Sample viewer

vx.netlux.org/Virus.DOS.Nomad.1322

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:05:52.265069956Z 65 PC: 12db5 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T23:05:52.275279228Z 44 PC: 12a68 | Get time 0x12a68: cmp dl, 6
0x12a6b: ja 0x12a78
0x12a6d: nop
0x12a6e: nop
0x12a6f: nop
0x12a70: mov ah, 9
0x12a72: lea dx, word ptr [bp + 0x3c6]
0x12a76: int 0x21
0x12a78: push 0x6660
0x12a7b: pop ax
0x12a7c: int 0x21
0x12a7e: cmp bx, 0x5449
0x12a82: je 0x12aeb
0x12a84: nop
0x12a85: nop
0x12a86: nop
0x12a87: pop ds
0x12a88: push ds
0x12a89: mov bx, ds
0x12a8b: dec bx
2018-12-17T23:05:52.278152875Z 102 PC: 12a7e | Get or set code page
2018-12-17T23:05:52.280407993Z 76 PC: 12f6f | Terminate with return code (Return code = '0')