Sample viewer

vx.netlux.org/Virus.DOS.Radyum.707

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:46:38.820211457Z 44 PC: 12d25 | Get time 0x12d25: mov word ptr [bp + 0x110], dx
0x12d29: mov ah, 0x1a
0x12d2b: lea dx, word ptr [bp + 0x411]
0x12d2f: int 0x21
0x12d31: mov ah, 0x47
0x12d33: xor dx, dx
0x12d35: lea si, word ptr [bp + 0x3cb]
0x12d39: int 0x21
0x12d3b: mov ah, 0x4e
0x12d3d: mov cx, 3
0x12d40: lea dx, word ptr [bp + 0x3b5]
0x12d44: int 0x21
0x12d46: jb 0x12d64
0x12d48: cmp word ptr [bp + 0x42f], 0x4f43
0x12d4e: je 0x12d60
0x12d50: cmp word ptr [bp + 0x42b], 0xf662
0x12d56: jb 0x12d74
0x12d58: cmp word ptr [bp + 0x42b], 0x1ff
0x12d5e: ja 0x12d74
0x12d60: mov ah, 0x4f
2018-12-17T22:46:38.823617394Z 26 PC: 12d31 | Set disk transfer address
2018-12-17T22:46:38.825673255Z 71 PC: 12d3b | Get current directory
2018-12-17T22:46:38.829148211Z 78 PC: 12d46 | Find first file
2018-12-17T22:46:38.835970554Z 67 PC: 12d8d | Get or set file attributes
2018-12-17T22:46:38.848337812Z 67 PC: 12d9c | Get or set file attributes
2018-12-17T22:46:38.864784571Z 61 PC: 12da7 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:46:38.871811459Z 63 PC: 12db8 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:46:38.879763584Z 66 PC: 12e5c | Move file pointer
2018-12-17T22:46:38.882241257Z 64 PC: 13061 | Write file or device (Write 707 bytes on handle 5)
2018-12-17T22:46:38.892160126Z 66 PC: 12e5c | Move file pointer
2018-12-17T22:46:38.895006903Z 64 PC: 12def | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:46:38.902549709Z 87 PC: 12dfe | Get or set file date and time
2018-12-17T22:46:38.904756503Z 62 PC: 12e02 | Close file
2018-12-17T22:46:38.915164912Z 67 PC: 12e11 | Get or set file attributes
2018-12-17T22:46:38.926107504Z 26 PC: 12e21 | Set disk transfer address
2018-12-17T22:46:38.927767301Z 59 PC: 12e29 | Change current directory
2018-12-17T22:46:38.932491825Z 59 PC: 12e31 | Change current directory
2018-12-17T22:46:38.942940989Z 9 PC: 12a5f | Display string (Could not find end pointer)
2018-12-17T22:46:38.949859824Z 8 PC: 12a64 | Console input without echo