Sample viewer

vx.netlux.org/Virus.DOS.WpcBats.2263

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:53:50.525070561Z 53 PC: 135ee | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:53:50.528701934Z 53 PC: 135fb | Get interrupt vector (Interrupt = '22' AKA 'Create or truncate file')
2018-12-17T22:53:50.530251562Z 53 PC: 13608 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:53:50.531733473Z 37 PC: 1317b | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:53:50.533743288Z 37 PC: 1317b | Set interrupt vector (Interrupt = '22' AKA 'Create or truncate file')
2018-12-17T22:53:50.535976032Z 37 PC: 1317b | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:53:50.537631899Z 49 PC: 1317b | Terminate and stay resident (Return code = '13' | Memory size = '200')