Sample viewer

vx.netlux.org/Virus.DOS.Wilbur.512.d

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:08:32.360506332Z 26 PC: 12b98 | Set disk transfer address
2018-12-17T23:08:32.362253597Z 78 PC: 12b60 | Find first file
2018-12-17T23:08:32.369872913Z 79 PC: 12b6b | Find next file
2018-12-17T23:08:32.372790065Z 79 PC: 12b6b | Find next file
2018-12-17T23:08:32.375800514Z 79 PC: 12b6b | Find next file
2018-12-17T23:08:32.379652059Z 79 PC: 12b6b | Find next file
2018-12-17T23:08:32.3826429Z 79 PC: 12b6b | Find next file
2018-12-17T23:08:32.387000808Z 79 PC: 12b6b | Find next file
2018-12-17T23:08:32.390820797Z 79 PC: 12b6b | Find next file
2018-12-17T23:08:32.393981587Z 79 PC: 12b6b | Find next file
2018-12-17T23:08:32.397245657Z 78 PC: 12b60 | Find first file
2018-12-17T23:08:32.404166294Z 79 PC: 12b6b | Find next file
2018-12-17T23:08:32.407699018Z 42 PC: 12bc6 | Get date 0x12bc6: xor bx, bx
0x12bc8: mov cx, 0x53
0x12bcb: lea si, word ptr [bp + 0x155]
0x12bcf: mov di, si
0x12bd1: lodsw ax, word ptr [si]
0x12bd2: xor ax, dx
0x12bd4: xor bx, ax
0x12bd6: stosw word ptr es:[di], ax
0x12bd7: ror dx, 1
0x12bd9: loop 0x12bd1
0x12bdb: cmp bx, 0x8fa5
0x12bdf: jne 0x12be4
0x12be1: call 0x12c95
0x12be4: mov dx, 0x80
0x12be7: mov ah, 0x1a
0x12be9: int 0x21
0x12beb: ret
0x12bec: call 0x22b56
0x12bef: jb 0x12c14
0x12bf1: mov bx, word ptr [bp + 0x21f]
2018-12-17T23:08:32.410573764Z 26 PC: 12beb | Set disk transfer address