Sample viewer

vx.netlux.org/Virus.DOS.Ace.352

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:04:20.543759634Z 25 PC: 1ffbe | Get default drive
2018-12-17T23:04:20.558008281Z 26 PC: 2010b | Set disk transfer address
2018-12-17T23:04:20.559372334Z 80 PC: 13fb9 | Set current PSP
2018-12-17T23:04:20.560216764Z 48 PC: 13fbe | Get DOS version
2018-12-17T23:04:20.562545801Z 101 PC: 14044 | Get extended country info
2018-12-17T23:04:20.563906122Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-17T23:04:20.565146083Z 74 PC: 140ac | Reallocate memory
2018-12-17T23:04:20.567018466Z 25 PC: 140e3 | Get default drive
2018-12-17T23:04:20.568147147Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:04:20.569249312Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:04:20.570879543Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:04:20.575165881Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T23:04:20.577257654Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T23:04:20.581923079Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T23:04:20.584109208Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T23:04:20.587870504Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T23:04:20.590010837Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T23:04:20.593028464Z 2 PC: 13e6c | Character output (Char = '63')
2018-12-17T23:04:20.595305803Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T23:04:20.597523475Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:04:20.600783036Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T23:04:20.603135979Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:04:20.605407422Z 2 PC: 13e6c | Character output (Char = '66')
2018-12-17T23:04:20.608769818Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T23:04:20.611358793Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T23:04:20.613925505Z 2 PC: 13e6c | Character output (Char = '52')
2018-12-17T23:04:20.616784169Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T23:04:20.619021343Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.62119991Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T23:04:20.623993241Z 2 PC: 13e6c | Character output (Char = '53')
2018-12-17T23:04:20.626831776Z 2 PC: 13e6c | Character output (Char = '2d')
2018-12-17T23:04:20.629186445Z 2 PC: 13e6c | Character output (Char = '44')
2018-12-17T23:04:20.637076176Z 2 PC: 13e6c | Character output (Char = '4f')
2018-12-17T23:04:20.639390847Z 2 PC: 13e6c | Character output (Char = '53')
2018-12-17T23:04:20.641639955Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T23:04:20.644482889Z 2 PC: 13e6c | Character output (Char = '52')
2018-12-17T23:04:20.646907761Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T23:04:20.649244119Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.65245041Z 2 PC: 13e6c | Character output (Char = '56')
2018-12-17T23:04:20.655165381Z 2 PC: 13e6c | Character output (Char = '65')
2018-12-17T23:04:20.657474147Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T23:04:20.659858927Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T23:04:20.66275359Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T23:04:20.665052249Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:04:20.667437501Z 2 PC: 13e6c | Character output (Char = '6e')
2018-12-17T23:04:20.670431163Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.673198863Z 2 PC: 13e6c | Character output (Char = '36')
2018-12-17T23:04:20.675549913Z 2 PC: 13e6c | Character output (Char = '2e')
2018-12-17T23:04:20.678280809Z 2 PC: 13e6c | Character output (Char = '32')
2018-12-17T23:04:20.681006475Z 2 PC: 13e6c | Character output (Char = '32')
2018-12-17T23:04:20.683798706Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T23:04:20.686471424Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T23:04:20.690806564Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.693195528Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.69604418Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.698825871Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.701384846Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.70749493Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.709954243Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.712002964Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.714894424Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.716475264Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.718077628Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.720370525Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.72261617Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.724789834Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T23:04:20.727471615Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T23:04:20.730469316Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T23:04:20.734510097Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T23:04:20.737127414Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:04:20.739390967Z 2 PC: 13e6c | Character output (Char = '70')
2018-12-17T23:04:20.741557199Z 2 PC: 13e6c | Character output (Char = '79')
2018-12-17T23:04:20.744150409Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T23:04:20.746324449Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T23:04:20.748454584Z 2 PC: 13e6c | Character output (Char = '67')
2018-12-17T23:04:20.770247314Z 2 PC: 13e6c | Character output (Char = '68')
2018-12-17T23:04:20.771878643Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T23:04:20.773561828Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.775986062Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T23:04:20.777462248Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T23:04:20.778944491Z 2 PC: 13e6c | Character output (Char = '63')
2018-12-17T23:04:20.780863338Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T23:04:20.783122344Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:04:20.785338147Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T23:04:20.787958323Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:04:20.790070822Z 2 PC: 13e6c | Character output (Char = '66')
2018-12-17T23:04:20.792220066Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T23:04:20.794807922Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.797023168Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T23:04:20.799293574Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T23:04:20.801863462Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T23:04:20.803957826Z 2 PC: 13e6c | Character output (Char = '70')
2018-12-17T23:04:20.806143718Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T23:04:20.808739211Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T23:04:20.810925374Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T23:04:20.813295243Z 2 PC: 13e6c | Character output (Char = '38')
2018-12-17T23:04:20.815990843Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T23:04:20.819014193Z 2 PC: 13e6c | Character output (Char = '2d')
2018-12-17T23:04:20.821045576Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T23:04:20.823712243Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T23:04:20.825881863Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T23:04:20.827939021Z 2 PC: 13e6c | Character output (Char = '34')
2018-12-17T23:04:20.830643784Z 2 PC: 13e6c | Character output (Char = '2e')
2018-12-17T23:04:20.832872676Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T23:04:20.834788691Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T23:04:20.839902448Z 74 PC: 12d4c | Reallocate memory
2018-12-17T23:04:20.841984185Z 72 PC: 12d8d | Allocate memory
2018-12-17T23:04:20.844052811Z 72 PC: 12dc5 | Allocate memory
2018-12-17T23:04:20.846720995Z 72 PC: 12dcd | Allocate memory