Sample viewer

vx.netlux.org/Virus.DOS.BackFont.905

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:48:27.656240371Z 48 PC: 12a6c | Get DOS version
2018-12-17T22:48:27.658238899Z 195 PC: 12a78 | UNKNOWN!
2018-12-17T22:48:27.659844214Z 53 PC: 9f264 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:48:27.661563739Z 37 PC: 9f274 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:48:27.663897432Z 42 PC: 9f228 | Get date 0x9f228: cmp cx, word ptr [0x1e]
0x9f22c: jb 0x9f23e
0x9f22e: ja 0x9f243
0x9f230: cmp dh, byte ptr [0x1d]
0x9f234: jb 0x9f23e
0x9f236: ja 0x9f243
0x9f238: cmp dl, byte ptr [0x1c]
0x9f23c: jae 0x9f243
0x9f23e: and byte ptr [0x39f], 0xfe
0x9f243: add dh, 3
0x9f246: cmp dh, 0xc
0x9f249: jbe 0x9f24f
0x9f24b: sub dh, 0xc
0x9f24e: inc cx
0x9f24f: mov word ptr [0x1e], cx
0x9f253: mov word ptr [0x1c], dx
0x9f257: ret
0x9f258: push cs
0x9f259: pop ds
0x9f25a: mov byte ptr [0x39f], 1
2018-12-17T22:48:27.667667325Z 53 PC: 9f2aa | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:48:27.669421396Z 37 PC: 9f2ba | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:48:27.671261361Z 76 PC: 12a45 | Terminate with return code (Return code = '0')