Sample viewer

vx.netlux.org/Virus.DOS.Elf.2647

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:00:53.568929424Z 9 PC: 12a55 | Display string (String= 'Elf.2647 ')
2018-12-17T23:00:53.57189924Z 202 PC: 12a5b | UNKNOWN!
2018-12-17T23:00:53.573217795Z 9 PC: 12a72 | Display string (String= 'Old Interrupt 0x21: ')
2018-12-17T23:00:53.574892789Z 53 PC: 12a77 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:00:53.583402482Z 53 PC: 13b61 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:00:53.585241562Z 53 PC: 13bab | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:00:53.587559466Z 202 PC: 13c42 | UNKNOWN!
2018-12-17T23:00:53.589786503Z 51 PC: 13c49 | Get or set Ctrl-Break
2018-12-17T23:00:53.598493555Z 53 PC: 1433f | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:00:53.600016007Z 37 PC: 1434c | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:00:53.601602089Z 82 PC: 14350 | Get DOS internal pointers (SYSVARS)
2018-12-17T23:00:53.603775561Z 48 PC: 14368 | Get DOS version
2018-12-17T23:00:53.605643476Z 37 PC: 1436f | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:00:53.607310063Z 9 PC: 12a8e | Display string (String= ' New Interrupt 0x21: ')
2018-12-17T23:00:53.618034615Z 53 PC: 12a93 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:00:53.620501437Z 202 PC: 12b26 | UNKNOWN!
2018-12-17T23:00:53.62163626Z 76 PC: 12aaf | Terminate with return code (Return code = '0')