Sample viewer

vx.netlux.org/Virus.DOS.Twister.1767

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:25:38.470273181Z 255 PC: 12aa7 | UNKNOWN!
2018-12-17T22:25:38.472429857Z 48 PC: 12ab8 | Get DOS version
2018-12-17T22:25:38.474577337Z 44 PC: 12b8c | Get time 0x12b8c: mov word ptr [0x159], dx
0x12b90: mov byte ptr [0x156], 0xff
0x12b95: mov ah, 0xf
0x12b97: int 0x10
0x12b99: cmp al, 6
0x12b9b: je 0x12ba9
0x12b9d: cmp al, 7
0x12b9f: je 0x12ba9
0x12ba1: mov word ptr [0x150], 0xb800
0x12ba7: jmp 0x12baf
0x12ba9: mov word ptr [0x150], 0xb000
0x12baf: ret
0x12bb0: cli
0x12bb1: xor bx, bx
0x12bb3: mov es, bx
0x12bb5: mov bl, al
0x12bb7: shl bx, 1
0x12bb9: shl bx, 1
0x12bbb: les bx, ptr es:[bx]
0x12bbe: sti