Sample viewer

vx.netlux.org/Virus.DOS.MIPT.2000

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:54:18.701713254Z 61 PC: 12bf9 | Open file (Filename = 'ιΘ')
2018-12-17T22:54:18.705944602Z 60 PC: 12c08 | Create or truncate file
2018-12-17T22:54:18.709119927Z 61 PC: 12bf9 | Open file (Filename = 'ιΘ')
2018-12-17T22:54:18.712182309Z 60 PC: 12c08 | Create or truncate file
2018-12-17T22:54:18.71535575Z 53 PC: 12c28 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:54:18.717658266Z 37 PC: 12c38 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:54:18.719428671Z 53 PC: 12c3d | Get interrupt vector (Interrupt = '40' AKA 'Random block write')
2018-12-17T22:54:18.721314293Z 37 PC: 12c4d | Set interrupt vector (Interrupt = '40' AKA 'Random block write')
2018-12-17T22:54:18.724190806Z 53 PC: 12c52 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:54:18.725923951Z 37 PC: 12c62 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:54:18.727703173Z 53 PC: 12c6c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:54:18.730346579Z 37 PC: 12c7c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:54:18.736516408Z 53 PC: 12c81 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:54:18.738936364Z 37 PC: 12c91 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:54:18.745963603Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-17T22:54:18.750788176Z 76 PC: 12a86 | Terminate with return code (Return code = '36')