Sample viewer

vx.netlux.org/Virus.DOS.Muny.364

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:52:12.078286011Z 102 PC: 12a4f | Get or set code page
2018-12-17T22:52:12.080426451Z 53 PC: 12a59 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:12.083377846Z 74 PC: 12a78 | Reallocate memory
2018-12-17T22:52:12.085206962Z 44 PC: 12a7e | Get time 0x12a7e: mov dh, 0
0x12a80: cmp dl, 0x20
0x12a83: jl 0x12a7a
0x12a85: push dx
0x12a86: mov ah, 0x48
0x12a88: mov bx, 0x20
0x12a8b: int 0x21
0x12a8d: dec ax
0x12a8e: mov es, ax
0x12a90: mov word ptr es:[1], 8
0x12a97: lea si, word ptr [bp + 0x100]
0x12a9b: pop dx
0x12a9c: mov di, dx
0x12a9e: push di
0x12a9f: cld
0x12aa0: mov cx, 0x16c
0x12aa3: rep movsb byte ptr es:[di], byte ptr [si]
0x12aa5: push es
0x12aa6: pop ds
0x12aa7: mov ax, 0x2521
2018-12-17T22:52:12.088594425Z 72 PC: 12a8d | Allocate memory
2018-12-17T22:52:12.091587167Z 37 PC: 12ab9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')