Sample viewer

vx.netlux.org/Virus.DOS.Mutant93.1778

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:22:17.077777306Z 221 PC: 9f4ab | UNKNOWN!
2018-12-17T22:22:17.079144113Z 53 PC: 9f4c3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:22:17.080885085Z 53 PC: 9f567 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:22:17.082314644Z 37 PC: 9f539 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:22:17.083670243Z 53 PC: 9f53e | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:22:17.087235653Z 37 PC: 9f539 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:22:17.088537864Z 53 PC: 9f53e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:22:17.089985937Z 253 PC: 9f557 | UNKNOWN!
2018-12-17T22:22:17.092070889Z 37 PC: 9f539 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:22:17.093432504Z 53 PC: 9f53e | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-17T22:22:17.095669003Z 37 PC: 9f5b8 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:22:17.097770989Z 42 PC: 9f612 | Get date 0x9f612: call 0xaf5e4
0x9f615: cmp word ptr [0x746], 0x90cf
0x9f61b: jne 0x9f62a
0x9f61d: mov ax, word ptr [0x748]
0x9f620: add ax, word ptr [0x746]
0x9f624: cmp ax, word ptr [0x74a]
0x9f628: je 0x9f64a
0x9f62a: inc dh
0x9f62c: cmp dh, 0xd
0x9f62f: jb 0x9f633
0x9f631: mov dh, 1
0x9f633: mov word ptr [0x746], 0x90cf
0x9f639: mov word ptr [0x748], dx
0x9f63d: add dx, 0x90cf
0x9f641: mov word ptr [0x74a], dx
0x9f645: call 0xaf5fa
0x9f648: jmp 0x9f650
0x9f64a: cmp word ptr [0x748], dx
0x9f64e: jbe 0x9f653
0x9f650: clc
2018-12-17T22:22:17.101595623Z 37 PC: 9f4d9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')