Sample viewer

vx.netlux.org/Virus.DOS.Altx.2889

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:51:16.987286309Z 11 PC: 13c5f | Get input status
2018-12-17T22:51:16.989730497Z 42 PC: 13c5f | Get date 0x13c5f: ret
0x13c60: mov si, 0x31
0x13c63: mov di, si
0x13c65: mov cx, 0x58a
0x13c68: lodsw ax, word ptr [si]
0x13c69: nop
0x13c6a: xor ax, 0x310
0x13c6d: stosw word ptr es:[di], ax
0x13c6e: loop 0x13c68
0x13c70: ret
0x13c71: mov ax, 0x440b
0x13c74: mov bx, 0x1998
0x13c77: mov cx, 0x310
0x13c7a: call 0x23c5b
0x13c7d: cmp bx, 0x310
0x13c81: jne 0x13c93
0x13c83: cmp cx, 0x1998
0x13c87: jne 0x13c93
0x13c89: or dx, dx
0x13c8b: je 0x13c90
2018-12-17T22:51:16.991511427Z 74 PC: 13c5f | Reallocate memory
2018-12-17T22:51:16.992783189Z 74 PC: 13c5f | Reallocate memory
2018-12-17T22:51:16.99396723Z 72 PC: 13c5f | Allocate memory
2018-12-17T22:51:16.995853103Z 72 PC: 13c5f | Allocate memory
2018-12-17T22:51:16.997128031Z 53 PC: 13c5f | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:51:16.9982489Z 37 PC: 13c5f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:51:17.000766791Z 53 PC: 13c5f | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:51:17.014908039Z 37 PC: 13c5f | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:51:17.01659962Z 53 PC: 13c5f | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:51:17.018707618Z 37 PC: 13c5f | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:51:17.020245456Z 9 PC: 12a5c | Display string (Could not find end pointer)
2018-12-17T22:51:17.026486481Z 76 PC: 12a61 | Terminate with return code (Return code = '0')