Sample viewer

vx.netlux.org/Virus.DOS.LittBrother.364

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:44:59.771101149Z 42 PC: 12ba0 | Get date 0x12ba0: mov al, dl
0x12ba2: cwde
0x12ba3: ret
0x12ba4: mov ah, 0x2a
0x12ba6: int 0x21
0x12ba8: mov al, dh
0x12baa: cwde
0x12bab: ret
0x12bac: out dx, al
0x12bad: cld
0x12bae: loopne 0x12bb2
0x12bb0: mov cx, 0xa7
0x12bb3: xor byte ptr [bx], cl
0x12bb5: inc bx
0x12bb6: loop 0x12bb3
0x12bb8: cli
0x12bb9: push bx
0x12bba: push ax
0x12bbb: pop ax
0x12bbc: dec sp
2018-12-17T22:44:59.774437957Z 37 PC: 12a83 | Set interrupt vector (Interrupt = '33' AKA 'Random read')