Sample viewer

vx.netlux.org/Trojan.DOS.Annihilation

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:07:21.57965172Z 48 PC: 12a4c | Get DOS version
2018-12-17T23:07:21.582382946Z 53 PC: 12bab | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:07:21.584161903Z 53 PC: 12bb8 | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T23:07:21.585673034Z 53 PC: 12bc5 | Get interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T23:07:21.587155934Z 53 PC: 12bd2 | Get interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T23:07:21.589088282Z 37 PC: 12be6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:07:21.590963782Z 74 PC: 12af4 | Reallocate memory
2018-12-17T23:07:21.593630819Z 68 PC: 13593 | I/O control for devices (Set for = '��')
2018-12-17T23:07:21.596822109Z 68 PC: 13593 | I/O control for devices (Set for = '��')
2018-12-17T23:07:21.599388803Z 64 PC: 13bd2 | Write file or device (Write 52 bytes on handle 1)
2018-12-17T23:07:21.603166284Z 28 PC: 1351d | Get allocation info for specified drive
2018-12-17T23:07:21.659915303Z 28 PC: 1351d | Get allocation info for specified drive
2018-12-17T23:07:21.662358638Z 28 PC: 1351d | Get allocation info for specified drive
2018-12-17T23:07:21.664821922Z 28 PC: 1351d | Get allocation info for specified drive
2018-12-17T23:07:21.669084591Z 28 PC: 1351d | Get allocation info for specified drive
2018-12-17T23:07:21.672420856Z 37 PC: 12bf2 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:07:21.674196754Z 37 PC: 12bfd | Set interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T23:07:21.676419606Z 37 PC: 12c08 | Set interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T23:07:21.678917097Z 37 PC: 12c13 | Set interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T23:07:21.680287534Z 76 PC: 12b9c | Terminate with return code (Return code = '255')