Sample viewer

vx.netlux.org/Virus.DOS.Goma.1551

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:10:36.315229981Z 26 PC: 12a54 | Set disk transfer address
2018-12-17T23:10:36.317805067Z 250 PC: 12c40 | UNKNOWN!
2018-12-17T23:10:36.318607138Z 42 PC: 12c40 | Get date 0x12c40: ret
0x12c41: pop bx
0x12c42: push sp
0x12c43: inc sp
0x12c44: inc di
0x12c45: daa
0x12c46: cmp word ptr [bx + di], di
0x12c48: pop bp
0x12c49: or ax, 0x200a
0x12c4c: and byte ptr [bx + si], ah
0x12c4e: and byte ptr [bx + si], ah
0x12c50: and byte ptr [bx + si], ah
0x12c52: inc di
0x12c53: outsw dx, word ptr [si]
0x12c54: insw word ptr es:[di], dx
0x12c55: popaw
0x12c56: pop di
0x12c57: inc bp
0x12c58: pop ax
0x12c59: inc bp
2018-12-17T23:10:36.320689667Z 71 PC: 12aea | Get current directory
2018-12-17T23:10:36.323745231Z 78 PC: 12b18 | Find first file
2018-12-17T23:10:36.329880196Z 59 PC: 12afb | Change current directory
2018-12-17T23:10:36.334050612Z 59 PC: 12b09 | Change current directory
2018-12-17T23:10:36.338042152Z 26 PC: 12a92 | Set disk transfer address