Sample viewer

vx.netlux.org/Virus.DOS.Proto.695

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:01:03.423647488Z 44 PC: 12a4d | Get time 0x12a4d: mov al, ch
0x12a4f: cwde
0x12a50: cmp ax, 0x10
0x12a53: jge 0x12a58
0x12a55: jmp 0x12ae2
0x12a58: cli
0x12a59: mov dx, 2
0x12a5c: mov bp, 0x40
0x12a5f: mov si, 0x1000
0x12a62: mov di, 0x2000
0x12a65: mov al, 0xb6
0x12a67: out 0x43, al
0x12a69: mov bx, si
0x12a6b: mov ax, bx
0x12a6d: out 0x42, al
0x12a6f: mov al, ah
0x12a71: out 0x42, al
0x12a73: in al, 0x61
0x12a75: or al, 3
0x12a77: out 0x61, al
2018-12-17T23:01:03.426936388Z 160 PC: 12af7 | UNKNOWN!
2018-12-17T23:01:03.428815519Z 53 PC: 12b39 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:01:03.430503261Z 37 PC: 12b4e | Set interrupt vector (Interrupt = '33' AKA 'Random read')