Sample viewer

vx.netlux.org/Virus.DOS.Poss.2435.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:02:44.816820972Z 48 PC: 133b8 | Get DOS version
2018-12-17T23:02:44.819095378Z 53 PC: 131f9 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:44.820255341Z 37 PC: 12f2b | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:44.821365973Z 53 PC: 12f2b | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T23:02:44.82297355Z 37 PC: 12f2b | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T23:02:44.824329357Z 73 PC: 12f2b | Release memory
2018-12-17T23:02:44.825877203Z 49 PC: 12f2b | Terminate and stay resident (Return code = '147' | Memory size = '184')
2018-12-17T23:02:44.82808487Z 48 PC: 13293 | Get DOS version
2018-12-17T23:02:44.830129841Z 75 PC: 12f2b | Execute program
2018-12-17T23:02:44.843936455Z 48 PC: 13f98 | Get DOS version
2018-12-17T23:02:44.845097663Z 9 PC: 136b3 | Display string (String= ' Mabuhay! This program came from Bahay Kawayan at http://come.to/hexfiles Putoksa Kawayan [email protected] ')
2018-12-17T23:02:44.859460927Z 76 PC: 136b7 | Terminate with return code (Return code = '36')
2018-12-17T23:02:44.862292406Z 77 PC: 13305 | Get program return code