Sample viewer

vx.netlux.org/Virus.DOS.Lehigh.546

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:02:54.560752224Z 25 PC: 1ff33 | Get default drive
2018-12-17T23:02:54.56274064Z 74 PC: 1ff46 | Reallocate memory
2018-12-17T23:02:54.564309407Z 72 PC: 1ff58 | Allocate memory
2018-12-17T23:02:54.566050248Z 53 PC: 1ff63 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:54.568518926Z 37 PC: 1ff86 | Set interrupt vector (Interrupt = '68' AKA 'I/O control for devices')
2018-12-17T23:02:54.570216416Z 37 PC: 1ff8f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:54.572047857Z 80 PC: 13fb9 | Set current PSP
2018-12-17T23:02:54.574110071Z 48 PC: 13fbe | Get DOS version
2018-12-17T23:02:54.576944357Z 101 PC: 14044 | Get extended country info
2018-12-17T23:02:54.57934616Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-17T23:02:54.58221014Z 74 PC: 140ac | Reallocate memory
2018-12-17T23:02:54.584254792Z 25 PC: 140e3 | Get default drive
2018-12-17T23:02:54.585815735Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:02:54.588072144Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:54.589833103Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:54.593550577Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T23:02:54.609698347Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T23:02:54.614206257Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T23:02:54.617685985Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T23:02:54.622428886Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T23:02:54.627925173Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T23:02:54.630941751Z 2 PC: 13e6c | Character output (Char = '63')
2018-12-17T23:02:54.633657143Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T23:02:54.639599097Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:02:54.642253444Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T23:02:54.644780141Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:02:54.648298753Z 2 PC: 13e6c | Character output (Char = '66')
2018-12-17T23:02:54.651309169Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T23:02:54.65424245Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T23:02:54.657842814Z 2 PC: 13e6c | Character output (Char = '52')
2018-12-17T23:02:54.660475301Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T23:02:54.663310187Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.666572446Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T23:02:54.669382176Z 2 PC: 13e6c | Character output (Char = '53')
2018-12-17T23:02:54.67205114Z 2 PC: 13e6c | Character output (Char = '2d')
2018-12-17T23:02:54.675459814Z 2 PC: 13e6c | Character output (Char = '44')
2018-12-17T23:02:54.67830479Z 2 PC: 13e6c | Character output (Char = '4f')
2018-12-17T23:02:54.681017467Z 2 PC: 13e6c | Character output (Char = '53')
2018-12-17T23:02:54.684738788Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T23:02:54.687443189Z 2 PC: 13e6c | Character output (Char = '52')
2018-12-17T23:02:54.690192004Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T23:02:54.693800865Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.696084806Z 2 PC: 13e6c | Character output (Char = '56')
2018-12-17T23:02:54.698881591Z 2 PC: 13e6c | Character output (Char = '65')
2018-12-17T23:02:54.701832786Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T23:02:54.705832902Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T23:02:54.709748739Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T23:02:54.712235782Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:02:54.715504433Z 2 PC: 13e6c | Character output (Char = '6e')
2018-12-17T23:02:54.718079762Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.720650602Z 2 PC: 13e6c | Character output (Char = '36')
2018-12-17T23:02:54.723775343Z 2 PC: 13e6c | Character output (Char = '2e')
2018-12-17T23:02:54.726797331Z 2 PC: 13e6c | Character output (Char = '32')
2018-12-17T23:02:54.729588826Z 2 PC: 13e6c | Character output (Char = '32')
2018-12-17T23:02:54.733192687Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T23:02:54.735923398Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T23:02:54.740435926Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.744065937Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.746980663Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.750185304Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.75396189Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.756869473Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.759791913Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.763310645Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.76674082Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.77021671Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.773188264Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.777217744Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.779810075Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.782417654Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T23:02:54.786093351Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T23:02:54.789480484Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T23:02:54.793458469Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T23:02:54.797030139Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:02:54.799647076Z 2 PC: 13e6c | Character output (Char = '70')
2018-12-17T23:02:54.80224643Z 2 PC: 13e6c | Character output (Char = '79')
2018-12-17T23:02:54.805719245Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T23:02:54.808353174Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T23:02:54.811001039Z 2 PC: 13e6c | Character output (Char = '67')
2018-12-17T23:02:54.814610991Z 2 PC: 13e6c | Character output (Char = '68')
2018-12-17T23:02:54.817693503Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T23:02:54.82033171Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.823892009Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T23:02:54.829355875Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T23:02:54.832405996Z 2 PC: 13e6c | Character output (Char = '63')
2018-12-17T23:02:54.83752276Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T23:02:54.843910932Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:02:54.848319956Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T23:02:54.85484174Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:02:54.857673691Z 2 PC: 13e6c | Character output (Char = '66')
2018-12-17T23:02:54.86078681Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T23:02:54.864822202Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.868100862Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T23:02:54.870849126Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:02:54.874572171Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T23:02:54.87948448Z 2 PC: 13e6c | Character output (Char = '70')
2018-12-17T23:02:54.882298568Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:02:54.886242337Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T23:02:54.889320381Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T23:02:54.891998583Z 2 PC: 13e6c | Character output (Char = '38')
2018-12-17T23:02:54.89465281Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T23:02:54.898450565Z 2 PC: 13e6c | Character output (Char = '2d')
2018-12-17T23:02:54.901144647Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T23:02:54.903805346Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T23:02:54.908195094Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T23:02:54.91130668Z 2 PC: 13e6c | Character output (Char = '34')
2018-12-17T23:02:54.913961087Z 2 PC: 13e6c | Character output (Char = '2e')
2018-12-17T23:02:54.91754404Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T23:02:54.920227181Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T23:02:54.924895431Z 74 PC: 12d4c | Reallocate memory
2018-12-17T23:02:54.927494866Z 72 PC: 12d8d | Allocate memory
2018-12-17T23:02:54.92983361Z 72 PC: 12dc5 | Allocate memory
2018-12-17T23:02:54.931755832Z 72 PC: 12dcd | Allocate memory