Sample viewer

vx.netlux.org/Virus.DOS.HLLC.Globe.9796

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:54:50.78415692Z 48 PC: 12a4b | Get DOS version
2018-12-17T22:54:50.786797127Z 53 PC: 12b86 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:54:50.789235294Z 53 PC: 12b93 | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:54:50.790851604Z 53 PC: 12ba0 | Get interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T22:54:50.792396911Z 53 PC: 12bad | Get interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T22:54:50.795286347Z 37 PC: 12bc1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:54:50.797519387Z 74 PC: 12b18 | Reallocate memory
2018-12-17T22:54:50.801577281Z 26 PC: 14431 | Set disk transfer address
2018-12-17T22:54:50.803976264Z 78 PC: 1443b | Find first file
2018-12-17T22:54:50.811689914Z 26 PC: 14431 | Set disk transfer address
2018-12-17T22:54:50.813227447Z 78 PC: 1443b | Find first file
2018-12-17T22:54:50.827283067Z 61 PC: 135fd | Open file (Filename = 'C:\DOS\ATTRIB.COM')
2018-12-17T22:54:50.838103371Z 67 PC: 13d39 | Get or set file attributes
2018-12-17T22:54:50.85672453Z 55 PC: 146ea | Get or set switch character
2018-12-17T22:54:50.860627753Z 41 PC: 14a65 | Parse filename
2018-12-17T22:54:50.862842339Z 41 PC: 14a73 | Parse filename
2018-12-17T22:54:50.865104785Z 75 PC: 14ab3 | Execute program
2018-12-17T22:54:50.893362621Z 80 PC: 24029 | Set current PSP
2018-12-17T22:54:50.894773345Z 48 PC: 2402e | Get DOS version
2018-12-17T22:54:50.89690766Z 99 PC: 2a810 | Get DBCS lead byte table pointer
2018-12-17T22:54:50.900641233Z 101 PC: 240b4 | Get extended country info
2018-12-17T22:54:50.906217814Z 99 PC: 240ba | Get DBCS lead byte table pointer
2018-12-17T22:54:50.907573775Z 74 PC: 2411c | Reallocate memory
2018-12-17T22:54:50.909297527Z 25 PC: 24153 | Get default drive
2018-12-17T22:54:50.91107443Z 37 PC: 23c13 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:54:50.912650174Z 37 PC: 23c1a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:54:50.914241087Z 37 PC: 23c21 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:54:50.918803189Z 74 PC: 22dbc | Reallocate memory
2018-12-17T22:54:50.920426132Z 72 PC: 22dfd | Allocate memory
2018-12-17T22:54:50.922032063Z 72 PC: 22e35 | Allocate memory
2018-12-17T22:54:50.925934513Z 72 PC: 22e3d | Allocate memory