Sample viewer

vx.netlux.org/Virus.DOS.Jacov.558

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:56:29.3561836Z 53 PC: 12c45 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:29.358478139Z 37 PC: 12c53 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:29.360246982Z 26 PC: 12c7a | Set disk transfer address
2018-12-17T22:56:29.361781428Z 78 PC: 12c97 | Find first file
2018-12-17T22:56:29.369181845Z 61 PC: 12ca3 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:56:29.386666125Z 63 PC: 12caf | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:56:29.389350797Z 62 PC: 12cb3 | Close file
2018-12-17T22:56:29.391237091Z 79 PC: 12c97 | Find next file
2018-12-17T22:56:29.395219854Z 78 PC: 12c97 | Find first file
2018-12-17T22:56:29.401892512Z 37 PC: 12dd1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:29.40330401Z 26 PC: 12ddb | Set disk transfer address
2018-12-17T22:56:29.40533004Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-17T22:56:29.409922984Z 76 PC: 12a86 | Terminate with return code (Return code = '36')