Sample viewer

vx.netlux.org/Virus.DOS.Piz.2036

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:01:20.164938804Z 48 PC: 12c42 | Get DOS version
2018-12-17T23:01:20.168022772Z 42 PC: 131ca | Get date 0x131ca: ret
0x131cb: xor bx, bx
0x131cd: mov es, bx
0x131cf: push word ptr es:[0x46c]
0x131d4: pop word ptr cs:[0x2b]
0x131d9: push word ptr es:[0x90]
0x131de: push word ptr es:[0x92]
0x131e3: push word ptr es:[4]
0x131e8: push word ptr es:[6]
0x131ed: push es
0x131ee: cli
0x131ef: mov word ptr es:[0x90], 0xab
0x131f6: mov word ptr es:[0x92], cs
0x131fb: push word ptr cs:[0xa7]
0x13200: pop word ptr es:[4]
0x13205: push word ptr cs:[0xa9]
0x1320a: pop word ptr es:[6]
0x1320f: sti
0x13210: call 0x13238
0x13213: pop es
2018-12-17T23:01:20.17097638Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-17T23:01:20.17529167Z 76 PC: 12a86 | Terminate with return code (Return code = '36')