Sample viewer

vx.netlux.org/Virus.DOS.Mephisto.4.1099

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:55:07.849705271Z 53 PC: 12f2f | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:55:07.851534545Z 71 PC: 12db3 | Get current directory
2018-12-17T22:55:07.85599778Z 26 PC: 12dc1 | Set disk transfer address
2018-12-17T22:55:07.857421703Z 78 PC: 12dcd | Find first file
2018-12-17T22:55:07.864567683Z 79 PC: 12df8 | Find next file
2018-12-17T22:55:07.868568634Z 26 PC: 12e10 | Set disk transfer address
2018-12-17T22:55:07.870285936Z 78 PC: 12e29 | Find first file
2018-12-17T22:55:07.880069254Z 59 PC: 12e51 | Change current directory
2018-12-17T22:55:07.890064842Z 26 PC: 12e5a | Set disk transfer address
2018-12-17T22:55:07.891685827Z 78 PC: 12e66 | Find first file
2018-12-17T22:55:07.90389454Z 59 PC: 12d56 | Change current directory
2018-12-17T22:55:07.907238222Z 26 PC: 12d68 | Set disk transfer address
2018-12-17T22:55:07.908837359Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-17T22:55:07.913652038Z 76 PC: 12a86 | Terminate with return code (Return code = '36')