Sample viewer

vx.netlux.org/Virus.DOS.Ugrad.1145

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:01:35.659932026Z 252 PC: 2079a | UNKNOWN!
2018-12-17T23:01:35.661096838Z 53 PC: 2086d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:01:35.662221629Z 37 PC: 20885 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:01:35.664249558Z 42 PC: 207d9 | Get date 0x207d9: or al, al
0x207db: je 0x2080b
0x207dd: cmp al, 5
0x207df: ja 0x2080b
0x207e1: pop dx
0x207e2: pop cx
0x207e3: cmp byte ptr cs:[si], 0
0x207e9: pop es
0x207ea: pop ax
0x207eb: push es
0x207ec: pop ds
0x207ed: pop si
0x207ee: je 0x20803
0x207f0: pop ax
0x207f1: mov bx, es
0x207f3: add ax, bx
0x207f5: pop bx
0x207f6: cli
0x207f7: mov sp, bx
0x207f9: mov ss, ax
2018-12-17T23:01:35.666321909Z 80 PC: 141b9 | Set current PSP
2018-12-17T23:01:35.667366503Z 48 PC: 141be | Get DOS version
2018-12-17T23:01:35.668966663Z 2 PC: 1406c | Character output (Char = '56')
2018-12-17T23:01:35.671628798Z 2 PC: 1406c | Character output (Char = '65')
2018-12-17T23:01:35.673555537Z 2 PC: 1406c | Character output (Char = '72')
2018-12-17T23:01:35.676301342Z 2 PC: 1406c | Character output (Char = '73')
2018-12-17T23:01:35.679473854Z 2 PC: 1406c | Character output (Char = '69')
2018-12-17T23:01:35.681461904Z 2 PC: 1406c | Character output (Char = 'a2')
2018-12-17T23:01:35.683437067Z 2 PC: 1406c | Character output (Char = '6e')
2018-12-17T23:01:35.686324143Z 2 PC: 1406c | Character output (Char = '20')
2018-12-17T23:01:35.688524955Z 2 PC: 1406c | Character output (Char = '69')
2018-12-17T23:01:35.691397821Z 2 PC: 1406c | Character output (Char = '6e')
2018-12-17T23:01:35.700859802Z 2 PC: 1406c | Character output (Char = '63')
2018-12-17T23:01:35.703606098Z 2 PC: 1406c | Character output (Char = '6f')
2018-12-17T23:01:35.705994947Z 2 PC: 1406c | Character output (Char = '72')
2018-12-17T23:01:35.709412439Z 2 PC: 1406c | Character output (Char = '72')
2018-12-17T23:01:35.711657504Z 2 PC: 1406c | Character output (Char = '65')
2018-12-17T23:01:35.714192137Z 2 PC: 1406c | Character output (Char = '63')
2018-12-17T23:01:35.71775468Z 2 PC: 1406c | Character output (Char = '74')
2018-12-17T23:01:35.720378158Z 2 PC: 1406c | Character output (Char = '61')
2018-12-17T23:01:35.722491269Z 2 PC: 1406c | Character output (Char = '20')
2018-12-17T23:01:35.726243933Z 2 PC: 1406c | Character output (Char = '64')
2018-12-17T23:01:35.728326674Z 2 PC: 1406c | Character output (Char = '65')
2018-12-17T23:01:35.731171448Z 2 PC: 1406c | Character output (Char = '20')
2018-12-17T23:01:35.734227042Z 2 PC: 1406c | Character output (Char = '44')
2018-12-17T23:01:35.736308863Z 2 PC: 1406c | Character output (Char = '4f')
2018-12-17T23:01:35.738318204Z 2 PC: 1406c | Character output (Char = '53')
2018-12-17T23:01:35.741649951Z 2 PC: 1406c | Character output (Char = '0d')
2018-12-17T23:01:35.743846133Z 2 PC: 1406c | Character output (Char = '0a')