Sample viewer

vx.netlux.org/Virus.DOS.Quit.564

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:49:14.671661183Z 48 PC: 1789b | Get DOS version
2018-12-17T22:49:14.676903583Z 42 PC: 1791c | Get date 0x1791c: cmp cx, 0x1992
0x17920: jb 0x17926
0x17922: mov ah, 0x4c
0x17924: int 0x21
0x17926: xor ax, ax
0x17928: xor bx, bx
0x1792a: mov cx, 0xff
0x1792d: mov dx, ds
0x1792f: retf
0x17930: cmp ax, 0x4b00
0x17933: je 0x17947
0x17935: cmp ax, 0x30f1
0x17938: jne 0x1793d
0x1793a: mov al, 0
0x1793c: iret
0x1793d: ljmp ptr cs:[5]
0x17942: pop ds
0x17943: pop dx
0x17944: jmp 0x179f7
0x17947: push es
2018-12-17T22:49:14.679310238Z 9 PC: 12a47 | Display string (String= 'This GOAT file was generated by Andreas Marx. ROSEGOAT by RR! (28.08.1998) File: ROSE001.COM - 20.000 (4E20h) bytes length! ')