Sample viewer

vx.netlux.org/Virus.DOS.Necropolis.e

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:00:05.399887204Z 48 PC: 12b44 | Get DOS version
2018-12-17T23:00:05.402934882Z 74 PC: 12b5b | Reallocate memory
2018-12-17T23:00:05.405923268Z 11 PC: 12c6f | Get input status
2018-12-17T23:00:05.458469155Z 73 PC: 1325c | Release memory
2018-12-17T23:00:05.460425882Z 73 PC: 13264 | Release memory
2018-12-17T23:00:05.472084491Z 80 PC: 1326c | Set current PSP
2018-12-17T23:00:05.47370169Z 37 PC: 13275 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:00:05.475616899Z 72 PC: 132eb | Allocate memory
2018-12-17T23:00:05.482172669Z 72 PC: 132eb | Allocate memory
2018-12-17T23:00:05.484667417Z 73 PC: 12b90 | Release memory
2018-12-17T23:00:05.487881637Z 61 PC: 132eb | Open file (Filename = '')
2018-12-17T23:00:05.496315246Z 53 PC: 12faa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:00:05.498102655Z 53 PC: 12fb5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:05.499868574Z 37 PC: 12fc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:05.505606517Z 37 PC: 12fc9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:00:05.507303957Z 66 PC: 132eb | Move file pointer
2018-12-17T23:00:05.509562992Z 63 PC: 132eb | Read file or device (Read 26 bytes on handle 5)
2018-12-17T23:00:05.513567427Z 66 PC: 132eb | Move file pointer
2018-12-17T23:00:05.515305443Z 63 PC: 132eb | Read file or device (Read 2007 bytes on handle 5)
2018-12-17T23:00:05.523465097Z 13 PC: 130f7 | Disk reset
2018-12-17T23:00:05.526265761Z 53 PC: 130ff | Get interrupt vector (Interrupt = '64' AKA 'Write file or device')
2018-12-17T23:00:05.528359505Z 53 PC: 1310b | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:00:05.530375474Z 37 PC: 1311b | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:00:05.532629029Z 37 PC: 13127 | Set interrupt vector (Interrupt = '64' AKA 'Write file or device')
2018-12-17T23:00:05.534746047Z 66 PC: 132eb | Move file pointer
2018-12-17T23:00:05.536908491Z 64 PC: 132eb | Write file or device (Write 2015 bytes on handle 5)
2018-12-17T23:00:05.555048631Z 66 PC: 132eb | Move file pointer
2018-12-17T23:00:05.558541204Z 64 PC: 132eb | Write file or device (Write 2007 bytes on handle 5)
2018-12-17T23:00:05.578079221Z 66 PC: 132eb | Move file pointer
2018-12-17T23:00:05.580083007Z 64 PC: 132eb | Write file or device (Write 26 bytes on handle 5)
2018-12-17T23:00:05.597870795Z 13 PC: 131a6 | Disk reset
2018-12-17T23:00:05.605795266Z 37 PC: 131b0 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:00:05.607675639Z 37 PC: 131b9 | Set interrupt vector (Interrupt = '64' AKA 'Write file or device')
2018-12-17T23:00:05.617833108Z 37 PC: 130dd | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:05.619573749Z 37 PC: 130e5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:00:05.621322295Z 62 PC: 132eb | Close file
2018-12-17T23:00:05.624105866Z 53 PC: 12e90 | Get interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:00:05.625738554Z 75 PC: 132eb | Execute program
2018-12-17T23:00:05.642928228Z 75 PC: 131eb | Execute program