Sample viewer

vx.netlux.org/Virus.DOS.Catphish.698.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:55:09.21933814Z 53 PC: 12c08 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:55:09.220724035Z 82 PC: 12c17 | Get DOS internal pointers (SYSVARS)
2018-12-17T22:55:09.222907978Z 37 PC: 12c78 | Set interrupt vector (Interrupt = '99' AKA 'Get DBCS lead byte table pointer')
2018-12-17T22:55:09.224450417Z 37 PC: 12c82 | Set interrupt vector (Interrupt = '33' AKA 'Random read')