Sample viewer

vx.netlux.org/Virus.DOS.Jerusalem.Satan.1719.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:16:53.998078663Z 255 PC: 12ab7 | UNKNOWN!
2018-12-17T22:16:53.999989385Z 53 PC: 12ac2 | Get interrupt vector (Interrupt = '241' AKA 'UNKNOWN!')
2018-12-17T22:16:54.001533763Z 42 PC: 12ace | Get date 0x12ace: cmp dh, 0
0x12ad1: je 0x12af7
0x12ad3: cmp dh, 1
0x12ad6: hlt
0x12ad7: pop ds
0x12ad8: mov ah, 0xe1
0x12ada: int 0x21
0x12adc: cmp ah, 0xa1
0x12adf: jae 0x12b1e
0x12ae1: cmp ah, 3
0x12ae4: jb 0x12b1e
0x12ae6: mov ah, 0xdd
0x12ae8: mov di, 0x8100
0x12aeb: mov si, 0x6b3
0x12aee: xor di, 0x26
0x12af1: mov cx, word ptr [di + 8]
0x12af5: int 0x21
0x12af7: xor ax, ax
0x12af9: mov es, ax
0x12afb: mov di, 0x560
2018-12-17T22:16:54.038084467Z 225 PC: 12adc | UNKNOWN!