Sample viewer

vx.netlux.org/Virus.DOS.Istanbul.1397

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:32:21.654592391Z 75 PC: 12bfe | Execute program
2018-12-17T22:32:21.661016811Z 42 PC: 12eb4 | Get date 0x12eb4: call 0x12eb9
0x12eb7: pop bx
0x12eb8: ret
0x12eb9: cmp cx, 0x7d1
0x12ebd: jne 0x12ec7
0x12ebf: cmp dh, 0xc
0x12ec2: jne 0x12ec7
0x12ec4: cmp dl, 0x15
0x12ec7: ret
0x12ec8: mov al, 3
0x12eca: iret
0x12ecb: push bp
0x12ecc: add si, si
0x12ece: adc di, word ptr [di]
0x12ed0: and al, 0x4b
0x12ed2: jne 0x12ed8
0x12ed4: mov ax, 0x3434
0x12ed7: iret
0x12ed8: cmp ah, 0x4b
0x12edb: jne 0x12edf
2018-12-17T22:32:21.676019921Z 9 PC: 12a47 | Display string (String= ' Memory Patcher 1.01 - 05/16/99 ')
2018-12-17T22:32:21.701799882Z 9 PC: 12ad7 | Display string (String= '4&�rf� f�����gf�B�
2018-12-17T22:32:21.706112728Z 2 PC: 12add | Character output (Char = '0d')
2018-12-17T22:32:21.710811849Z 2 PC: 12ae1 | Character output (Char = '0a')
2018-12-17T22:32:21.714750592Z 76 PC: 12ae6 | Terminate with return code (Return code = '0')