Sample viewer

vx.netlux.org/Virus.DOS.Viking.1000.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:55:56.229340138Z 53 PC: 12ab2 | Get interrupt vector (Interrupt = '132' AKA 'UNKNOWN!')
2018-12-17T22:55:56.231071096Z 37 PC: 12ac0 | Set interrupt vector (Interrupt = '132' AKA 'UNKNOWN!')
2018-12-17T22:55:56.233068337Z 53 PC: 12af0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:55:56.235094958Z 37 PC: 12aff | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:55:56.237473193Z 81 PC: 9ed8c | Get current PSP
2018-12-17T22:55:56.238530114Z 53 PC: 9ee97 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:55:56.239889054Z 37 PC: 9eea6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:55:56.241044608Z 48 PC: 9eeaa | Get DOS version
2018-12-17T22:55:56.242725025Z 53 PC: 9eeb1 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:55:56.243939953Z 37 PC: 9eef0 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:55:56.245097737Z 67 PC: 9eeff | Get or set file attributes
2018-12-17T22:55:56.251247975Z 67 PC: 9ef0d | Get or set file attributes
2018-12-17T22:55:56.587712259Z 61 PC: 9ef12 | Open file (Filename = '�WSR.�>')
2018-12-17T22:55:56.593927509Z 87 PC: 9ef21 | Get or set file date and time
2018-12-17T22:55:56.595841454Z 66 PC: 9ef32 | Move file pointer
2018-12-17T22:55:56.596996075Z 66 PC: 9ef4b | Move file pointer
2018-12-17T22:55:56.598031318Z 63 PC: 9ef56 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:55:56.600542395Z 66 PC: 9ef6c | Move file pointer
2018-12-17T22:55:56.601685811Z 63 PC: 9ef75 | Read file or device (Read 14 bytes on handle 5)
2018-12-17T22:55:56.603531994Z 66 PC: 9efef | Move file pointer
2018-12-17T22:55:56.605132121Z 63 PC: 9eff8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:55:56.60680451Z 66 PC: 9f001 | Move file pointer
2018-12-17T22:55:56.607797297Z 64 PC: 9f01a | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:55:56.610300625Z 66 PC: 9f023 | Move file pointer
2018-12-17T22:55:56.611377669Z 64 PC: 9f02d | Write file or device (Write 1000 bytes on handle 5)
2018-12-17T22:55:56.620894786Z 87 PC: 9ef9b | Get or set file date and time
2018-12-17T22:55:56.623785527Z 62 PC: 9ef9f | Close file
2018-12-17T22:55:56.631054677Z 67 PC: 9efb1 | Get or set file attributes
2018-12-17T22:55:56.640051562Z 37 PC: 9efc0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:55:56.642411824Z 37 PC: 9efce | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:55:56.643780713Z 47 PC: 9edb6 | Get disk transfer address
2018-12-17T22:55:56.645686054Z 26 PC: 9edbf | Set disk transfer address
2018-12-17T22:55:56.647658783Z 44 PC: 9edc3 | Get time 0x9edc3: test dh, 3
0x9edc6: mov dx, 0x4d2
0x9edc9: je 0x9edce
0x9edcb: mov dx, 0x4cc
0x9edce: mov cx, 0x23
0x9edd1: mov ah, 0x4e
0x9edd3: int 0x21
0x9edd5: jb 0x9edf8
0x9edd7: mov dx, 0x536
0x9edda: mov ax, 0x4d4f
0x9eddd: call 0x9ee79
0x9ede0: cmp si, word ptr [0x4e3]
0x9ede4: jne 0x9edf8
0x9ede6: mov ah, 0x4f
0x9ede8: int 0x21
0x9edea: jb 0x9edf8
0x9edec: mov ax, 0x4d4f
0x9edef: call 0x9ee79
0x9edf2: cmp si, word ptr [0x4e3]
0x9edf6: je 0x9ede6
2018-12-17T22:55:56.649892699Z 78 PC: 9edd5 | Find first file
2018-12-17T22:55:56.656988281Z 26 PC: 9edfe | Set disk transfer address
2018-12-17T22:55:56.658137342Z 9 PC: 12aa2 | Display string (String= 'ABCDE - This is a 100 byte COM test, 1994 ')