Sample viewer

vx.netlux.org/Virus.DOS.Goma.1552

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:46:42.730821069Z 26 PC: 12a54 | Set disk transfer address
2018-12-17T22:46:42.73276999Z 250 PC: 12c41 | UNKNOWN!
2018-12-17T22:46:42.734779335Z 42 PC: 12c41 | Get date 0x12c41: ret
0x12c42: pop bx
0x12c43: push sp
0x12c44: inc sp
0x12c45: inc di
0x12c46: daa
0x12c47: cmp word ptr [bx + di], di
0x12c49: pop bp
0x12c4a: or ax, 0x200a
0x12c4d: and byte ptr [bx + si], ah
0x12c4f: and byte ptr [bx + si], ah
0x12c51: and byte ptr [bx + si], ah
0x12c53: inc di
0x12c54: outsw dx, word ptr [si]
0x12c55: insw word ptr es:[di], dx
0x12c56: popaw
0x12c57: pop di
0x12c58: inc bp
0x12c59: pop ax
0x12c5a: inc bp
2018-12-17T22:46:42.73739518Z 71 PC: 12aea | Get current directory
2018-12-17T22:46:42.740681685Z 78 PC: 12b18 | Find first file
2018-12-17T22:46:42.747768059Z 59 PC: 12afb | Change current directory
2018-12-17T22:46:42.751942442Z 59 PC: 12b09 | Change current directory
2018-12-17T22:46:42.756232442Z 26 PC: 12a92 | Set disk transfer address