Sample viewer

vx.netlux.org/Virus.DOS.Gotcha.610

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:05:39.987797295Z 218 PC: 14423 | UNKNOWN!
2018-12-17T23:05:39.989966171Z 37 PC: 14483 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:05:40.002809318Z 9 PC: 12d16 | Display string (String= ' BAT2EXEC 1.5 (c) 1990, 1991 Ziff Communications Co. PC Magazine þ Douglas Boling ')
2018-12-17T23:05:40.01062967Z 48 PC: 12d1b | Get DOS version
2018-12-17T23:05:40.012865038Z 74 PC: 12d2f | Reallocate memory
2018-12-17T23:05:40.014678122Z 72 PC: 12d40 | Allocate memory
2018-12-17T23:05:40.016628028Z 72 PC: 12d4f | Allocate memory
2018-12-17T23:05:40.019345465Z 9 PC: 137f0 | Display string (String= ' Syntax: BAT2EXEC filename.ext ')
2018-12-17T23:05:40.030654739Z 9 PC: 137f0 | Display string (String= ' ')
2018-12-17T23:05:40.035251297Z 73 PC: 12ee4 | Release memory
2018-12-17T23:05:40.036890576Z 62 PC: 12ef1 | Close file
2018-12-17T23:05:40.039937235Z 76 PC: 12ef6 | Terminate with return code (Return code = '1')