Sample viewer

vx.netlux.org/Virus.DOS.Altx.2663

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:26:01.022706381Z 11 PC: 13e3f | Get input status
2018-12-17T22:26:01.026306217Z 42 PC: 13e3f | Get date 0x13e3f: ret
0x13e40: mov si, 0x31
0x13e43: mov di, si
0x13e45: mov cx, 0x519
0x13e48: lodsw ax, word ptr [si]
0x13e49: nop
0x13e4a: xor ax, 0x303
0x13e4d: stosw word ptr es:[di], ax
0x13e4e: loop 0x13e48
0x13e50: ret
0x13e51: mov ax, 0x440b
0x13e54: mov bx, 0x1998
0x13e57: mov cx, 0x303
0x13e5a: call 0x23e3b
0x13e5d: cmp bx, 0x303
0x13e61: jne 0x13e73
0x13e63: cmp cx, 0x1998
0x13e67: jne 0x13e73
0x13e69: or dx, dx
0x13e6b: je 0x13e70
2018-12-17T22:26:01.030004784Z 74 PC: 13e3f | Reallocate memory
2018-12-17T22:26:01.032498135Z 74 PC: 13e3f | Reallocate memory
2018-12-17T22:26:01.034725239Z 72 PC: 13e3f | Allocate memory
2018-12-17T22:26:01.038082898Z 72 PC: 13e3f | Allocate memory
2018-12-17T22:26:01.044634435Z 53 PC: 13e3f | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:26:01.047395564Z 37 PC: 13e3f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:26:01.049703843Z 53 PC: 13e3f | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:26:01.051423006Z 37 PC: 13e3f | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:26:01.053386613Z 53 PC: 13e3f | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:26:01.055979259Z 37 PC: 13e3f | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:26:01.057655884Z 48 PC: 12a4b | Get DOS version
2018-12-17T22:26:01.059187037Z 53 PC: 12b86 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:26:01.061203013Z 53 PC: 12b93 | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:26:01.063094719Z 53 PC: 12ba0 | Get interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T22:26:01.06475326Z 53 PC: 12bad | Get interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T22:26:01.066722708Z 37 PC: 12bc1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:26:01.082521157Z 74 PC: 12b18 | Reallocate memory
2018-12-17T22:26:01.086540327Z 64 PC: 130f7 | Write file or device (Write 1 bytes on handle 1)
2018-12-17T22:26:01.090419442Z 64 PC: 130f7 | Write file or device (Write 1 bytes on handle 1)
2018-12-17T22:26:01.102492299Z 64 PC: 130f7 | Write file or device (Write 1 bytes on handle 1)
2018-12-17T22:26:01.106003783Z 64 PC: 130f7 | Write file or device (Write 1 bytes on handle 1)
2018-12-17T22:26:01.109513522Z 64 PC: 130f7 | Write file or device (Write 1 bytes on handle 1)
2018-12-17T22:26:01.113550202Z 64 PC: 130f7 | Write file or device (Write 1 bytes on handle 1)
2018-12-17T22:26:01.11772258Z 37 PC: 12bcd | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:26:01.135153887Z 37 PC: 12bd8 | Set interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:26:01.137573927Z 37 PC: 12be3 | Set interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T22:26:01.139436028Z 37 PC: 12bee | Set interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T22:26:01.141268901Z 76 PC: 12b76 | Terminate with return code (Return code = '6')