Sample viewer

vx.netlux.org/Virus.DOS.CyberTech.Caco.652

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:57:38.085754146Z 48 PC: 12a98 | Get DOS version
2018-12-17T21:57:38.086864057Z 26 PC: 12aa6 | Set disk transfer address
2018-12-17T21:57:38.087918312Z 78 PC: 12ab0 | Find first file
2018-12-17T21:57:38.091568186Z 67 PC: 12abd | Get or set file attributes
2018-12-17T21:57:38.095059327Z 67 PC: 12ac5 | Get or set file attributes
2018-12-17T21:57:38.108313807Z 61 PC: 12aca | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:57:38.112346233Z 87 PC: 12ad0 | Get or set file date and time
2018-12-17T21:57:38.113726213Z 63 PC: 12add | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:38.120878954Z 66 PC: 12b03 | Move file pointer
2018-12-17T21:57:38.122069791Z 66 PC: 12ba2 | Move file pointer
2018-12-17T21:57:38.123136147Z 63 PC: 12bac | Read file or device (Read 52 bytes on handle 5)
2018-12-17T21:57:38.135790723Z 66 PC: 12b03 | Move file pointer
2018-12-17T21:57:38.137036981Z 44 PC: 12bf9 | Get time 0x12bf9: cmp dl, 0
0x12bfc: jne 0x12c00
0x12bfe: jmp 0x12bf5
0x12c00: mov byte ptr cs:[bp + 0x17], dl
0x12c04: lea si, word ptr [bp + 4]
0x12c07: mov di, 0xfb00
0x12c0a: mov cx, 0x17
0x12c0d: rep movsb byte ptr es:[di], byte ptr [si]
0x12c0f: lea si, word ptr [bp + 0x1b]
0x12c12: mov cx, 0x275
0x12c15: lodsb al, byte ptr [si]
0x12c16: xor al, dl
0x12c18: stosb byte ptr es:[di], al
0x12c19: loop 0x12c15
0x12c1b: mov ah, 0x40
0x12c1d: mov dx, 0xfb00
0x12c20: mov cx, 0x28c
0x12c23: int 0x21
0x12c25: mov ax, 0x4200
0x12c28: call 0x22afd
2018-12-17T21:57:38.138584813Z 64 PC: 12c25 | Write file or device (Write 652 bytes on handle 5)
2018-12-17T21:57:38.147381132Z 66 PC: 12b03 | Move file pointer
2018-12-17T21:57:38.148779728Z 64 PC: 12c36 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:38.15481909Z 87 PC: 12c79 | Get or set file date and time
2018-12-17T21:57:38.157228122Z 62 PC: 12c7d | Close file
2018-12-17T21:57:38.178838247Z 67 PC: 12c86 | Get or set file attributes
2018-12-17T21:57:38.183008743Z 26 PC: 12c40 | Set disk transfer address