Sample viewer

vx.netlux.org/Virus.DOS.Start.2200

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:38:56.917235984Z 48 PC: 12b22 | Get DOS version
2018-12-17T22:38:56.919370099Z 171 PC: 12b2f | UNKNOWN!
2018-12-17T22:38:56.926178132Z 37 PC: 12b9d | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:38:56.927311273Z 42 PC: 12be0 | Get date 0x12be0: mov word ptr es:[0x898], dx
0x12be5: mov word ptr es:[0x1ff], 0
0x12bec: pop ax
0x12bed: pop es
0x12bee: pop ds
0x12bef: add ax, 0x10
0x12bf2: add word ptr cs:[si + 0x1a8], ax
0x12bf7: add ax, 0
0x12bfa: cli
0x12bfb: mov ss, ax
0x12bfd: mov sp, 0
0x12c00: sti
0x12c01: ljmp 0:0
0x12c06: push bx
0x12c07: mov bx, sp
0x12c09: cmp word ptr ss:[bx + 4], 0x300
0x12c0f: jb 0x12c19
0x12c11: cmp word ptr ss:[bx + 4], 0xc800
0x12c17: jb 0x12c35
0x12c19: push ds
2018-12-17T22:38:56.931945805Z 9 PC: 12a47 | Display string (String= 'Virus started! ')
2018-12-17T22:38:56.934213535Z 76 PC: 12a4b | Terminate with return code (Return code = '36')