Sample viewer

vx.netlux.org/Virus.DOS.BackFont.1172

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:15:18.969225825Z 179 PC: 14133 | UNKNOWN!
2018-12-17T22:15:18.970665743Z 53 PC: 9f24d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:18.971675616Z 37 PC: 9f25d | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:18.972945304Z 42 PC: 9f211 | Get date 0x9f211: cmp cx, word ptr [0x1e]
0x9f215: jb 0x9f227
0x9f217: ja 0x9f22c
0x9f219: cmp dh, byte ptr [0x1d]
0x9f21d: jb 0x9f227
0x9f21f: ja 0x9f22c
0x9f221: cmp dl, byte ptr [0x1c]
0x9f225: jae 0x9f22c
0x9f227: and byte ptr [0x4aa], 0xfe
0x9f22c: add dh, 3
0x9f22f: cmp dh, 0xc
0x9f232: jbe 0x9f238
0x9f234: sub dh, 0xc
0x9f237: inc cx
0x9f238: mov word ptr [0x1e], cx
0x9f23c: mov word ptr [0x1c], dx
0x9f240: ret
0x9f241: push cs
0x9f242: pop ds
0x9f243: mov byte ptr [0x4aa], 1
2018-12-17T22:15:18.976195776Z 53 PC: 9f293 | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:15:18.977357036Z 37 PC: 9f2a3 | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:15:18.978520595Z 48 PC: 12a6d | Get DOS version
2018-12-17T22:15:18.980380491Z 9 PC: 12a84 | Display string (Could not find end pointer)
2018-12-17T22:15:18.990005167Z 61 PC: 12cc4 | Open file (Filename = '')
2018-12-17T22:15:18.992507811Z 76 PC: 12b16 | Terminate with return code (Return code = '2')