Sample viewer

vx.netlux.org/Virus.DOS.LittBrother.321

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:04:04.780224056Z 37 PC: 12a6c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:04:04.782089214Z 74 PC: 12a77 | Reallocate memory
2018-12-17T23:04:04.783645271Z 51 PC: 609 | Get or set Ctrl-Break
2018-12-17T23:04:04.784465203Z 51 PC: 60f | Get or set Ctrl-Break
2018-12-17T23:04:04.78592553Z 53 PC: 614 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:04:04.788267786Z 37 PC: 620 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:04:04.790018429Z 91 PC: 62a | Create new file
2018-12-17T23:04:04.797664081Z 37 PC: 650 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:04:04.799363648Z 51 PC: 654 | Get or set Ctrl-Break
2018-12-17T23:04:04.800486941Z 75 PC: 12aaa | Execute program
2018-12-17T23:04:04.807662078Z 77 PC: 12aae | Get program return code
2018-12-17T23:04:04.810011447Z 76 PC: 12ab2 | Terminate with return code (Return code = '0')