Sample viewer

vx.netlux.org/Virus.DOS.Crecs.7000

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:05:32.83664881Z 222 PC: 12a9f | UNKNOWN!
2018-12-17T23:05:32.838699977Z 53 PC: 12aa9 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:05:32.840564663Z 37 PC: 12b02 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:05:32.842298894Z 53 PC: 12b07 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:05:32.844325886Z 37 PC: 12b19 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:05:32.846685192Z 67 PC: 12c6a | Get or set file attributes
2018-12-17T23:05:32.853998354Z 67 PC: 12c6a | Get or set file attributes
2018-12-17T23:05:32.872283136Z 61 PC: 12c6a | Open file (Filename = '')
2018-12-17T23:05:32.883551384Z 66 PC: 12c6a | Move file pointer
2018-12-17T23:05:32.885332964Z 87 PC: 12c6a | Get or set file date and time
2018-12-17T23:05:32.88756439Z 62 PC: 12c6a | Close file
2018-12-17T23:05:32.891213783Z 60 PC: 12c6a | Create or truncate file
2018-12-17T23:05:32.906753774Z 64 PC: 12c6a | Write file or device (Write 69 bytes on handle 5)
2018-12-17T23:05:32.911073647Z 87 PC: 12c6a | Get or set file date and time
2018-12-17T23:05:32.913323757Z 62 PC: 12c6a | Close file
2018-12-17T23:05:32.930122876Z 67 PC: 12c6a | Get or set file attributes
2018-12-17T23:05:32.943251914Z 74 PC: 12c6a | Reallocate memory
2018-12-17T23:05:32.946255822Z 75 PC: 12c6a | Execute program
2018-12-17T23:05:32.968659149Z 80 PC: 24029 | Set current PSP
2018-12-17T23:05:32.969828959Z 48 PC: 2402e | Get DOS version
2018-12-17T23:05:32.972072006Z 99 PC: 2a810 | Get DBCS lead byte table pointer
2018-12-17T23:05:32.976314133Z 101 PC: 240b4 | Get extended country info
2018-12-17T23:05:32.978181414Z 99 PC: 240ba | Get DBCS lead byte table pointer
2018-12-17T23:05:32.979963986Z 74 PC: 2411c | Reallocate memory
2018-12-17T23:05:32.983020784Z 25 PC: 24153 | Get default drive
2018-12-17T23:05:32.984591297Z 37 PC: 23c13 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:05:32.986138837Z 37 PC: 23c1a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:05:32.990226534Z 37 PC: 23c21 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:05:32.995600309Z 74 PC: 22dbc | Reallocate memory
2018-12-17T23:05:32.998086714Z 72 PC: 22dfd | Allocate memory
2018-12-17T23:05:33.001518206Z 72 PC: 22e35 | Allocate memory
2018-12-17T23:05:33.003955108Z 72 PC: 22e3d | Allocate memory
2018-12-17T23:05:33.006345764Z 73 PC: 22e5a | Release memory