Sample viewer

vx.netlux.org/Virus.DOS.Printerceptor

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:39:56.931142144Z 98 PC: 12d54 | Get current PSP
2018-12-17T22:39:56.940348391Z 73 PC: 12d62 | Release memory
2018-12-17T22:39:56.941425163Z 53 PC: 12d67 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:39:56.942323088Z 37 PC: 12d83 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:39:56.94417909Z 42 PC: 12d87 | Get date 0x12d87: mov al, byte ptr [0x48c]
0x12d8a: cmp al, dh
0x12d8c: je 0x12da1
0x12d8e: inc dh
0x12d90: cmp al, dh
0x12d92: je 0x12da1
0x12d94: mov ax, cs
0x12d96: mov ds, ax
0x12d98: mov dx, 0x27f
0x12d9b: mov ax, 0x2517
0x12d9e: call 0x22d49
0x12da1: mov ax, 0x800
0x12da4: mov sp, ax
0x12da6: mov ax, cs
0x12da8: mov es, ax
0x12daa: mov bx, 0x90
0x12dad: mov ah, 0x4a
0x12daf: int 0x21
0x12db1: mov ax, cs
0x12db3: mov word ptr [0x491], ax
2018-12-17T22:39:56.94627021Z 37 PC: 12d4f | Set interrupt vector (Interrupt = '23' AKA 'Rename file')
2018-12-17T22:39:56.947396554Z 74 PC: 12db1 | Reallocate memory
2018-12-17T22:39:56.954212878Z 75 PC: 12d4f | Execute program
2018-12-17T22:39:56.958968021Z 49 PC: 12dcc | Terminate and stay resident (Return code = '0' | Memory size = '144')