Sample viewer

vx.netlux.org/Virus.DOS.Niko.3477

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:55:21.252928212Z 243 PC: 15218 | UNKNOWN!
2018-12-17T22:55:21.256183235Z 37 PC: 1526f | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:55:21.258413439Z 53 PC: 1527a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:55:21.260732841Z 82 PC: 1531e | Get DOS internal pointers (SYSVARS)
2018-12-17T22:55:21.262841267Z 74 PC: 15356 | Reallocate memory
2018-12-17T22:55:21.265627708Z 74 PC: 15360 | Reallocate memory
2018-12-17T22:55:21.268223249Z 74 PC: 15410 | Reallocate memory
2018-12-17T22:55:21.270598326Z 53 PC: 9f07c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:55:21.273707044Z 98 PC: 9f3e6 | Get current PSP
2018-12-17T22:55:21.27547036Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=00002968h/0000010600d bytes. ')
2018-12-17T22:55:21.280519286Z 76 PC: 12a86 | Terminate with return code (Return code = '36')