Sample viewer

vx.netlux.org/Virus.DOS.Costin.703

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:00:55.405702472Z 53 PC: 138c6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:00:55.408485905Z 53 PC: 138d2 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:00:55.410121452Z 53 PC: 138de | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T23:00:55.411583412Z 53 PC: 138ea | Get interrupt vector (Interrupt = '40' AKA 'Random block write')
2018-12-17T23:00:55.413289257Z 53 PC: 138f6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:55.41726541Z 37 PC: 13906 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:00:55.418783122Z 37 PC: 1390d | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:00:55.420226452Z 37 PC: 13914 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T23:00:55.422244932Z 37 PC: 1391b | Set interrupt vector (Interrupt = '40' AKA 'Random block write')
2018-12-17T23:00:55.424587084Z 9 PC: 12b33 | Display string (Could not find end pointer)
2018-12-17T23:00:55.437550005Z 76 PC: 12b37 | Terminate with return code (Return code = '36')