Sample viewer

vx.netlux.org/Virus.DOS.Mephisto.4.1223

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:58:07.772918739Z 53 PC: 12f8f | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:58:07.775684632Z 71 PC: 12de8 | Get current directory
2018-12-17T22:58:07.779763707Z 26 PC: 12e04 | Set disk transfer address
2018-12-17T22:58:07.781305417Z 78 PC: 12e10 | Find first file
2018-12-17T22:58:07.788211958Z 79 PC: 12e3d | Find next file
2018-12-17T22:58:07.792199723Z 26 PC: 12e58 | Set disk transfer address
2018-12-17T22:58:07.794491522Z 78 PC: 12e71 | Find first file
2018-12-17T22:58:07.8011067Z 59 PC: 12e9f | Change current directory
2018-12-17T22:58:07.806743299Z 26 PC: 12ea8 | Set disk transfer address
2018-12-17T22:58:07.808186828Z 78 PC: 12eb4 | Find first file
2018-12-17T22:58:07.820394123Z 59 PC: 12d71 | Change current directory
2018-12-17T22:58:07.823256425Z 26 PC: 12d91 | Set disk transfer address
2018-12-17T22:58:07.824672483Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-17T22:58:07.829110204Z 76 PC: 12a86 | Terminate with return code (Return code = '36')