Sample viewer

vx.netlux.org/Virus.DOS.SillyC.380.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:46:09.059870804Z 26 PC: 19f95 | Set disk transfer address
2018-12-17T22:46:09.061730734Z 25 PC: 19f99 | Get default drive
2018-12-17T22:46:09.062939537Z 14 PC: 19fa4 | Set default drive (Drive = 'C')
2018-12-17T22:46:09.064276688Z 71 PC: 19faf | Get current directory
2018-12-17T22:46:09.067034668Z 78 PC: 19fc4 | Find first file
2018-12-17T22:46:09.072340934Z 67 PC: 19fef | Get or set file attributes
2018-12-17T22:46:09.414732929Z 61 PC: 19ff4 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:46:09.421974823Z 63 PC: 1a003 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:46:09.4251557Z 66 PC: 1a00c | Move file pointer
2018-12-17T22:46:09.427053632Z 64 PC: 1a019 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:46:09.431643741Z 64 PC: 1a022 | Write file or device (Write 375 bytes on handle 5)
2018-12-17T22:46:09.438929973Z 66 PC: 1a035 | Move file pointer
2018-12-17T22:46:09.440851035Z 64 PC: 1a03f | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:46:09.444301551Z 87 PC: 1a050 | Get or set file date and time
2018-12-17T22:46:09.446166211Z 62 PC: 1a054 | Close file
2018-12-17T22:46:09.452588613Z 67 PC: 1a062 | Get or set file attributes
2018-12-17T22:46:09.46209723Z 79 PC: 19fca | Find next file
2018-12-17T22:46:09.465386894Z 59 PC: 1a07d | Change current directory
2018-12-17T22:46:09.468800676Z 14 PC: 1a083 | Set default drive (Drive = 'C')
2018-12-17T22:46:09.469992009Z 78 PC: 19fc4 | Find first file
2018-12-17T22:46:09.4759076Z 79 PC: 19fca | Find next file
2018-12-17T22:46:09.478218369Z 59 PC: 1a094 | Change current directory
2018-12-17T22:46:09.479826752Z 14 PC: 1a0a6 | Set default drive (Drive = 'A')
2018-12-17T22:46:09.482009642Z 42 PC: 1a0aa | Get date 0x1a0aa: cmp dx, 0x101
0x1a0ae: je 0x1a0b8
0x1a0b0: cmp dx, 0xc1f
0x1a0b4: je 0x1a0b8
0x1a0b6: jmp 0x1a0ce
0x1a0b8: mov cx, 0x19
0x1a0bb: push si
0x1a0bc: add si, 0x15d
0x1a0c0: add si, cx
0x1a0c2: mov dl, byte ptr [si]
0x1a0c4: add dl, 0x40
0x1a0c7: mov ah, 2
0x1a0c9: int 0x21
0x1a0cb: pop si
0x1a0cc: loop 0x1a0bb
0x1a0ce: mov di, 0x100
0x1a0d1: push di
0x1a0d2: ret
0x1a0d3: loope 0x1a0b5
0x1a0d5: xor ch, byte ptr [bx]
2018-12-17T22:46:09.486855646Z 76 PC: 19f70 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":8775,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:21:50.592248478Z 26 PC: 19f95 | Set disk transfer address
2018-12-25T12:21:50.593665425Z 25 PC: 19f99 | Get default drive
2018-12-25T12:21:50.594697409Z 14 PC: 19fa4 | Set default drive (Drive = 'C')
2018-12-25T12:21:50.595892254Z 71 PC: 19faf | Get current directory
2018-12-25T12:21:50.598730904Z 78 PC: 19fc4 | Find first file
2018-12-25T12:21:50.604325155Z 67 PC: 19fef | Get or set file attributes
2018-12-25T12:21:50.933848028Z 61 PC: 19ff4 | Open file (Filename = 'COMMAND.COM')
2018-12-25T12:21:50.93840868Z 63 PC: 1a003 | Read file or device (Read 5 bytes on handle 5)
2018-12-25T12:21:50.940224316Z 66 PC: 1a00c | Move file pointer
2018-12-25T12:21:50.941429857Z 64 PC: 1a019 | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:21:50.943971836Z 64 PC: 1a022 | Write file or device (Write 375 bytes on handle 5)
2018-12-25T12:21:50.948704351Z 66 PC: 1a035 | Move file pointer
2018-12-25T12:21:50.94991169Z 64 PC: 1a03f | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:21:50.953469518Z 87 PC: 1a050 | Get or set file date and time
2018-12-25T12:21:50.954859069Z 62 PC: 1a054 | Close file
2018-12-25T12:21:50.961050871Z 67 PC: 1a062 | Get or set file attributes
2018-12-25T12:21:50.97094046Z 79 PC: 19fca | Find next file
2018-12-25T12:21:50.973385224Z 59 PC: 1a07d | Change current directory
2018-12-25T12:21:50.976715319Z 14 PC: 1a083 | Set default drive (Drive = 'C')
2018-12-25T12:21:50.978826396Z 78 PC: 19fc4 | Find first file (See above)
2018-12-25T12:21:50.984485678Z 79 PC: 19fca | Find next file (See above)
2018-12-25T12:21:50.98671901Z 59 PC: 1a094 | Change current directory
2018-12-25T12:21:50.989266719Z 14 PC: 1a0a6 | Set default drive (Drive = 'A')
2018-12-25T12:21:50.990985278Z 42 PC: 1a0aa | Get date 0x1a0aa: cmp dx, 0x101
0x1a0ae: je 0x1a0b8
0x1a0b0: cmp dx, 0xc1f
0x1a0b4: je 0x1a0b8
0x1a0b6: jmp 0x1a0ce
0x1a0b8: mov cx, 0x19
0x1a0bb: push si
0x1a0bc: add si, 0x15d
0x1a0c0: add si, cx
0x1a0c2: mov dl, byte ptr [si]
0x1a0c4: add dl, 0x40
0x1a0c7: mov ah, 2
0x1a0c9: int 0x21
0x1a0cb: pop si
0x1a0cc: loop 0x1a0bb
0x1a0ce: mov di, 0x100
0x1a0d1: push di
0x1a0d2: ret
0x1a0d3: loope 0x1a0b5
0x1a0d5: xor ch, byte ptr [bx]
2018-12-25T12:21:50.992988459Z 2 PC: 1a0cb | Character output (Char = '4c')
2018-12-25T12:21:50.99571297Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:50.997749393Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:50.999792106Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.002606014Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.004602255Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.00660817Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.010527448Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.013161355Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.015922595Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.020497026Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.023066823Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.025468416Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.028196735Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.03081291Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.032858993Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.035053238Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.037255662Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.039206837Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.041136131Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.044198367Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.046144053Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.048101698Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.050359135Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.052312709Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.057278901Z 76 PC: 19f70 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":8775,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:21:50.480021978Z 26 PC: 19f95 | Set disk transfer address
2018-12-25T12:21:50.482445999Z 25 PC: 19f99 | Get default drive
2018-12-25T12:21:50.485596093Z 14 PC: 19fa4 | Set default drive (Drive = 'C')
2018-12-25T12:21:50.487406207Z 71 PC: 19faf | Get current directory
2018-12-25T12:21:50.491780701Z 78 PC: 19fc4 | Find first file
2018-12-25T12:21:50.498666925Z 67 PC: 19fef | Get or set file attributes
2018-12-25T12:21:50.846546394Z 61 PC: 19ff4 | Open file (Filename = 'COMMAND.COM')
2018-12-25T12:21:50.855067667Z 63 PC: 1a003 | Read file or device (Read 5 bytes on handle 5)
2018-12-25T12:21:50.858461644Z 66 PC: 1a00c | Move file pointer
2018-12-25T12:21:50.860351432Z 64 PC: 1a019 | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:21:50.865933079Z 64 PC: 1a022 | Write file or device (Write 375 bytes on handle 5)
2018-12-25T12:21:50.873338689Z 66 PC: 1a035 | Move file pointer
2018-12-25T12:21:50.875031517Z 64 PC: 1a03f | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:21:50.879539709Z 87 PC: 1a050 | Get or set file date and time
2018-12-25T12:21:50.882104186Z 62 PC: 1a054 | Close file
2018-12-25T12:21:50.895622206Z 67 PC: 1a062 | Get or set file attributes
2018-12-25T12:21:50.908673378Z 79 PC: 19fca | Find next file
2018-12-25T12:21:50.911971256Z 59 PC: 1a07d | Change current directory
2018-12-25T12:21:50.91635484Z 14 PC: 1a083 | Set default drive (Drive = 'C')
2018-12-25T12:21:50.918144398Z 78 PC: 19fc4 | Find first file (See above)
2018-12-25T12:21:50.924892714Z 79 PC: 19fca | Find next file (See above)
2018-12-25T12:21:50.929052819Z 59 PC: 1a094 | Change current directory
2018-12-25T12:21:50.931539406Z 14 PC: 1a0a6 | Set default drive (Drive = 'A')
2018-12-25T12:21:50.934584456Z 42 PC: 1a0aa | Get date 0x1a0aa: cmp dx, 0x101
0x1a0ae: je 0x1a0b8
0x1a0b0: cmp dx, 0xc1f
0x1a0b4: je 0x1a0b8
0x1a0b6: jmp 0x1a0ce
0x1a0b8: mov cx, 0x19
0x1a0bb: push si
0x1a0bc: add si, 0x15d
0x1a0c0: add si, cx
0x1a0c2: mov dl, byte ptr [si]
0x1a0c4: add dl, 0x40
0x1a0c7: mov ah, 2
0x1a0c9: int 0x21
0x1a0cb: pop si
0x1a0cc: loop 0x1a0bb
0x1a0ce: mov di, 0x100
0x1a0d1: push di
0x1a0d2: ret
0x1a0d3: loope 0x1a0b5
0x1a0d5: xor ch, byte ptr [bx]
2018-12-25T12:21:50.941804651Z 76 PC: 19f70 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":31,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":8775,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:21:51.147721971Z 26 PC: 19f95 | Set disk transfer address
2018-12-25T12:21:51.149614686Z 25 PC: 19f99 | Get default drive
2018-12-25T12:21:51.150651781Z 14 PC: 19fa4 | Set default drive (Drive = 'C')
2018-12-25T12:21:51.151796173Z 71 PC: 19faf | Get current directory
2018-12-25T12:21:51.155367023Z 78 PC: 19fc4 | Find first file
2018-12-25T12:21:51.160660527Z 67 PC: 19fef | Get or set file attributes
2018-12-25T12:21:51.801591736Z 61 PC: 19ff4 | Open file (Filename = 'COMMAND.COM')
2018-12-25T12:21:51.808351657Z 63 PC: 1a003 | Read file or device (Read 5 bytes on handle 5)
2018-12-25T12:21:51.811206862Z 66 PC: 1a00c | Move file pointer
2018-12-25T12:21:51.812881954Z 64 PC: 1a019 | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:21:51.81732763Z 64 PC: 1a022 | Write file or device (Write 375 bytes on handle 5)
2018-12-25T12:21:51.823851982Z 66 PC: 1a035 | Move file pointer
2018-12-25T12:21:51.825477488Z 64 PC: 1a03f | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:21:51.829397501Z 87 PC: 1a050 | Get or set file date and time
2018-12-25T12:21:51.830792982Z 62 PC: 1a054 | Close file
2018-12-25T12:21:51.839217001Z 67 PC: 1a062 | Get or set file attributes
2018-12-25T12:21:51.855187618Z 79 PC: 19fca | Find next file
2018-12-25T12:21:51.857529864Z 59 PC: 1a07d | Change current directory
2018-12-25T12:21:51.860849531Z 14 PC: 1a083 | Set default drive (Drive = 'C')
2018-12-25T12:21:51.863110559Z 78 PC: 19fc4 | Find first file (See above)
2018-12-25T12:21:51.870518082Z 79 PC: 19fca | Find next file (See above)
2018-12-25T12:21:51.872727038Z 59 PC: 1a094 | Change current directory
2018-12-25T12:21:51.874685655Z 14 PC: 1a0a6 | Set default drive (Drive = 'A')
2018-12-25T12:21:51.875887184Z 42 PC: 1a0aa | Get date 0x1a0aa: cmp dx, 0x101
0x1a0ae: je 0x1a0b8
0x1a0b0: cmp dx, 0xc1f
0x1a0b4: je 0x1a0b8
0x1a0b6: jmp 0x1a0ce
0x1a0b8: mov cx, 0x19
0x1a0bb: push si
0x1a0bc: add si, 0x15d
0x1a0c0: add si, cx
0x1a0c2: mov dl, byte ptr [si]
0x1a0c4: add dl, 0x40
0x1a0c7: mov ah, 2
0x1a0c9: int 0x21
0x1a0cb: pop si
0x1a0cc: loop 0x1a0bb
0x1a0ce: mov di, 0x100
0x1a0d1: push di
0x1a0d2: ret
0x1a0d3: loope 0x1a0b5
0x1a0d5: xor ch, byte ptr [bx]
2018-12-25T12:21:51.877995765Z 2 PC: 1a0cb | Character output (Char = '4c')
2018-12-25T12:21:51.880466281Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.885021974Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.88715064Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.889572902Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.89186733Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.893885362Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.896309206Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.900825848Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.902734113Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.904759054Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.90625459Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.90753652Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.90910895Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.910791968Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.912198927Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.914029624Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.915632518Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.917721915Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.920231658Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.922207086Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.924117761Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.926357638Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.928414823Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.930468829Z 2 PC: 1a0cb | Character output (See above)
2018-12-25T12:21:51.935906429Z 76 PC: 19f70 | Terminate with return code (Return code = '0')