Sample viewer

vx.netlux.org/Virus.DOS.ViruSoft.655

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:20:56.334175032Z 82 PC: 12c31 | Get DOS internal pointers (SYSVARS)
2018-12-17T22:20:56.33662042Z 42 PC: 12c31 | Get date 0x12c31: mov ds, word ptr es:[bx - 2]
0x12c35: cmp byte ptr [0], 0x5a
0x12c3a: je 0x12c48
0x12c3c: mov ax, word ptr [3]
0x12c3f: inc ax
0x12c40: mov dx, ds
0x12c42: add ax, dx
0x12c44: mov ds, ax
0x12c46: jmp 0x12c35
0x12c48: ret
0x12c49: push ax
0x12c4a: push bx
0x12c4b: push cx
0x12c4c: push dx
0x12c4d: push si
0x12c4e: push di
0x12c4f: push es
0x12c50: push ds
0x12c51: push bp
0x12c52: cmp ah, 0x3d