977292Z 37 PC: 140a2 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:44:56.347357144Z 37 PC: 140a2 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:44:56.348793306Z 37 PC: 140a9 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:44:56.349969417Z 37 PC: 140b0 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:44:56.352257407Z 37 PC: 140b7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:44:56.535716278Z 64 PC: 1485b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:44:56.537860078Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:44:56.540216938Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:44:56.54193423Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:44:56.543333908Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:56.54547269Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:44:56.547162044Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:56.548366846Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:44:56.55016378Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:44:56.551437641Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:44:56.552578868Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:44:56.554437866Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:44:56.555585192Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:44:56.556719595Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:44:56.558019384Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:44:56.559741168Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:44:56.560807299Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:44:56.561908325Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:44:56.563879117Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:44:56.564945209Z 37 PC: 139d7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:44:56.56603722Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.569018905Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.571021066Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.57342856Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.576149479Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.578230752Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.580294748Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.584039655Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.587656752Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.589526135Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.591491723Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.592976101Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.594544424Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.596635211Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.598141811Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.59959902Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.601682357Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.603140476Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.604594535Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.606729354Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.608190892Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.609703746Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.611724042Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.613205195Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.615454476Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.617499791Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.619008907Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.620708297Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.623817706Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.626096784Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.628428439Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.632420921Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.634610075Z 6 PC: 13a56 | Direct console I/O
2018-12-17T22:44:56.638433918Z 76 PC: 13a16 | Terminate with return code (Return code = '200')
2018-12-17T22:44:56.642693817Z 72 PC: 9fb75 | Allocate memory
2018-12-17T22:44:56.644556255Z 82 PC: 9fb7c | Get DOS internal pointers (SYSVARS)