Sample viewer

vx.netlux.org/Virus.DOS.Viking.2000

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:07:33.690654062Z 80 PC: 12ba5 | Set current PSP
2018-12-17T23:07:33.692726145Z 26 PC: 12baf | Set disk transfer address
2018-12-17T23:07:33.694475391Z 53 PC: 13030 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:07:33.695930812Z 37 PC: 13030 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:07:33.697600253Z 61 PC: 13030 | Open file (Filename = '��������������W')
2018-12-17T23:07:33.705355612Z 63 PC: 13030 | Read file or device (Read 24 bytes on handle 5)
2018-12-17T23:07:33.7086136Z 66 PC: 13030 | Move file pointer
2018-12-17T23:07:33.710559635Z 62 PC: 13030 | Close file
2018-12-17T23:07:33.713401699Z 67 PC: 13030 | Get or set file attributes
2018-12-17T23:07:33.719712013Z 67 PC: 13030 | Get or set file attributes
2018-12-17T23:07:34.059312207Z 61 PC: 13030 | Open file (Filename = '��������������W')
2018-12-17T23:07:34.068150895Z 87 PC: 13030 | Get or set file date and time
2018-12-17T23:07:34.070088633Z 66 PC: 13030 | Move file pointer
2018-12-17T23:07:34.072030157Z 63 PC: 13030 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:07:34.076068007Z 66 PC: 13030 | Move file pointer
2018-12-17T23:07:34.077769779Z 64 PC: 13030 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:07:34.082553236Z 66 PC: 13030 | Move file pointer
2018-12-17T23:07:34.084589319Z 64 PC: 13030 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:07:34.0959054Z 87 PC: 13030 | Get or set file date and time
2018-12-17T23:07:34.09832466Z 62 PC: 13030 | Close file
2018-12-17T23:07:34.107552659Z 67 PC: 13030 | Get or set file attributes
2018-12-17T23:07:34.117641362Z 37 PC: 13030 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:07:34.120004707Z 9 PC: 14032 | Display string (Could not find end pointer)
2018-12-17T23:07:34.124802402Z 76 PC: 14038 | Terminate with return code (Return code = '0')