Sample viewer

vx.netlux.org/Virus.DOS.XPEH.3872

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:44:49.25223194Z 42 PC: 13145 | Get date 0x13145: cmp cx, word ptr [bp + 4]
0x13148: jb 0x13152
0x1314a: cmp dh, byte ptr [bp + 6]
0x1314d: jb 0x13152
0x1314f: clc
0x13150: jmp 0x13153
0x13152: stc
0x13153: pop dx
0x13154: pop cx
0x13155: pop ax
0x13156: pop bp
0x13157: ret 4
0x1315a: push bp
0x1315b: mov bp, sp
0x1315d: push cx
0x1315e: push di
0x1315f: push es
0x13160: push bx
0x13161: push ax
0x13162: cld
2018-12-17T22:44:49.265468705Z 37 PC: 135e5 | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:44:49.267598832Z 9 PC: 12b67 | Display string (String= 'I am VIRUS-HUNTER! ')
2018-12-17T22:44:49.272492787Z 76 PC: 12b6c | Terminate with return code (Return code = '0')