Sample viewer

vx.netlux.org/Virus.DOS.VLAD.Antipode.1012

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:55:52.704455889Z 44 PC: 12a80 | Get time 0x12a80: cmp dl, 0xf2
0x12a83: jne 0x12a8b
0x12a85: push cs
0x12a86: mov ax, 0x100
0x12a89: push ax
0x12a8a: retf
0x12a8b: call 0x12da4
0x12a8e: push cs
0x12a8f: pop ax
0x12a90: dec ax
0x12a91: mov ds, ax
0x12a93: inc ax
0x12a94: mov cx, word ptr [3]
0x12a98: mov dx, cx
0x12a9a: add dx, ax
0x12a9c: sub cx, 0x82
0x12aa0: mov word ptr [3], cx
0x12aa4: mov cx, dx
0x12aa6: sub cx, 0x82
0x12aaa: mov es, cx
2018-12-17T22:55:52.707241792Z 88 PC: 19e53 | case 0xGet or set allocation strateg:
2018-12-17T22:55:52.710181338Z 53 PC: 13362 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:55:52.711518518Z 37 PC: 13383 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:55:52.714638841Z 61 PC: 131b2 | Open file