Sample viewer

vx.netlux.org/Virus.DOS.Altx.1751

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:55:33.802848289Z 11 PC: 13c5c | Get input status
2018-12-17T22:55:33.806665496Z 42 PC: 13c5c | Get date 0x13c5c: ret
0x13c5d: mov si, 0x2d
0x13c60: mov di, si
0x13c62: mov cx, 0x355
0x13c65: lodsw ax, word ptr [si]
0x13c66: xor ax, 0xaa
0x13c69: stosw word ptr es:[di], ax
0x13c6a: loop 0x13c65
0x13c6c: ret
0x13c6d: mov ax, 0x440b
0x13c70: mov bx, 0x1998
0x13c73: mov cx, 0x201
0x13c76: call 0x23c58
0x13c79: cmp bx, 0x201
0x13c7d: jne 0x13c88
0x13c7f: cmp cx, 0x1998
0x13c83: jne 0x13c88
0x13c85: jmp 0x13d4a
0x13c88: mov word ptr [0x16], 0
0x13c8e: mov ax, 0x2a
2018-12-17T22:55:33.809505042Z 74 PC: 13c5c | Reallocate memory
2018-12-17T22:55:33.811710245Z 74 PC: 13c5c | Reallocate memory
2018-12-17T22:55:33.813654118Z 72 PC: 13c5c | Allocate memory
2018-12-17T22:55:33.816716291Z 72 PC: 13c5c | Allocate memory
2018-12-17T22:55:33.818895898Z 53 PC: 13c5c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:55:33.820637686Z 37 PC: 13c5c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:55:33.826275024Z 53 PC: 13c5c | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:55:33.828216517Z 37 PC: 13c5c | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:55:33.830263244Z 9 PC: 12a5c | Display string (Could not find end pointer)
2018-12-17T22:55:33.846370043Z 76 PC: 12a61 | Terminate with return code (Return code = '0')