Sample viewer

vx.netlux.org/Virus.DOS.Preacher.476

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:05:05.499034119Z 53 PC: 12b9d | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T23:05:05.500633918Z 37 PC: 12bb8 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T23:05:05.501934118Z 74 PC: 12bcf | Reallocate memory
2018-12-17T23:05:05.503247962Z 60 PC: 12bd9 | Create or truncate file
2018-12-17T23:05:05.520482437Z 64 PC: 12be9 | Write file or device (Write 151 bytes on handle 5)
2018-12-17T23:05:05.525663233Z 62 PC: 12bed | Close file
2018-12-17T23:05:05.533766375Z 75 PC: 12c06 | Execute program
2018-12-17T23:05:05.544616922Z 9 PC: 22b33 | Display string (String= ' Mabuhay! This program came from Bahay Kawayan at http://come.to/hexfiles Putoksa Kawayan [email protected] ')
2018-12-17T23:05:05.560427334Z 76 PC: 22b37 | Terminate with return code (Return code = '36')
2018-12-17T23:05:05.56384838Z 49 PC: 12c13 | Terminate and stay resident (Return code = '0' | Memory size = '4096')