Sample viewer

vx.netlux.org/Virus.DOS.Vienna.349

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:08:37.240893159Z 53 PC: 12b72 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:08:37.243465754Z 37 PC: 12b80 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:08:37.245034502Z 26 PC: 12b88 | Set disk transfer address
2018-12-17T23:08:37.246871315Z 78 PC: 12bd4 | Find first file
2018-12-17T23:08:37.250047264Z 37 PC: 12bec | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:08:37.252958095Z 26 PC: 12bf5 | Set disk transfer address
2018-12-17T23:08:37.255073711Z 53 PC: 12b72 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:08:37.257224314Z 37 PC: 12b80 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:08:37.266007532Z 26 PC: 12b88 | Set disk transfer address
2018-12-17T23:08:37.267800572Z 78 PC: 12bd4 | Find first file
2018-12-17T23:08:37.272777948Z 37 PC: 12bec | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:08:37.275657249Z 26 PC: 12bf5 | Set disk transfer address
2018-12-17T23:08:37.277571247Z 53 PC: 12b72 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:08:37.279585633Z 37 PC: 12b80 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:08:37.282109376Z 26 PC: 12b88 | Set disk transfer address
2018-12-17T23:08:37.292441206Z 78 PC: 12bd4 | Find first file
2018-12-17T23:08:37.297113457Z 37 PC: 12bec | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:08:37.306639472Z 26 PC: 12bf5 | Set disk transfer address
2018-12-17T23:08:37.37161632Z 64 PC: 1848b | Write file or device (Write 1292 bytes on handle 2)
2018-12-17T23:08:37.399638609Z 62 PC: 1848f | Close file