Sample viewer

vx.netlux.org/Virus.DOS.FaxFree.Pinniz.1536.d

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:57:31.723161501Z 74 PC: 12cff | Reallocate memory
2018-12-17T21:57:31.725103151Z 72 PC: 12d06 | Allocate memory
2018-12-17T21:57:31.726659859Z 42 PC: 134d1 | Get date 0x134d1: ret
0x134d2: pop es
0x134d3: add word ptr cs:[0x3f], 1
0x134d9: cli
0x134da: push ax
0x134db: xor ax, ax
0x134dd: mov es, ax
0x134df: mov ax, word ptr cs:[0x36]
0x134e3: mov word ptr es:[0x84], ax
0x134e7: mov ax, word ptr cs:[0x38]
0x134eb: mov word ptr es:[0x86], ax
0x134ef: pop ax
0x134f0: call 0x2319d
0x134f3: cmp byte ptr cs:[0x36e], 7
0x134f9: je 0x134f0
0x134fb: int 0x21
0x134fd: call 0x2317a
0x13500: cli
0x13501: xor ax, ax
0x13503: mov es, ax
2018-12-17T21:57:31.728366226Z 72 PC: 13246 | Allocate memory
2018-12-17T21:57:31.730173358Z 75 PC: 13280 | Execute program
2018-12-17T21:57:31.7391002Z 76 PC: 13934 | Terminate with return code (Return code = '0')
2018-12-17T21:57:31.741026613Z 53 PC: 13294 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:57:31.742605991Z 37 PC: 132ab | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:57:31.74371512Z 77 PC: 132af | Get program return code
2018-12-17T21:57:31.744948758Z 49 PC: 132b6 | Terminate and stay resident (Return code = '0' | Memory size = '96')