Sample viewer

vx.netlux.org/Trojan.DOS.FormatC.h

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:06:24.665629065Z 48 PC: 12f29 | Get DOS version
2018-12-17T23:06:24.668633671Z 74 PC: 12cec | Reallocate memory
2018-12-17T23:06:24.67010927Z 74 PC: 12cf0 | Reallocate memory
2018-12-17T23:06:24.67802074Z 74 PC: 15325 | Reallocate memory
2018-12-17T23:06:24.680999836Z 75 PC: 15440 | Execute program
2018-12-17T23:06:24.702696781Z 80 PC: 26519 | Set current PSP
2018-12-17T23:06:24.703537148Z 48 PC: 2651e | Get DOS version
2018-12-17T23:06:24.705606323Z 99 PC: 2cd00 | Get DBCS lead byte table pointer
2018-12-17T23:06:24.708185603Z 101 PC: 265a4 | Get extended country info
2018-12-17T23:06:24.709833068Z 99 PC: 265aa | Get DBCS lead byte table pointer
2018-12-17T23:06:24.713053826Z 74 PC: 2660c | Reallocate memory
2018-12-17T23:06:24.714828782Z 25 PC: 26643 | Get default drive
2018-12-17T23:06:24.716249672Z 37 PC: 26103 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:06:24.718780362Z 37 PC: 2610a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:06:24.720243618Z 37 PC: 26111 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:06:24.72476086Z 74 PC: 252ac | Reallocate memory
2018-12-17T23:06:24.726582451Z 72 PC: 252ed | Allocate memory
2018-12-17T23:06:24.728603674Z 72 PC: 25325 | Allocate memory
2018-12-17T23:06:24.730289321Z 72 PC: 2532d | Allocate memory