Sample viewer

vx.netlux.org/Virus.DOS.XPEH.4752

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:33:26.779538789Z 42 PC: 1344a | Get date 0x1344a: cmp cx, word ptr [bp + 4]
0x1344d: jb 0x13457
0x1344f: cmp dh, byte ptr [bp + 6]
0x13452: jb 0x13457
0x13454: clc
0x13455: jmp 0x13458
0x13457: stc
0x13458: pop dx
0x13459: pop cx
0x1345a: pop ax
0x1345b: pop bp
0x1345c: ret 4
0x1345f: push ax
0x13460: push cx
0x13461: push di
0x13462: push es
0x13463: cld
0x13464: mov di, word ptr cs:[0x82]
0x13469: add di, 0x1f
0x1346c: mov ax, word ptr cs:[0x80]
2018-12-17T22:33:26.784791391Z 193 PC: 1372d | UNKNOWN!
2018-12-17T22:33:26.790090812Z 37 PC: 138d0 | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:33:26.791857584Z 9 PC: 12e26 | Display string (String= 'Hello - Copyright S & S International, 1990 ')