Sample viewer

vx.netlux.org/Virus.DOS.FaxFree.1024.c

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:21:39.008479361Z 74 PC: 12ce1 | Reallocate memory
2018-12-17T22:21:39.011161996Z 72 PC: 12ce8 | Allocate memory
2018-12-17T22:21:39.013035962Z 42 PC: 134a8 | Get date 0x134a8: ret
0x134a9: pop es
0x134aa: add word ptr cs:[0x1f], 1
0x134b0: cli
0x134b1: push ax
0x134b2: xor ax, ax
0x134b4: mov es, ax
0x134b6: mov ax, word ptr cs:[0x16]
0x134ba: mov word ptr es:[0x84], ax
0x134be: mov ax, word ptr cs:[0x18]
0x134c2: mov word ptr es:[0x86], ax
0x134c6: pop ax
0x134c7: call 0x2317d
0x134ca: cmp byte ptr cs:[0x336], 7
0x134d0: je 0x134c7
0x134d2: int 0x21
0x134d4: call 0x2315a
0x134d7: cli
0x134d8: xor ax, ax
0x134da: mov es, ax
2018-12-17T22:21:39.015438295Z 72 PC: 13228 | Allocate memory
2018-12-17T22:21:39.017497989Z 75 PC: 13262 | Execute program
2018-12-17T22:21:39.032824201Z 76 PC: 13734 | Terminate with return code (Return code = '0')
2018-12-17T22:21:39.035844205Z 53 PC: 13276 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:39.037258876Z 37 PC: 1328d | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:39.039031344Z 77 PC: 13291 | Get program return code
2018-12-17T22:21:39.04016999Z 49 PC: 13298 | Terminate and stay resident (Return code = '0' | Memory size = '64')