Sample viewer

vx.netlux.org/Trojan.DOS.FloodDesktop

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:56:04.969807058Z 48 PC: 19e5c | Get DOS version
2018-12-17T22:56:04.972608232Z 74 PC: 19eac | Reallocate memory
2018-12-17T22:56:04.975300687Z 48 PC: 19f10 | Get DOS version
2018-12-17T22:56:04.977226615Z 53 PC: 19f18 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:04.987788673Z 37 PC: 19f2a | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:04.990080578Z 53 PC: 1cb72 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:56:04.992093141Z 37 PC: 1cb82 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:56:04.995052337Z 53 PC: 1cb87 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:04.997153165Z 37 PC: 1cb97 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:04.998729233Z 53 PC: 1a8c6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:56:05.000740525Z 53 PC: 1a8c6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:56:05.002644297Z 53 PC: 1a8c6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:56:05.004631336Z 53 PC: 1a8c6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:56:05.006682662Z 53 PC: 1a8c6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:56:05.008912322Z 53 PC: 1a8c6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:56:05.010817965Z 53 PC: 1a8c6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:56:05.012654182Z 53 PC: 1a8c6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:56:05.014683684Z 53 PC: 1a8c6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:56:05.016415278Z 53 PC: 1a8c6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:56:05.017830968Z 53 PC: 1a8c6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:56:05.021321501Z 37 PC: 1a8f5 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:56:05.022962304Z 37 PC: 1a8f5 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:56:05.024552738Z 37 PC: 1a8f5 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:56:05.026726917Z 37 PC: 1a8f5 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:56:05.031221363Z 37 PC: 1a8f5 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:56:05.032557177Z 37 PC: 1a8f5 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:56:05.04328356Z 37 PC: 1a8f5 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:56:05.045519206Z 37 PC: 1a8f5 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:56:05.047867545Z 37 PC: 1a8fc | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:56:05.050535908Z 37 PC: 1a901 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:56:05.054083673Z 68 PC: 19fbb | I/O control for devices (Set for = '')
2018-12-17T22:56:05.05667175Z 68 PC: 19fbb | I/O control for devices (Set for = '�V�ɎًL ��&�U ��:�uEVW �y���ʀ���:�u( �wʋL���?&�U���?;�u������u�u�u��_^����ÿ|')
2018-12-17T22:56:05.0597043Z 68 PC: 19fbb | I/O control for devices (Set for = '')
2018-12-17T22:56:05.061560624Z 68 PC: 19fbb | I/O control for devices (Set for = '�')
2018-12-17T22:56:05.063424967Z 68 PC: 19fbb | I/O control for devices (Set for = '�')
2018-12-17T22:56:05.065767178Z 53 PC: 1786e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:05.073850011Z 53 PC: 1787b | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:56:05.075493682Z 53 PC: 17888 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:05.077262776Z 37 PC: 1789d | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:05.080030052Z 37 PC: 178a5 | Set interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:56:05.081877569Z 37 PC: 178ad | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:05.083878755Z 53 PC: 1832c | Get interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:56:05.086378879Z 53 PC: 18339 | Get interrupt vector (Interrupt = '240' AKA 'UNKNOWN!')
2018-12-17T22:56:05.08778019Z 53 PC: 18348 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:56:05.089158016Z 37 PC: 18355 | Set interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:56:05.091767499Z 53 PC: 1835c | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:56:05.093513666Z 37 PC: 18369 | Set interrupt vector (Interrupt = '240' AKA 'UNKNOWN!')
2018-12-17T22:56:05.095106104Z 53 PC: 18375 | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:56:05.101338584Z 48 PC: 18437 | Get DOS version
2018-12-17T22:56:05.103264362Z 74 PC: 162c9 | Reallocate memory
2018-12-17T22:56:05.105609897Z 74 PC: 162c9 | Reallocate memory
2018-12-17T22:56:05.10789173Z 68 PC: 177e4 | I/O control for devices (Set for = '\CurrentVersion\RunServices]')
2018-12-17T22:56:05.110424209Z 68 PC: 177e4 | I/O control for devices (Set for = '')
2018-12-17T22:56:05.112004313Z 51 PC: 17802 | Get or set Ctrl-Break
2018-12-17T22:56:05.113032666Z 51 PC: 1780e | Get or set Ctrl-Break
2018-12-17T22:56:05.115374579Z 72 PC: 131fa | Allocate memory
2018-12-17T22:56:05.11803353Z 74 PC: 162c9 | Reallocate memory
2018-12-17T22:56:05.120088016Z 72 PC: 131fa | Allocate memory
2018-12-17T22:56:05.124278483Z 37 PC: 14121 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:56:05.130514476Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.133101675Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.136381785Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.13913375Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.141862609Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.145118419Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.147662237Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.15103038Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.15813164Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.160546591Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.16348656Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.167097224Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.170146149Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.173089547Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.176604945Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.179571076Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.182526555Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.185990599Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.188462581Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.190918408Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.194374422Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.197073251Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.199748Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.203526751Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.207335415Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.210876776Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.214796652Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.225647561Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.228260093Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.231911534Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.234240316Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.236621362Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.239591041Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.242195167Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.244885399Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.248084121Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.2510403Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.253530154Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.257047943Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.259586287Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.261976283Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.265088338Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.267765371Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.270281415Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.273487411Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.276190664Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.278639413Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.281416722Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.28427391Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.28767908Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.290970041Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.293708034Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.296355742Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.299160466Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.302127345Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.304737032Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.3079734Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.310872051Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.313209703Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.315548543Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.318143425Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.320458016Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.322749293Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.325355924Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.327515927Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.332026729Z 73 PC: 131fa | Release memory
2018-12-17T22:56:05.334129971Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.337178704Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.341871344Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.345175711Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.347440843Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.349695939Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.352996441Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.355281717Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.357573338Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.361060034Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.363717882Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.366907027Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.387205372Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.390069006Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.392893316Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.396405176Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.399322064Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.402154358Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.406613442Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.409622689Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.41260444Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.416220294Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.419407745Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.422396551Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.426160797Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.428910035Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.431694868Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.435292067Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.438298262Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.441057176Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.444661435Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.447690079Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.450433156Z 6 PC: 177b5 | Direct console I/O
2018-12-17T22:56:05.455739098Z 12 PC: 1785e | Flush input buffer and input